Threat detection, posture & security operations
Amazon Macie vs Microsoft Purview (data classification and DSPM)
Amazon Macie maps to Microsoft Purview (Data Map classification and Data Security Posture Management), and to sensitive data threat detection in Defender for Storage and Defender CSPM.
Side-by-side comparison
| Aspect | Amazon Web Services | Microsoft Azure |
|---|---|---|
| Service | Amazon Macie | Microsoft Purview (data classification and DSPM) |
| Lifecycle | Generally available | Generally available |
| What it is | Discovers sensitive data in S3 with machine learning and pattern matching, and monitors S3 bucket security and access controls. | Data governance and security, including Data Map scanning with sensitive-information classifiers, Information Protection labels, DLP, and Data Security Posture Management. |
| Pricing model | Per S3 bucket monitored, per object monitored for automated discovery, and per GB inspected. | Purview Data Map is billed per capacity unit-hour and scanning vCore-hour. Information Protection and DSPM are licensed through Microsoft 365 or Purview plans. |
| Docs | Amazon Macie docs | Microsoft Purview (data classification and DSPM) docs |
| Pricing page | Amazon Macie pricing | Microsoft Purview (data classification and DSPM) pricing |
| Exams | SCS-C03 | SC-500 |
Key differences
- Scope. Macie focuses on S3 buckets (sensitive data discovery and bucket security posture). Purview scans many sources across Azure, Microsoft 365, other clouds, and on-premises, and adds labeling, DLP, and governance.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per S3 bucket monitored, per object monitored for automated discovery, and per GB inspected. Amazon Macie pricing →
- Azure
- Purview Data Map is billed per capacity unit-hour and scanning vCore-hour. Information Protection and DSPM are licensed through Microsoft 365 or Purview plans. Microsoft Purview (data classification and DSPM) pricing →
Certification exam mapping
| Exam | Provider | Level | Status |
|---|---|---|---|
| AWS Certified Security – Specialty SCS-C03 | AWS | Specialty | current The current code (SCS-C03) is taken from the exam-prep link on the official certification page. Simplified Chinese, Spanish (Latin America), and Portuguese (Brazil) versions retire after Dec 31, 2026. |
| Microsoft Certified – Cloud and AI Security Engineer Associate SC-500 | Azure | Associate | current New certification. A practice assessment isn't available yet, which the page says usually means the exam recently left (or is in) beta. |
Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.
FAQ
What is the Azure equivalent of Amazon Macie?
Amazon Macie maps to Microsoft Purview (Data Map classification and Data Security Posture Management), and to sensitive data threat detection in Defender for Storage and Defender CSPM.
How does pricing compare between Amazon Macie and Microsoft Purview (data classification and DSPM)?
AWS: Per S3 bucket monitored, per object monitored for automated discovery, and per GB inspected. Azure: Purview Data Map is billed per capacity unit-hour and scanning vCore-hour. Information Protection and DSPM are licensed through Microsoft 365 or Purview plans. Check the official pricing pages for current rates.
Which certification exams cover this topic?
AWS Certified Security – Specialty (SCS-C03); Microsoft Certified – Cloud and AI Security Engineer Associate (SC-500).