Threat detection, posture & security operations · AWS vs Google Cloud
Amazon Macie vs Sensitive Data Protection (formerly Cloud DLP)
Amazon Macie maps to Sensitive Data Protection discovery, which profiles data across BigQuery, Cloud Storage, and other sources to find sensitive data.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | Amazon Macie | Sensitive Data Protection (formerly Cloud DLP) |
| Lifecycle | Generally available | Generally available |
| What it is | Discovers sensitive data in S3 with machine learning and pattern matching, and monitors S3 bucket security and access controls. | Discovers, classifies, and de-identifies sensitive data (PII and more) in text, images, and Google Cloud storage. |
| Pricing model | Per S3 bucket monitored, per object monitored for automated discovery, and per GB inspected. | Discovery is priced separately from inspection and transformation, which are billed per GB. |
| Docs | Amazon Macie docs | Sensitive Data Protection (formerly Cloud DLP) docs |
| Pricing page | Amazon Macie pricing | Sensitive Data Protection (formerly Cloud DLP) pricing |
Key differences
- Sensitive Data Protection also inspects and de-identifies data, beyond Macie's discovery.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per S3 bucket monitored, per object monitored for automated discovery, and per GB inspected. Amazon Macie pricing →
- GCP
- Discovery is priced separately from inspection and transformation, which are billed per GB. Sensitive Data Protection (formerly Cloud DLP) pricing →
And on Azure?
Partial match Azure's equivalent is Microsoft Purview (data classification and DSPM). AWS vs Azure comparison →
FAQ
What is the Google Cloud equivalent of Amazon Macie?
Amazon Macie maps to Sensitive Data Protection discovery, which profiles data across BigQuery, Cloud Storage, and other sources to find sensitive data.
How does pricing compare between Amazon Macie and Sensitive Data Protection (formerly Cloud DLP)?
AWS: Per S3 bucket monitored, per object monitored for automated discovery, and per GB inspected. Google Cloud: Discovery is priced separately from inspection and transformation, which are billed per GB. Check the official pricing pages for current rates.
What is the Azure equivalent?
Microsoft Purview (data classification and DSPM) (partial match). Amazon Macie maps to Microsoft Purview (Data Map classification and Data Security Posture Management), and to sensitive data threat detection in Defender for Storage and Defender CSPM.