What problem does it solve?
Organizations storing data in Amazon S3 often lack visibility into where PII, financial records, and credentials actually reside, making compliance and breach prevention difficult. This Skill guides the deployment of Amazon Macie to automatically discover, classify, and report sensitive data across S3 buckets.
Core Features & Use Cases
- Automated Sensitive Data Discovery: Enable Macie and its automated discovery configuration via AWS CLI or Terraform, with verification commands to confirm scanning is actually running.
- Classification Jobs & Custom Identifiers: Create one-time or scheduled classification jobs with scoping rules, plus custom regex-based data identifiers and allow lists to reduce false positives.
- Findings Management & Response: Query and export findings, integrate with Security Hub and EventBridge, and trigger Lambda-based automated remediation such as tagging and SNS alerting.
- Use Case: A security engineer needs to prove GDPR compliance for customer data in S3. Use this Skill to enable Macie across an AWS Organization, run scheduled scans on production buckets, and route high-severity findings to the security team automatically.
Quick Start
Enable Amazon Macie in my AWS account, turn on automated sensitive data discovery, and create a scheduled classification job for my production S3 buckets.
