Amazon Macie
Sensitive-data discovery and S3 bucket security posture monitoring.
- Provider
- aws
- Kind
- Monitoring
- Category
- Operations
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| alertGrouping | boolean | — | no | false | inherited |
| automatedSensitiveDataDiscovery | boolean | — | no | — | inherited |
| bucketInventoryMonitoring | boolean | — | no | true | inherited |
| collectorMode | enum | pull | push | no | pull | ▸ pull |
| customDataIdentifiers | boolean | — | no | false | inherited |
| discoveryJobSchedule | enum | one-time | daily | weekly | monthly | no | — | inherited |
| independentOfMonitored | boolean | — | no | false | ▸ false |
| managed | boolean | — | no | false | ▸ true |
| organizationWide | boolean | — | no | false | inherited |
| retentionDays | integer | — | no | — | ▸ 90 |
| signal | enum | metrics | logs | traces | alerts | all | no | metrics | ▸ alerts |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "macie", component: "aws-macie" }ActionTrailalibaba-actiontrailApplication Real-Time Monitoring Servicealibaba-armsCloudMonitoralibaba-cloud-monitorDatabase Autonomy Servicealibaba-dasSimple Log Servicealibaba-log-serviceSecurity Centeralibaba-security-centerAmazon CloudWatch investigationsaws-aiopsAWS Audit Manageraws-audit-managerAWS CloudTrailaws-cloudtrailAWS CloudTrail Lakeaws-cloudtrail-lakeAmazon CloudWatch Application Insightsaws-cloudwatch-application-insightsAmazon CloudWatch Application Signalsaws-cloudwatch-application-signalsAmazon CloudWatch Internet Monitoraws-cloudwatch-internet-monitorAmazon CloudWatch Logsaws-cloudwatch-logsAmazon CloudWatch Network Flow Monitoraws-cloudwatch-network-flow-monitorAmazon CloudWatch Network Monitoraws-cloudwatch-network-monitorAmazon CloudWatch RUMaws-cloudwatch-rumAmazon CloudWatch Syntheticsaws-cloudwatch-syntheticsAmazon CodeGuru Profileraws-codeguru-profilerAWS Compute Optimizeraws-compute-optimizerAmazon Detectiveaws-detectiveAmazon DevOps Guruaws-devops-guruAmazon GuardDutyaws-guarddutyAmazon Inspectoraws-inspectorAWS IoT Device Defenderaws-iot-device-defenderAmazon Managed Grafanaaws-managed-grafanaAmazon Managed Service for Prometheusaws-managed-prometheusAWS Migration Hubaws-migration-hubAWS Resilience Hubaws-resilience-hubAWS Security Hub CSPMaws-security-hubAWS Security Incident Responseaws-security-incident-responseAWS Trusted Advisoraws-trusted-advisorAWS X-Rayaws-xrayAmazon CloudWatchcloudwatchAzure Advisorazure-advisorApplication Insightsazure-application-insightsMicrosoft Defender External Attack Surface Managementazure-defender-easmMicrosoft Defender for Cloudazure-defender-for-cloudMicrosoft Defender for IoTazure-defender-for-iotLog Analytics workspaceazure-log-analytics
and 134 more → Monitoring page# yaml-language-server: $schema=../../schema/component.schema.json # Amazon Macie: sensitive-data discovery and S3 security posture monitoring. "What is Amazon # Macie?": enabling Macie automatically builds an S3 general purpose bucket inventory and starts # evaluating those buckets for security and access control. "Reviewing and analyzing Macie # findings": policy and sensitive data findings are stored for 90 days. "Default settings for # automated sensitive data discovery": analyses cover all general purpose buckets and use only the # recommended set of managed data identifiers, with no custom identifiers or allow lists. schemaVersion: "1" type: "component" id: "aws-macie" kind: "monitoring" provider: "aws" docs: "https://docs.aws.amazon.com/macie/latest/user/what-is-macie.html" defaults: signal: "alerts" collectorMode: "pull" retentionDays: 90 independentOfMonitored: false managed: true properties: bucketInventoryMonitoring: type: "boolean" default: true automatedSensitiveDataDiscovery: type: "boolean" customDataIdentifiers: type: "boolean" default: false discoveryJobSchedule: type: "enum" values: ["one-time", "daily", "weekly", "monthly"] organizationWide: type: "boolean" default: false