AWS Macie Classification Job Builder

IAM & SecurityAWS

Build Macie sensitive data discovery job configurations with S3 bucket scoping and custom data identifiers.

Amazon Macie Configuration

Build Macie sensitive data discovery job configurations with S3 bucket scoping and custom data identifiers.

Required Fields

NameJobTypeS3JobDefinition.BucketDefinitions

{
  "Name": "pii-scan-production-buckets",
  "Description": "Scan production S3 buckets for PII and sensitive data",
  "JobType": "SCHEDULED",
  "S3JobDefinition": {
    "BucketDefinitions": [
      {
        "AccountId": "123456789012",
        "Buckets": [
          "prod-data-lake",
          "prod-customer-uploads"
        ]
      }
    ],
    "Scoping": {
      "Includes": {
        "And": [
          {
            "SimpleScopeTerm": {
              "Comparator": "STARTS_WITH",
              "Key": "OBJECT_KEY",
              "Values": ["customer-data/", "reports/"]
            }
          },
          {
            "SimpleScopeTerm": {
              "Comparator": "EQ",
              "Key": "OBJECT_EXTENSION",
              "Values": ["csv", "json", "parquet"]
            }
          }
        ]
      }
    }
  },
  "CustomDataIdentifierIds": [
    "custom-id-ssn-pattern",
    "custom-id-credit-card"
  ],
  "ManagedDataIdentifierSelector": "ALL",
  "SamplingPercentage": 100,
  "ScheduleFrequencyPeriod": "WEEKLY",
  "InitialRun": true,
  "Tags": {
    "Compliance": "GDPR",
    "Team": "data-governance"
  }
}

Generated Output

Output will appear here...

Overview

Build Macie sensitive data discovery job configurations with S3 bucket scoping and custom data identifiers. This tool helps AWS engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.

How Engineers Use This

•Producing a Macie Classification Job starting point for a new microservice that follows the AWS reference architecture rather than copy-paste from another team's repo.
•Producing a Macie Classification Job snapshot for a security audit where the auditor wants the canonical config alongside the rendered policy.
•Walking a security reviewer through a proposed Macie Classification Job configuration without forcing them to log into the AWS console.
•Sketching a Macie Classification Job migration from one AWS account to another with the regional and account differences spelled out up front.

Questions & Answers

Will the output of this Macie Classification Job builder pass `aws cloudformation validate-template` or `terraform validate`?

It produces structurally valid output for the AWS schemas it supports. We still recommend running provider validation locally before applying — schemas evolve and a recently-released property may not yet be reflected here. If validation fails, the failure message points at the exact attribute the schema rejected.

Can I use this Macie Classification Job builder for AWS GovCloud or China regions?

Most of the Macie Classification Job primitives behave the same in GovCloud and China partitions, but the ARN partition prefix differs (aws-us-gov, aws-cn) and a handful of services are unavailable. The output is portable in terms of resource shape; you must adjust the partition and verify service availability in the target region before applying.

Related Learning Guides

AWS IAM Best Practices25 min read
Security Hub Overview22 min read

Was this tool helpful?

Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.

AWS Macie Classification Job Builder

IAM & SecurityAWS

Build Macie sensitive data discovery job configurations with S3 bucket scoping and custom data identifiers.

Amazon Macie Configuration

Build Macie sensitive data discovery job configurations with S3 bucket scoping and custom data identifiers.

Required Fields

NameJobTypeS3JobDefinition.BucketDefinitions

Generated Output

Output will appear here...

Overview

How Engineers Use This

•Producing a Macie Classification Job starting point for a new microservice that follows the AWS reference architecture rather than copy-paste from another team's repo.
•Producing a Macie Classification Job snapshot for a security audit where the auditor wants the canonical config alongside the rendered policy.
•Walking a security reviewer through a proposed Macie Classification Job configuration without forcing them to log into the AWS console.
•Sketching a Macie Classification Job migration from one AWS account to another with the regional and account differences spelled out up front.

Questions & Answers

Will the output of this Macie Classification Job builder pass `aws cloudformation validate-template` or `terraform validate`?

Can I use this Macie Classification Job builder for AWS GovCloud or China regions?

Related Learning Guides

AWS IAM Best Practices25 min read
Security Hub Overview22 min read

Was this tool helpful?