All checks
Medium
Macie should be enabled
Checks that Amazon Macie is enabled in the Region, so it keeps an inventory of the S3 buckets there, monitors them for security and access control, and can discover sensitive data in them. A suspended Macie fails too. Evaluated only in Regions that hold an S3 bucket.
- service
- Macie
- severity
- Medium
- scope
- evaluated in every region
How to fix it
- Affects another check: Enabling Macie brings the Region into Macie.2, which fails unless automated sensitive data discovery is on there too.
In the console
Amazon Macie → Get started
- Enable Macie
- In this finding's Region; a suspended Macie comes back with Re-enable Macie under Settings instead
With the AWS CLI
aws macie2 enable-macie --region <region>With Terraform
resource "aws_macie2_account" "this" {
status = "ENABLED"
}See which of your accounts this check is failing on.
Book a live scan