Built-in transformations
Discover a list of the built-in transformations
Mask transformations
Vault provide these built-in mask transformations:
| Data type | Mask name | Transformed example |
|---|---|---|
| mask | j**********@gmail.com | |
| EMAIL_STRICT | mask | j**********@gmail.com |
| SSN | mask | ***-**-4357 |
| BAN | mask | *******7917 |
| PHONE_NUMBER | mask | ***-****-2795 |
| CC_NUMBER | mask | **** **** **** 9573 |
Size transformations
Vault provide these built-in size transformations:
| Data type | Mask name | Transformed example |
|---|---|---|
| BLOB | size | 1024 |
Token transformations
Vault provides a token transformation for all built-in data types. This transformation retrieves the pci token for the property, if one exists for the default scope.
You create a token for SSN using the CLI like this:
pvault token create --props ssn --type pci --collection customers --object-id 05161167-344d-4229-b3f8-5d44daf6780f
And get a response similar to this:
+--------------------------------------+
| token_id |
+--------------------------------------+
| c37e7da2-1f87-4693-8002-e50bcc5fd9ef |
+--------------------------------------+
You can then access the token of SSN using the token transformation like this:
pvault object get --id 05161167-344d-4229-b3f8-5d44daf6780f --collection customers --props id,ssn.token
And get a response similar to this:
Displaying 1 result.
+--------------------------------------+--------------------------------------+
| id | ssn.token |
+--------------------------------------+--------------------------------------+
| c5f7f35e-b3a0-4857-8a8f-a5c83e87d488 | c37e7da2-1f87-4693-8002-e50bcc5fd9ef |
+--------------------------------------+--------------------------------------+
See Tokenize personal data for more information about tokenization.