AWS DLP Implementation
Macie findings routed through EventBridge and Lambda to auto-contain common S3 exposure patterns, with SNS escalating anything that needs a human before the next audit finds it.
Sensitive data ends up in S3 buckets it shouldn't: a stray export, a misconfigured pipeline, a forgotten dev bucket, and nobody notices until someone goes looking.
I wired Macie's findings into EventBridge, routed them to Lambda for classification and remediation, and used SNS to surface anything that needed human eyes to the right owner. The pipeline decides what to contain automatically and what to escalate, so routine exposures don't wait on a person.
The worst data leaks are the ones nobody's looking for.
Exposed sensitive data gets contained in minutes rather than sitting undetected until the next audit.
- Macie findings trigger remediation without a ticket in between
- Automatic containment for common S3 exposure patterns
- SNS routes the rest to the owner who can fix it