# Amazon Macie

> An AWS service that finds sensitive data in your S3 buckets and flags risky buckets.

- Level: Intermediate
- Topics: AWS, Security
- URL: https://tidbit.legios.com.ar/amazon-macie/
- In Spanish: [Amazon Macie](https://tidbit.legios.com.ar/es/amazon-macie/)

**Amazon Macie** is a data security service focused on Amazon S3. Companies pile up years of files in buckets: exports, logs, backups, spreadsheets someone uploaded once. Nobody remembers which of them contain customer names, ID numbers, credit card numbers or passwords. Macie goes looking for that.

It does two jobs. First, it keeps an inventory of your buckets and watches how they are configured, for example whether one becomes publicly accessible or is not encrypted. Second, it opens objects and inspects their contents, using pattern matching and machine learning to recognize sensitive data. You can let it sample buckets automatically and continuously, or run a discovery job over specific buckets. You can also add your own patterns, like the format of your internal customer IDs.

Each problem it finds becomes a **finding** that you review in the console or send elsewhere, such as Amazon EventBridge for automation or AWS Security Hub for a combined view. Macie is especially useful for privacy rules like GDPR: you cannot protect personal data if you do not know where it is.

## An analogy

An auditor walking through a warehouse of boxes, opening a sample of each, and putting a red sticker on any box that holds passports or bank statements, plus a note on any door left unlocked.

## Keep in mind

- Works on data stored in Amazon S3.
- Detects sensitive data with built-in patterns, machine learning and your own custom rules.
- Also flags bucket risks, like public access or missing encryption.
- It reports findings; fixing the problem is up to you or your automation.

## Go deeper

- [What is Amazon Macie? (official docs)](https://docs.aws.amazon.com/macie/latest/user/what-is-macie.html)
- [Amazon Macie product page](https://aws.amazon.com/macie/)

## Related terms

- [Amazon S3](https://tidbit.legios.com.ar/amazon-s3/): A giant online drawer for files, rented by the gigabyte.
- [Backup](https://tidbit.legios.com.ar/backup/): A separate copy of your data, kept so you can get it back when the original is lost.
- [Spreadsheet vs database](https://tidbit.legios.com.ar/spreadsheet-vs-database/): Why a company that runs on Excel eventually needs a real database.
- [Encryption](https://tidbit.legios.com.ar/encryption/): Scrambling data so that only someone with the key can read it.
- [Machine learning](https://tidbit.legios.com.ar/machine-learning/): Teaching computers by showing them examples instead of writing every rule.
- [Amazon EventBridge](https://tidbit.legios.com.ar/amazon-eventbridge/): A switchboard that routes "something happened" messages to whoever cares.
- [AWS Security Hub](https://tidbit.legios.com.ar/aws-security-hub/): One place where AWS gathers security alerts from many services and ranks them.
- [Personal data and GDPR](https://tidbit.legios.com.ar/personal-data-and-gdpr/): Information about you, and the laws that say who can use it and how.