How long does it take for changes to automated template to reflect in heatmap

Question

How long does it take for the Macie heatmap to accurately reflect changes made to the automated discovery identifiers?  As an example, let's say that on the 1st I make a change to which managed data identifiers are selected, and also add some Custom Data Identifiers.

I'm presuming that it'll start to change at the next execution after the change and be somewhat dependent on size of bucket content.  I'm hoping/trying to get any kind of feel for what time frame (i.e. a few days?, week?, month(s)?)  I can expect that the heatmap will accurately reflect these changes?  Or at least be accurate enough to consider it 'good enough' to be reflective of the new terms?

Answer

Hi Brian,

The Macie S3 bucket sensitivity score reflects **Automated Sensitive Data Discovery activities that Macie preforms for the bucket**, which uses sampling techniques to run automated daily queries on samples of your data. This means that the heat map **does not** reflect Sensitive Data Discovery Jobs that you've created and run. Therefore, the heat map does not reflect jobs from managed data identifiers that are explicitly selected or custom data identifiers.

The heat map updates daily and the exact time can be viewed in your Macie dashboard under the “S3 buckets” tab.

Hope this answers your question!

Additionally, here are some resources you can explore more in depth on Automated Data Discovery and the Heat Map:

https://aws.amazon.com/blogs/aws/automated-data-discovery-for-amazon-macie/

https://docs.aws.amazon.com/macie/latest/user/discovery-scoring-s3.html?icmpid=docs_macie_help_panel#discovery-scoring-s3-dimensions

How long does it take for changes to automated template to reflect in heatmap

관련 콘텐츠