Query: Ensure all data in AWS S3 has been discovered, classified and secured when required

Description

AWS S3 buckets can contain sensitive data, that for security purposes should be discovered, monitored, classified and protected. Macie along with other 3rd party tools can automatically provide an inventory of AWS S3 buckets.

Query

Tables used in this query:

• aws_macie2_classification_job
• aws_s3_bucket

Controls using this query:

• 2.1.3 Ensure all data in Amazon S3 has been discovered, classified and secured when required
• 2.1.3 Ensure all data in Amazon S3 has been discovered, classified and secured when required
• 2.1.3 Ensure all data in Amazon S3 has been discovered, classified, and secured when necessary
• 2.1.3 Ensure all data in Amazon S3 has been discovered, classified, and secured when necessary
• 2.1.4 Ensure all data in Amazon S3 has been discovered, classified and secured when required
• 2.1.4 Ensure all data in Amazon S3 has been discovered, classified and secured when required
• 3.1.3 Ensure all data in Amazon S3 has been discovered, classified, and secured when necessary
• Ensure all data in AWS S3 has been discovered, classified and secured when required

SQL