Amazon Macie

AWS SecurityFree tier available

Managed sensitive-data discovery for Amazon S3 that uses machine learning and pattern matching to find PII and other sensitive data, evaluates bucket security and access controls, and sends findings to Security Hub and EventBridge.

FluffyStack tools

Add to Service Builder Add to Compare Compare with equivalents Explore AWS in Treemap Explore security in Honeycomb See AWS regions on the World Map See security as a network Score jurisdiction exposure

Documentation Pricing AWS website

Jurisdictional exposure

Provider HQ

USSeattle, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations

APACCNEEAEUUKUSOther39 regions across 7 jurisdictions

Sovereign option

Yes — 5 sovereign-flagged regions available

Full scorecard for this service →US lens detail →Sovereign cloud coverage map →

Sub-services (4)

Automated sensitive data discovery

Continuous sampling of S3 objects to build a sensitivity map of the estate

Sensitive data discovery jobs

Scheduled or one-off targeted scans of selected S3 buckets

Custom data identifiers

Regex and keyword rules to detect organisation-specific sensitive data

S3 bucket inventory

Evaluates bucket encryption, public access and sharing settings

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

GDPR SOC 2 ISO 27001 HIPAA PCI DSS FedRAMP C5 TISAX IRAP ENS High CCCS Medium ISMAP MTCS L3 K-ISMS

Where this runs

39 regions

28 countries

5sovereign

Sovereign regions (5)

AWS European Sovereign Cloud (Germany) · BrandenburgAWS European Sovereign Cloud
AWS GovCloud (US-East) · AshburnAWS GovCloud (US)
AWS GovCloud (US-West) · HillsboroAWS GovCloud (US)
China (Beijing) · BeijingAWS China (Sinnet)
China (Ningxia) · YinchuanAWS China (NWCD)

Commercial regions (34)

Europe (8)

Europe (Paris)
Europe (Frankfurt)
Europe (Ireland)
Europe (Milan)
Europe (Spain)
Europe (Stockholm)
Europe (Zurich)
Europe (London)

North America (7)

Canada West (Calgary)
Canada (Central)
Mexico (Central)
US East (N. Virginia)
US West (Oregon)
US East (Ohio)
US West (N. California)

South America (1)

South America (São Paulo)

Asia (11)

Asia Pacific (Hong Kong)
Asia Pacific (Hyderabad)
Asia Pacific (Mumbai)
Asia Pacific (Jakarta)
Asia Pacific (Osaka)
Asia Pacific (Tokyo)
Asia Pacific (Malaysia)
Asia Pacific (Singapore)
Asia Pacific (Seoul)
Asia Pacific (Taipei)
Asia Pacific (Thailand)

Oceania (3)

Asia Pacific (Melbourne)
Asia Pacific (Sydney)
Asia Pacific (New Zealand)

Middle East (3)

Middle East (Bahrain)
Israel (Tel Aviv)
Middle East (UAE)

Africa (1)

Africa (Cape Town)

Equivalent services on other platforms

Cloudflare Zero TrustCloudflare

SASE platform bundling Access (ZTNA application gateway), Gateway (secure web gateway + DNS filtering), DLP (data loss prevention), Browser Isolation, and CASB into one identity-aware policy plane for remote workforce security

Sensitive Data ProtectionGCP

Managed data-classification and de-identification service — inspects GCS / BigQuery / Datastore / images for 150+ info-type patterns (SSN, credit card, PHI, custom regex), then supports masking / tokenisation / redaction workflows and provides risk-analysis reports. Formerly branded as Cloud DLP

Pricing

Pricing model:pay-as-you-go