Secure Sensitive Data with Amazon Macie

Why it matters

Sensitive-data discovery is the Macie portion of 3.2.6. This exercise combines discovery jobs with protecting their findings and configuring a repository for discovery results.

What to practise

Enable Macie, configure its discovery results repository in S3, and use KMS encryption for sensitive findings. Create sensitive-data discovery jobs and analyze the findings in detail. Watch what the reported findings tell you about the data examined by the jobs.

How it fits

For a GenAI workload, focus on source-data discovery in 3.2.6 and the evidence you review from a discovery job. The exercise provides discovery practice; it does not establish the runtime prompt and output checks also covered by the subsection.