Snowflake, Column Level Security, Dynamic Data Masking.
replace masking policy mask_pii_text_data as (pii_input string) returns string -> to_varchar('--PII--'); -- associate this masking object with tag. alter tag pii_policy_tag set masking policy mask_pii_text_data; -- unset the tag use role accountadmin; ALTER TAG finance_policy_tag unset MASKING