Amazon Macie
Monitoring & DetectionAmazon Macie is a fully managed data security and privacy service that uses machine learning and pattern matching to discover and protect sensitive data in S3.
What It Detects
- PII: names, addresses, SSNs, passport numbers, driver's licenses
- Financial: credit card numbers, bank account numbers
- Health: PHI, medical record numbers, health insurance IDs
- Credentials: AWS secret keys, API keys, private keys, database connection strings
- Custom Data Identifiers: regex patterns for your organization's specific data types
Key Features
- Automated Discovery: samples and analyzes S3 objects automatically across all buckets
- Bucket-level Security Assessment: public access, encryption, replication, shared access
- Sensitive Data Discovery Jobs: targeted scanning of specific buckets with scheduling
- Multi-account: manage via Organizations delegated administrator
- Findings: sent to Security Hub and EventBridge for automated remediation
Related AWS Services
Related Terms
Security controls for Amazon S3 including Block Public Access, bucket policies, encryption, access points, Object Lock, and access logging.
AWS service that aggregates security findings from GuardDuty, Inspector, Macie, and third-party tools into a single dashboard with compliance scoring.
Meeting regulatory requirements and industry standards (SOC 2, HIPAA, GDPR, PCI DSS, CIS) for data protection, access control, and security practices in the cloud.
Protecting stored data by encrypting it on disk so that it cannot be read without the encryption key, even if the storage media is compromised.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.