Security & identity
Amazon Macie
- Timebilled
- Bytesbilled
- Callsnot billed
In one line
A small daily charge per S3 bucket to keep the inventory, then per GB whenever objects get inspected.
What gets missed
Inventory is cheap and sensitive data discovery is not. One targeted job over a large bucket can outrun a year of monitoring, and the GB counted is data scanned inside S3, nothing to do with transfer.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
PaidDataInventoryEvaluationSensitiveDataDiscoveryPaidAutomatedObjectMonitoring
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.