AWS Macie
BetaThis source is currently in beta. It works end to end, but you may still hit rough edges. Let us know if you do.
Let AI connect your sources for you
Skip the manual setup — run this in your project and the wizard auto-detects your databases and APIs and connects them to PostHog.
Connect AWS Macie to PostHog to sync your data into the PostHog data warehouse for analysis and modeling.
Sync Amazon Macie findings, S3 bucket inventory, bucket sensitivity profiles, discovery jobs, member accounts, and usage. Enable Macie in the region you select.
Grant these IAM permissions for the tables you select: macie2:ListFindings, macie2:GetFindings, macie2:DescribeBuckets, macie2:ListClassificationJobs, macie2:ListMembers, macie2:GetResourceProfile, macie2:ListResourceProfileDetections, macie2:ListResourceProfileArtifacts, and macie2:GetUsageStatistics. The resource profile tables need automated sensitive data discovery turned on. Use credentials from the Macie administrator account to sync members.
Configuration
| Option | Description |
|---|---|
AWS access key IDType: text Required: True | |
AWS secret access keyType: password Required: True | |
AWS session tokenType: password Required: False | Temporary credentials expire. Update them before scheduled syncs run. |
AWS regionType: text Required: True |
Linking AWS Macie to PostHog
- Go to the Data pipeline page in PostHog
- Click New source and select AWS Macie
- Fill in the required configuration fields
- Click Next, select the tables you want to sync, and then press Import
Supported tables
| Table | Description | Sync method | Incremental field | Primary key |
|---|---|---|---|---|
findings | Security and sensitive data findings, with affected resources and classification details. | Incremental, Full refresh | updated_at | — |
buckets | S3 bucket inventory, with security settings, object counts, and discovery coverage. | Full refresh | — | — |
classification_jobs | Sensitive data discovery jobs, with their status and bucket selection settings. | Full refresh | — | — |
members | Accounts associated with the Macie administrator, including former members. | Full refresh | — | — |
resource_profiles | Sensitivity profile for each S3 bucket, with counts of analyzed, sensitive, and skipped objects. | Full refresh | — | — |
resource_profile_detections | Types of sensitive data that automated discovery found in each S3 bucket, with occurrence counts. | Full refresh | — | — |
resource_profile_artifacts | S3 objects that automated discovery selected in each bucket, with the analysis result. | Full refresh | — | — |
usage_statistics | Month-to-date Macie usage, quotas, and estimated costs for each account. | Full refresh | — | — |