From the user guide, I don't see Macie in the list of supported CloudFormation resources. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html Does this mean that you cannot create Macie resources through CloudFormation templates?
3 Answers
Unfortunately, Cloudformation supports only few functions of Macie. At the moment (November 2021), Cloudformation only supports the following actions:
AWS::Macie::CustomDataIdentifierdefines a custom data identifierAWS::Macie::FindingsFilterdefines a filter on the jobs' resultsAWS::Macie::Sessionrepresents the Amazon Macie service and configuration settings for an account.
Cloudformation is still missing the core functionality of Macie which is the creation of jobs (based whether on a defined data identifier or a custom one). I hope it will be added soon to CloudFormation.
It looks like you can configure Macie with CloudFormation according to the official docs: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Macie.html
No, it's not supported. There's not much to configure with Macie, it just runs. Amazon explicitly states that Macie doesn't accept custom regexes, for example, unlike Google DLP.
Related