AWS offers multiple services that can detect and mask or redact sensitive data. These services include Glue, Macie, Glue DataBrew or Comprehend. They all have their best-fit use cases. - Source: dev.to / 3 months ago

Amazon Macie Amazon Macie is a data security and privacy service that automatically uses AI and ML to look in S3 for sensitive data by pattern matching. It maintains a growing list of sensitive data types, including personally identifiable information (PII) and other sensitive data types defined by data privacy regulations, such as GDPR, PCIDSS, and HIPAA. Start with a 30-day free trial. - Source: dev.to / over 2 years ago

Implement data classification procedures and techniques to separate data based on sensitivity, workload, compliance, retention. AWS Macie can help to automatically discover, classify and protect sensitive data stored in AWS. S3 lifecycle policies and Object Lock can automate retention and compliance. Developing tagging schema will help with categorizing, managing and accessing your S3 data. Use tokenization and... - Source: dev.to / almost 3 years ago

Classify data with AWS Macie and use Lifecycles in S3. - Source: dev.to / about 3 years ago

This article will go over protecting your S3 data using an Amazon Service called Macie. That's more than just securing access to your bucket. It's also about protecting your data privacy. To make it a bit fun, let's consider we're a healthcare provider company that offers general medical consultations and treatments. Because we're very good at what we do, we decided to name our practice "The pain-killer". - Source: dev.to / about 3 years ago

AWS Config is a service that continuously monitors and records AWS resource configurations and evaluates them against desired states. Think of it as a compliance engine: it tracks configuration changes and helps you answer questions like: - Are my EKS clusters configured securely? - Are ECS tasks using only approved IAM roles? - Is anything exposed to the public internet unintentionally? - Source: dev.to / 26 days ago

Ref: What is AWS config Credits to aws for the cover page image I used. - Source: dev.to / 2 months ago

Ii) AWS Config must be enabled in all member accounts (Firewall Manager relies on AWS Config for resource visibility). - Source: dev.to / 2 months ago

Cloud providers offer services to detect, manage, and remediate configuration drift in their environments. Because cloud environments often become large and complex, services such as AWS Config, Azure Policy, and Workload Manager Evaluation can help continuously monitor and evaluate cloud resources and their configurations according to rules. - Source: dev.to / 6 months ago

Regularly audit and monitor your S3 bucket configurations: Establish a routine for auditing and monitoring your S3 bucket configurations. You can also set up alerts for any changes to permissions or policies, enabling timely detection and response to potential security incidents. Additionally, you can utilize tools and services such as AWS Config, which helps you assess, audit, and evaluate the configuration of... - Source: dev.to / 10 months ago