Macie Pricing Calculator - S3 Security & Sensitive Data Discovery

Calculate Amazon Macie costs for S3 bucket monitoring, object monitoring, and sensitive data discovery. Estimate monthly expenses with real-time pricing.

+5 more

Frequently Asked Questions

How much does Amazon Macie bucket monitoring cost?

Macie charges approximately $0.10 per bucket per month for S3 bucket inventory and continuous security monitoring. This includes bucket-level security posture assessment, public access evaluation, and encryption status monitoring. The 30-day free trial includes monitoring for up to 10,000 buckets.

What is Amazon Macie sensitive data discovery pricing?

Macie uses tiered pricing for data inspection: the first 50 TB per month costs $1.00 per GB, the next 450 TB costs $0.50/GB, and data over 500 TB costs $0.25/GB. This applies to both automated and targeted discovery. Automated discovery includes a 1 GB/month free tier after the 30-day trial.

What is the difference between automated and targeted discovery?

Automated discovery continuously samples objects from your S3 buckets and charges $0.01 per 100,000 objects/month for monitoring plus tiered data inspection fees. You can configure sampling depth to control costs. Targeted discovery lets you create custom jobs to scan specific buckets or prefixes with tiered pricing for data scanned, but no object monitoring charges.

What's included in the Amazon Macie free trial?

New Macie accounts receive a 30-day free trial that includes bucket monitoring for up to 10,000 buckets and 150 GB of automated data inspection. After the trial, you get a permanent 1 GB/month free tier for automated discovery. Targeted discovery jobs are not included in the free trial or free tier.

Does Macie incur additional S3 charges?

Yes, Macie generates S3 GET and LIST request charges at standard S3 rates when accessing objects for inspection. These are not included in Macie pricing. Use our S3 pricing calculator to estimate request costs. Macie does not transfer data out of S3, so no data transfer charges apply.

How does Macie pricing compare to GuardDuty?

Macie focuses on S3 data security with bucket monitoring (~$0.10/bucket) and content inspection ($1.00/GB tiered). GuardDuty provides broader threat detection across CloudTrail, VPC Flow Logs, and DNS logs at $1.00/GB for network monitoring. Use our GuardDuty calculator to compare. Many organizations run both services together.

How can I reduce Amazon Macie costs?

Reduce Macie costs by: (1) Excluding non-sensitive buckets from monitoring using classification scope settings, (2) Using automated discovery with sampling instead of full-bucket targeted scans, (3) Configuring sampling depth to inspect fewer objects per bucket, (4) Using S3 object tags to mark objects for inclusion/exclusion, and (5) Archiving findings after 90 days to avoid extended storage charges ($0.05/GB/month).

Tip

Stop AWS bill surprises from happening.

Most infrastructure changes look harmless until you see next month's AWS bill. CloudBurn prevents this by analyzing the cost impact of your AWS CDK changes directly in GitHub pull requests, catching expensive mistakes during code review when fixes are quick, not weeks later when they're costly and risky.

See the setup guide to get started.