Amazon Macie review
A focused, usage-priced service for finding sensitive data across Amazon S3.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Amazon Macie is a cloud data security service for organizations that need to discover sensitive information in Amazon S3. It analyzes S3 objects using machine learning, pattern matching, managed data identifiers, custom data identifiers, and allow lists. The service also monitors bucket security and access controls, produces findings, assigns bucket sensitivity scores, and presents data maps. It is suited to teams already operating in AWS that want S3-focused classification and monitoring through the web console or API.
Pricing is usage-based and divided into distinct services. S3 bucket inventory and monitoring starts at $0.10 per S3 bucket per month. Automated data discovery object monitoring costs $0.01 per 100,000 objects per month, while automated sensitive data discovery costs $1 per GB per month. Targeted sensitive data discovery also costs $1 per GB, with one-time or periodic jobs. A 30-day trial is available, although sensitive data discovery jobs are excluded from that trial. Pricing varies by AWS Region and usage dimension, so the plan structure is clearest for teams that can estimate their S3 buckets, objects, and data volume.
Macie fits AWS-centered workflows through integrations with Amazon EventBridge, AWS Security Hub CSPM, AWS Organizations, AWS Step Functions, AWS Lambda, and Amazon SNS. Custom identifiers can use regular expressions, keywords, and proximity rules, giving teams control over what the service looks for beyond managed identifiers. Its main limitation is scope: the service is designed around Amazon S3 rather than broader data stores. Choose Macie for focused S3 discovery, bucket monitoring, and AWS automation; choose a broader platform when classification must span multiple storage systems.
Amazon Macie pros and cons
- Where it wins
- Automates sensitive-data discovery across Amazon S3 objects
- Supports custom identifiers, allow lists, and targeted discovery jobs
- Connects findings with EventBridge and Security Hub CSPM
- Where it doesn't
- Focused on Amazon S3 general purpose buckets and objects
- No free plan is included
- The 30-day trial excludes sensitive data discovery jobs
Amazon Macie fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update