Release 9.2.17.1¶

Snowflake Connector – Omni Metadata Sync and Column Permissions¶

• Fixed PolicySync so that with Omni metadata sync enabled, Snowflake table columns are not dropped from permission processing when only some columns are in the policy-impact set.
• Stored permissions and metadata sync updates now include all table columns, keeping the catalog consistent with the full table.

Databricks Unity Catalog Connector – Support Multiple Permissions in Single GRANT Statement¶

• Enable granting multiple permissions in a single GRANT statement for the same principal and resource.

Lake Formation Connector – Performance and Reliability Improvements¶

• Serialized batch AWS API calls for cross-account principals to avoid concurrent update conflicts and reduce throttling.
• Made Solr audit log publishing asynchronous to prevent blocking policy sync flows and improve audit ingestion throughput and latency.
• Unified processing of added and updated resources within a single thread pool executor flow to reduce context switching and overhead.

MSSQL Connector - Native Masking , Multi-Database Support and Omni Migration for MSSQL-19¶

• Introduced native masking and unmasking support for the MSSQL connector, enabling enhanced data security and controlled data access.
• Added support for single-server, multi-database configurations, allowing improved scalability and simplified management.
• Added Omni support for the MSSQL_19 PolicySync connector, enabling integration with the Omni Metadata Service for centralized metadata and governance.

[PrivaceraCloud only] Increased Audit Server Request Size Limit¶

Increased the AUDIT_SERVER_MAX_CONTENT_LENGTH limit from 50 MB to 100 MB. This update supports larger audit payloads and reduces request rejections caused by payload size limits.

[PrivaceraCloud only] Improved V2 Tag Import Operation¶

Fixed an issue where tags imported using the V2 tag import operation were not propagated to the policy cache. Imported tags are now correctly reflected in the policy cache.

Base Image Upgraded¶

Updated the base image to a newer Debian version to address known security vulnerabilities identified in CVE report.

Update Application Dependencies¶

Upgraded application dependencies to address known security vulnerabilities identified in CVE (Common Vulnerabilities and Exposures) report.

Updated Application Dependencies¶

Upgraded application dependencies to address known security vulnerabilities identified in CVE (Common Vulnerabilities and Exposures) report.

Canada-Specific PII Detection (BN, GST/HST, Health Card, Address, Person Name, City, Province)¶

Discovery now supports detection of the following Canada-specific PII data types:

• Canada Business Number (BN)
• Canada GST/HST program account identifier
• Canada health card
• Canada address
• Canada person name
• Canada city
• Canada province and territory

These models are available across supported connectors. See Heuristic Models for configuration details and Using Dictionaries for dictionary match types and usage.

AWS DynamoDB: Untagged Tables in Discovery Classification¶

Discovery can now include untagged AWS DynamoDB tables in classification results, enabling visibility into table schemas and tagging information through the Discovery resourceInfo API.