Loading controls...

Control: 2.1.4 Ensure all data in Amazon S3 has been discovered, classified and secured when required


Macie along with other 3rd party tools can be used to discover, monitor, classify, and inventory S3 buckets.

Using a Cloud service or 3rd Party software to continuously monitor and automate the process of data discovery and classification for S3 buckets using machine learning and pattern matching is a strong defense in protecting that information.


From Console

  1. Enable Macie through the Macie console.
  2. Create an S3 bucket to use as a repository for sensitive data discovery results.
  3. Select the buckets you want Macie to analyze and then create a job.
  4. After the job has run, review the findings by selecting Findings in the left pane.


Run the control in your terminal:

steampipe check aws_compliance.control.cis_v150_2_1_4

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.control.cis_v150_2_1_4


This control uses a named query: