# Using managed data identifiers
Amazon Macie uses a combination of criteria and techniques, including machine learning and pattern matching, to detect sensitive data in Amazon Simple Storage Service (Amazon S3) objects. These criteria and techniques, collectively referred to as *managed data identifiers*, can detect a large and growing list of sensitive data types for many countries and regions, including multiple types of credentials data, financial information, personal health information (PHI), and personally identifiable information (PII). Each managed data identifier is designed to detect a specific type of sensitive data—for example, AWS secret access keys, credit card numbers, or passport numbers for a particular country or region.
Macie can detect the following categories of sensitive data by using managed data identifiers:
+ Credentials, for credentials data such as private keys and AWS secret access keys.
+ Financial information, for financial data such as credit card numbers and bank account numbers.
+ Personal information, for PHI such as health insurance and medical identification numbers, and PII such as driver's license identification numbers and passport numbers.
Within each category, Macie can detect multiple types of sensitive data. The topics in this section list and describe each type and any relevant requirements for detecting it. For each type, they also indicate the unique identifier (ID) for the managed data identifier that's designed to detect the data. When you [create a sensitive data discovery job](discovery-jobs-create.md) or [configure settings for automated sensitive data discovery](discovery-asdd-account-configure.md), you can use these IDs to specify which managed data identifiers you want Macie to use when it analyzes S3 objects.
**Topics**
+ [Keyword requirements](managed-data-identifiers-keywords.md)
+ [Quick reference by sensitive data type](mdis-reference-quick.md)
+ [Detailed reference by sensitive data category](mdis-reference.md)
For a list of managed data identifiers that we recommend for jobs, see [Managed data identifiers recommended for sensitive data discovery jobs](discovery-jobs-mdis-recommended.md). For a list of managed data identifiers that we recommend and are used by default for automated sensitive data discovery, see [Default settings for automated sensitive data discovery](discovery-asdd-settings-defaults.md).
# Keyword requirements for managed data identifiers
To detect certain types of sensitive data by using managed data identifiers, Amazon Macie requires a keyword to be in proximity of the data. If this is the case for a particular type of data, reference topics in this section indicate the keyword requirements for that data.
If a keyword has to be in proximity of a particular type of data, the keyword typically has to be within 30 characters (inclusively) of the data. Additional proximity requirements vary based on the file type or storage format of an Amazon Simple Storage Service (Amazon S3) object.
**Structured columnar data**
For columnar data, a keyword has to be part of the same value or in the name of the column or field that stores a value. This is the case for Microsoft Excel workbooks, CSV files, and TSV files.
For example, if the value for a field contains both *SSN* and a nine-digit number that uses the syntax of a US Social Security number (SSN), Macie can detect the SSN in the field. Similarly, if the name of a column contains *SSN*, Macie can detect each SSN in the column. Macie treats the values in that column as being in proximity of the keyword *SSN*.
**Structured record-based data**
For record-based data, a keyword has to be part of the same value or in the name of an element in the path to the field or array that stores a value. This is the case for Apache Avro object containers, Apache Parquet files, JSON files, and JSON Lines files.
For example, if the value for a field contains both *credentials* and a character sequence that uses the syntax of an AWS secret access key, Macie can detect the key in the field. Similarly, if the path to a field is `$.credentials.aws.key`, Macie can detect an AWS secret access key in the field. Macie treats the value in the field as being in proximity of the keyword *credentials*.
**Unstructured data**
For unstructured data, a keyword typically has to be within 30 characters (inclusively) of the data. There aren't any additional proximity requirements. This is the case for Adobe Portable Document Format files, Microsoft Word documents, email messages, and non-binary text files other than CSV, JSON, JSON Lines, and TSV files. This includes any structured data, such as tables or XML, in these types of files.
Keywords aren’t case sensitive. In addition, if a keyword contains a space, Macie automatically matches keyword variations that don’t contain the space or contain an underscore (\$1) or a hyphen (-) instead of the space. In certain cases, Macie also expands or abbreviates a keyword to address common variations of the keyword.
For a demonstration of how keywords provide context and help Macie detect specific types of sensitive data, watch the following video:
# Quick reference: Managed data identifiers by type
In Amazon Macie, a *managed data identifier* is a set of built-in criteria and techniques that are designed to detect a specific type of sensitive data—for example, credit card numbers, AWS secret access keys, or passport numbers for a particular country or region. These identifiers can detect a large and growing list of sensitive data types for many countries and regions, including multiple types of credentials data, financial information, personal health information (PHI), and personally identifiable information (PII).
