Amazon Macie mindmap

Amazon Macie

Data security service that uses machine learning and pattern matching to discover and help protect sensitive data in Amazon S3

• Bucket inventory and security: Automatic inventory of your S3 buckets
  • Public access: Buckets that are publicly accessible
  • Encryption: Buckets and objects that are not encrypted
  • Sharing: Buckets shared with other accounts
• Sensitive data discovery: Two ways to find sensitive data in S3
  • Automated sensitive data discovery: Samples objects across your S3 estate on an ongoing basis
  • Discovery jobs: One-time or scheduled deep scans of buckets you choose
  • Sensitivity score: A score for each bucket based on what was found
• What Macie detects: Built-in and custom detection criteria
  • Managed data identifiers: Built-in detection of personal information, financial data and credentials
  • Custom data identifiers: Your own regular expressions with keywords and proximity rules
  • Allow lists: Text that Macie should ignore
• Findings: Reports of policy issues and sensitive data
  • Policy findings: Security or privacy issues with a bucket
  • Sensitive data findings: Sensitive data found in an object, with its location
  • Sensitive data discovery results: Detailed records stored in an S3 bucket you choose
  • Retrieve samples: View sample occurrences of sensitive data
• Integrations: Send findings to other tools
  • AWS Security Hub: Findings appear with your other security findings
  • Amazon EventBridge: Automate remediation and alerts
• Multi-account management: Delegated administrator for every account in the organization
  • 30-day free trial: Bucket inventory and, depending on settings, automated discovery