Day 3 - Sensitive Data Protection: Macie and Masking

Data lakes unintentionally mix PII (personally identifiable information) and sensitive data. Today: automatically detect (Macie), reduce exposure (masking/tokenization), and prove compliance.

1. Amazon Macie: Automatic PII Detection

Macie uses ML and pattern matching to auto-discover and classify sensitive data on S3.

• Automated sensitive data discovery: Continuous bucket sampling exposes risk.
• Classification jobs: One-time or periodic precise scan of specific buckets/prefixes.
• Managed data identifiers: Credit card numbers, SSN, passport, email, etc