MLSEC-02: Design data encryption and obfuscation 

Consider how personal data should be protected. Field level encryption or obfuscation can be used to protect personally identifiable data. 

Implementation plan

• Audit data for attributes requiring special treatment - Identify fields containing data requiring special treatment, such as field level encryption, data masking or obfuscation

Blogs

• Introducing PII Data Identification and Handling Using AWS Glue Databrew

• 7 ways to improve security of your machine learning workflows

• Secure deployment of Amazon SageMaker resources