https://ones.com/blog/knowledge/mastering-cloudwatch-sensitive-data-masking/