The following table lists all the managed data identifiers that Macie currently provides, organized by sensitive data type. For each type, it provides the following information:
+ **Sensitive data category** – Specifies the general category of sensitive data that includes the type: *Credentials*, for credentials data such as private keys; *Financial information*, for financial data such as credit card numbers and bank account numbers; *Personal information: PHI* for personal health information such as health insurance and medical identification numbers; and, *Personal information: PII* for personally identifiable information such as driver's license identification numbers and passport numbers.
+ **Managed data identifier ID** – Specifies the unique identifier (ID) for one or more managed data identifiers that are designed to detect the data. When you create a sensitive data discovery job or configure settings for automated sensitive data discovery, you can use these IDs to specify which managed data identifiers you want Macie to use when it analyzes data. For a list of managed data identifiers that we recommend for jobs, see [Managed data identifiers recommended for sensitive data discovery jobs](discovery-jobs-mdis-recommended.md). For a list of managed data identifiers that we recommend for automated sensitive data discovery, see [Default settings for automated sensitive data discovery](discovery-asdd-settings-defaults.md).
+ **Keyword required** – Specifies whether detection requires a keyword to be in proximity of the data. For information about how Macie uses keywords when it analyzes data, see [Keyword requirements](managed-data-identifiers-keywords.md).
+ **Countries and regions** – Specifies which countries and regions the applicable managed data identifiers are designed for. If the managed data identifiers aren't designed for particular countries and regions, this value is *Any*.
To review additional details about the managed data identifiers for a particular type of sensitive data, choose the type.
| Sensitive data type | Sensitive data category | Managed data identifier ID | Keyword required | Countries and regions |
| --- | --- | --- | --- | --- |
| [AWS secret access key](mdis-reference-credentials.md#mdis-reference-AWS-CREDENTIALS) | Credentials | AWS\$1CREDENTIALS | Yes | Any |
| [Bank account number](mdis-reference-financial.md#mdis-reference-BAN) | Financial information | BANK\$1ACCOUNT\$1NUMBER (for both Canada and the US) | Yes | Canada, US |
| [Basic Bank Account Number (BBAN)](mdis-reference-financial.md#mdis-reference-BBAN) | Financial information | Depending on country or region: FRANCE\$1BANK\$1ACCOUNT\$1NUMBER, GERMANY\$1BANK\$1ACCOUNT\$1NUMBER, ITALY\$1BANK\$1ACCOUNT\$1NUMBER, SPAIN\$1BANK\$1ACCOUNT\$1NUMBER, UK\$1BANK\$1ACCOUNT\$1NUMBER | Yes | France, Germany, Italy, Spain, UK |
| [Birth date](mdis-reference-pii.md#mdis-reference-DATE_OF_BIRTH) | Personal information: PII | DATE\$1OF\$1BIRTH | Yes | Any |
| [Credit card expiration date](mdis-reference-financial.md#mdis-reference-CC-expiration) | Financial information | CREDIT\$1CARD\$1EXPIRATION | Yes | Any |
| [Credit card magnetic stripe data](mdis-reference-financial.md#mdis-reference-CC-stripe) | Financial information | CREDIT\$1CARD\$1MAGNETIC\$1STRIPE | Yes | Any |
| [Credit card number](mdis-reference-financial.md#mdis-reference-CC-number) | Financial information | CREDIT\$1CARD\$1NUMBER (for credit card numbers in proximity of a keyword), CREDIT\$1CARD\$1NUMBER\$1(NO\$1KEYWORD) (for credit card numbers not in proximity of a keyword) | Varies | Any |
| [Credit card verification code](mdis-reference-financial.md#mdis-reference-CC-verification-code) | Financial information | CREDIT\$1CARD\$1SECURITY\$1CODE | Yes | Any |
