Types of data that you can protect

This section contains information about the types of data that you can protect in a CloudWatch Logs data protection policy. CloudWatch Logs managed data identifiers offer preconfigured data types for protecting financial data, personal health information (PHI), and personally identifiable information (PII). You can also use custom data identifiers to create data identifiers tailored to your specific use case.

Contents

• CloudWatch Logs managed data identifiers for sensitive data types

  • Credentials

    • Data identifier ARNs for credential data types

  • Device identifiers

    • Data identifier ARNs for device data types

  • Financial information

    • Data identifier ARNs for financial data types

  • Protected health information (PHI)

    • Data identifier ARNs for protected health information data types (PHI)

  • Personally identifiable information (PII)

    • Keywords for driver’s license identification numbers

    • Keywords for national identification numbers

    • Keywords for passport numbers

    • Keywords for taxpayer identification and reference numbers

    • Data identifier ARNs for personally identifiable information (PII)

• Custom data identifiers

  • What are custom data identifiers?

  • Custom data identifier constraints

  • Using custom data identifiers in the console

  • Using custom data identifiers in your data protection policy