Best practices for data discovery with the new Amazon Macie
summary
Amazon Macie now centralizes S3 inventory and sensitive-data scanning using Delegated Administrator and auto-enable across Organizations, with jobs up to 500 buckets and the first 30 days of inventory free then $0.10 per bucket/month; sensitive-data discovery reads objects (first 1 GB discovery free) and emits one finding per object (up to 15 locations) while detailed S3 reports include up to 1000 locations. Findings go to EventBridge→Kinesis→Elasticsearch for Kibana or to S3 then Athena/QuickSight, and EventBridge rules trigger Step Functions that can create scans, tag buckets, or revoke public/replication access.
AI-written summary · about
chapters (11)
- 0:00Intro
- 1:07What is Amazon Macie?
- 3:13Scalable and centralized management
- 4:26Evaluate bucket security posture
- 6:04Prioritize sensitive data discovery jobs
- 8:29Run inspection jobs on datasets
- 12:02Amazon Macie findings Policy findings
- 13:13Example: Kibana dashboard
- 16:14Example: Quicksight dashboard
- 19:51Continuous inventory evaluation and data governance
- 20:17Amazon Macie: Use cases
related talks
15mDemo - Monitor your Amazon S3 inventory & identify sensitive data
26mDiscover the features of the revamped Amazon Macie for data classification and protection
39mData Classification and Tracking using Amazon Macie
27mProactively identifying threats & protecting sensitive data in S3
48mDevSecOps: Spin Up Cloud Security, Discover, Classify and Protect Sensitive Data
26mGenerative AI driven sensitive data protection
34mHow Amazon MGM Studios protects its most important data
51mInnovations in AWS detection and response services