I would lean towards a "scrubbed production clone".
Maybe have a nightly (or whatever) process that does this automatically and dumps it into the QA environment which your CI/CD tests run against.
Then if a dev wants the latest data, they just copy it from the QA environment (or protected s3 bucket) and they are ready to roll.