What is Amazon Macie?
Amazon Macie is a fully managed data security and data privacy service that uses Machine Learning and pattern matching to discover and protect your sensitive data in AWS.
What does it look for?
- PII (Personally Identifiable Information): Names, Addresses, Passport Numbers.
- PHI (Protected Health Information): Medical records.
- Financial Data: Credit Card Numbers (PCI-DSS validation).
Exam Tips
[!IMPORTANT] S3 Focused: Macie specifically scans Amazon S3 Buckets. It does not scan RDS or DynamoDB directly.
[!NOTE] Keyword: If you see "Sensitive Data", "PII", or "Machine Learning" relating to storage/security, think Macie.
Common Use Cases
- Compliance: Verifying that no customer credit card numbers are accidentally stored in a public S3 bucket.
- Data Governance: Continuously monitoring S3 buckets for unexpected changes in data classification.