5 ms·
Macie: Automatically Discover, Classify, and Secure Content at Scale
- pavel_lishin 9y ago> once your data has been classified by Macie, it assigns each data item a business value ... and a thousand startup founders started the process, looked at the results, put their heads down on their desks, and wept quietly.
- koolba 9y agoI don't get it. Are they crying because they have a ton of unsecured PII or because all their data is worthless?
- kevinr 9y agoYes.
- abrookewood 9y agoWould you like Coffee or Tea? Yes.
- ben_jones 9y agoWhiskey or Vodka?
- pavel_lishin 9y agoWhen reading one of my jokes, feel free to use the funniest interpretation.
- SadWebDeveloper 9y agoIs there an actual use for this? seems like its another useless service from the aws team instead on focusing on improving their interfaces, api's and pricing options.
- spydum 9y agoAs many large enterprise shops migrate to cloud, they need a way to handle data classification and sprawl in their s3 buckets. Magic tools that can label data for them is more useful than nothing, and those big shops wont blink at the pricetag.
- openasocket 9y agoData Loss Prevention (DLP) and related things, mostly. Like alerting you that you just wrote a bunch of private customer data to a world-readable bucket. Or that some random employee is downloading all of your privileged and confidential reports, which could mean their credentials have been compromised. Very very nice if you have data stored in S3 that you really want to keep secure. DISCLAIMER: work for AWS, have met and talked with the Macie team on several occasions. Opinions on here are my own
- SadWebDeveloper 9y agoStill this seems like a poorly managed enterprise, probably a lazy cto or lack of a ciso, personally m kinda spektic that these services actually offer value in a well managed enterprise, specially if you work under the assumption that everything that it's on the internet or well "the cloud" it's by nature inherently insecure. Let's see how long those "valley people" keep milking the "AI", "Deep learning", "Machine Learning" hype.
- abrookewood 9y agoIf ever you have to deal with large financial institutions, Data Loss Prevention is one of the items that will come up as part of their standard audit on your systems. It can be really hard (and expensive) to put in place and something like this solve it in a flash.
- QUFB 9y agoNot cheap: https://aws.amazon.com/macie/pricing/ https://aws.amazon.com/macie/pricing/ After first GB, $5 per GB processed by the content classification engine
- abrookewood 9y agoThat's $5 once for each GB, not $5 per GB per month. Seems reasonable to me compared to the cost of implementing a DLP solution.
- avip 9y agoDear aws, Could you guys take it easy for a moment with spawning new weird services like horny hamsters, reflect on the ~372 you already have, and fix some aspects of them? How about letting me add basic auth to S3 or CloudFront? How about non-expiring signed s3 urls? How about restricted access to api-gateway? Hey, how about fixing Athena to stop throwing random errors, and actually support the fully featured presto syntax? I could extend this list with 64 items more without even opening my dedicated aws complains notebook.
- alexbilbie 9y agoYou can implement basic auth using Lambda@Edge. You could also implement your own non-expiring signed URLs with Lambda@Edge too.
- avip 9y agoYes. I know how to solve all the issues on my list. But I'm paying aws a fortune for them to solve my problems, not for me to find workarounds. /end rant [EDIT: Also, slightly drifting - me solving an aws issue is inefficient in the big scheme of things. We'd have N developers solving the same problem, each to himself. That's a DRY violation. And we can't even estimate the waste, lacking an aws issues/voting system]
- spaceseaman 9y agorolls eyes Is there some reason programmers feel this need to bring up workarounds when I'm looking for an actual solution? If I could count how many answers on StackOverflow are just "well if you use JQuery..." or "Well if you use Boost...". Address the point the person you're responding to is making, and answer only the questions they are asking. Making assumptions just wastes people's time. I understand you're just trying to help, but it comes across as really condescending. "You should be doing this you pleb!" is how I always read these types of responses in my head, and it's really frustrating because often-times I'm already aware of whatever workaround you've mentioned, have already tried it, and know it's not suitable. It's doubly frustrating when you're specifically looking for the solution that's not the workaround.
- deleted 9y ago[deleted]
- tucif 9y agoI don't think their svm classifier would work over encrypted data, so if a service stores data encrypted at rest is this useful at all?
- eropple 9y agoMost people using S3 are encrypting their data with KMS. Haven't looked, but if it's like every other S3 consumer, you can write a trust policy for Macie.
- dfc 9y ago> The first meaning of Macie that was found, said that that name meant “weapon”. Is macie a french word for weapon? I'm familiar with the English word "mace" that is a weapon but not macie.
- leastangle 9y agoI ask myself how many people are storing _potential_ sensitive information without application level encryption so that AWS decides to build such tool... slightly distressing.
- porker 9y agoI don't get it. In what scenarios would this be useful?
- sah2ed 9y ago> When Jeff and I heard about this service, we both were curious on the meaning of the name Macie. Of course, Jeff being a great researcher looked up the name Macie and found that the name Macie has two meanings. I somehow initially parsed the author's mention of Jeff as Jeff Bezos but soon realized she was referring to Jeff Bar, chief evangelist of AWS.
- sandGorgon 9y agohow do people train and build a service like this ?