Data Loss Prevention (DLP) for Amazon S3 & EC2 is a cloud-based, in-tenant solution that leverages data classification to identify sensitive data at petabyte scale. It scans objects stored in Amazon S3 buckets and files on Amazon EC2 (EBS volumes), detecting personally identifiable information (PII) and other classified data across the entire storage environment.
The solution can quarantine identified objects or files, providing automated containment of sensitive data. It operates across all S3 buckets and EBS volumes, enabling organizations to understand what PII exists and to enforce data protection policies within the AWS storage layer.
