According to semantic-conventions, a DB instrumentation should have the option to sanitize sensitive data from either db.statement or db.operation attributes. Consider using instrumentation.dbapi to reduce instrumentation-specific logic & tests. This issue seems relevant for the following instrumentations:

• Implement sensitive data sanitization for botocore instrumentation(dynamodb extention) #1544
• Implement sensitive data sanitization for elasticsearch instrumentation #1545
• Implement sensitive data sanitization for pymemcache instrumentation #1546
• Implement sensitive data sanitization for pymongo instrumentation #1547
• Implement sensitive data sanitization for redis instrumentation #1548
• Implement sensitive data sanitization for sqlalchemy instrumentation #1549
• Implement sensitive data sanitization for psycopg2 instrumentation #1734

13042023 Edit: Updating this issue with database specifications to add db.statement attribution only if it's sanitized.

https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/trace/semantic_conventions/database.md#call-level-attributes