Skip to content

Latest commit

 

History

History
15 lines (10 loc) · 1.13 KB

README.md

File metadata and controls

15 lines (10 loc) · 1.13 KB
Raw

aws-macie-automations

Scripts and Lambda to manage AWS Macie

Scripts

  • enable_macie.py - Run this script once to configure the Delegated Admin account for Macie. Run again if you need to configure new regions
  • get_macie_estimated_cost.py - This script will provide a cost estimate for a specific bucket, or for all the public buckets. Run this before creating a scan job
  • create_scan_job.py - This script will create either a one-time job or a weekly job for a specific bucket or all public buckets. Weekly jobs will only scan newly added or updated objects, so a one-time job should be run first.
  • findings_by_bucket.py - Get stats on findings for a specific bucket or all buckets.
  • list_classification_jobs.py - pull status of all classification jobs
  • get_macie_actual_cost.py - Get the costs from the Macie service for either the month to date or past 30 days

Every script has the option to call it with --help to see arguments. As an explicit safety mechanism, both enable_macie.py and create_scan_job.py require you to pass the argument --actually-do-it before it will enable macie or create a job.