| [Driver’s license identification number](mdis-reference-pii.md#mdis-reference-DL-num) | Personal information: PII | Depending on country or region: AUSTRALIA\$1DRIVERS\$1LICENSE, AUSTRIA\$1DRIVERS\$1LICENSE, BELGIUM\$1DRIVERS\$1LICENSE, BULGARIA\$1DRIVERS\$1LICENSE, CANADA\$1DRIVERS\$1LICENSE, CROATIA\$1DRIVERS\$1LICENSE, CYPRUS\$1DRIVERS\$1LICENSE, CZECHIA\$1DRIVERS\$1LICENSE, DENMARK\$1DRIVERS\$1LICENSE, DRIVERS\$1LICENSE (for the US), ESTONIA\$1DRIVERS\$1LICENSE, FINLAND\$1DRIVERS\$1LICENSE, FRANCE\$1DRIVERS\$1LICENSE, GERMANY\$1DRIVERS\$1LICENSE, GREECE\$1DRIVERS\$1LICENSE, HUNGARY\$1DRIVERS\$1LICENSE, INDIA\$1DRIVERS\$1LICENSE, IRELAND\$1DRIVERS\$1LICENSE, ITALY\$1DRIVERS\$1LICENSE, LATVIA\$1DRIVERS\$1LICENSE, LITHUANIA\$1DRIVERS\$1LICENSE, LUXEMBOURG\$1DRIVERS\$1LICENSE, MALTA\$1DRIVERS\$1LICENSE, NETHERLANDS\$1DRIVERS\$1LICENSE, POLAND\$1DRIVERS\$1LICENSE, PORTUGAL\$1DRIVERS\$1LICENSE, ROMANIA\$1DRIVERS\$1LICENSE, SLOVAKIA\$1DRIVERS\$1LICENSE, SLOVENIA\$1DRIVERS\$1LICENSE, SPAIN\$1DRIVERS\$1LICENSE, SWEDEN\$1DRIVERS\$1LICENSE, UK\$1DRIVERS\$1LICENSE | Yes | Australia, Austria, Belgium, Bulgaria, Canada, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, India, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, UK, US |
| [Drug Enforcement Agency (DEA) Registration Number](mdis-reference-phi.md#mdis-reference-DEA-registration-num) | Personal information: PHI | US\$1DRUG\$1ENFORCEMENT\$1AGENCY\$1NUMBER | Yes | US |
| [Electoral roll number](mdis-reference-pii.md#mdis-reference-electoral-roll-num) | Personal information: PII | UK\$1ELECTORAL\$1ROLL\$1NUMBER | Yes | UK |
| [Full name](mdis-reference-pii.md#mdis-reference-full-name) | Personal information: PII | NAME | No | Any, if the name uses a Latin character set |
| [Global Positioning System (GPS) coordinates](mdis-reference-pii.md#mdis-reference-GPS) | Personal information: PII | LATITUDE\$1LONGITUDE | Yes | Any, if the coordinates are in proximity of an English keyword |
| [Google Cloud API key](mdis-reference-credentials.md#mdis-reference-GCP-API-key) | Credentials | GCP\$1API\$1KEY | Yes | Any |
| [Health Insurance Claim Number (HICN)](mdis-reference-phi.md#mdis-reference-HICN) | Personal information: PHI | USA\$1HEALTH\$1INSURANCE\$1CLAIM\$1NUMBER | Yes | US |
| [Health insurance or medical identification number](mdis-reference-phi.md#mdis-reference-HI-ID) | Personal information: PHI | Depending on country or region: CANADA\$1HEALTH\$1NUMBER, EUROPEAN\$1HEALTH\$1INSURANCE\$1CARD\$1NUMBER, FINLAND\$1EUROPEAN\$1HEALTH\$1INSURANCE\$1NUMBER, FRANCE\$1HEALTH\$1INSURANCE\$1NUMBER, UK\$1NHS\$1NUMBER, USA\$1MEDICARE\$1BENEFICIARY\$1IDENTIFIER | Yes | Canada, EU, Finland, France, UK, US |
| [Healthcare Common Procedure Coding System (HCPCS) code](mdis-reference-phi.md#mdis-reference-HCPCS) | Personal information: PHI | USA\$1HEALTHCARE\$1PROCEDURE\$1CODE | Yes | US |
| [HTTP Basic Authorization header](mdis-reference-credentials.md#mdis-reference-HTTP_BASIC_AUTH_HEADER) | Credentials | HTTP\$1BASIC\$1AUTH\$1HEADER | No | Any |
| [HTTP cookie](mdis-reference-pii.md#mdis-reference-HTTP_COOKIE) | Personal information: PII | HTTP\$1COOKIE | No | Any |
| [International Bank Account Number (IBAN)](mdis-reference-financial.md#mdis-reference-IBAN) | Financial information | Depending on country or region: ALBANIA\$1BANK\$1ACCOUNT\$1NUMBER, ANDORRA\$1BANK\$1ACCOUNT\$1NUMBER, BOSNIA\$1AND\$1HERZEGOVINA\$1BANK\$1ACCOUNT\$1NUMBER, BRAZIL\$1BANK\$1ACCOUNT\$1NUMBER, BULGARIA\$1BANK\$1ACCOUNT\$1NUMBER, COSTA\$1RICA\$1BANK\$1ACCOUNT\$1NUMBER, CROATIA\$1BANK\$1ACCOUNT\$1NUMBER, CYPRUS\$1BANK\$1ACCOUNT\$1NUMBER, CZECH\$1REPUBLIC\$1BANK\$1ACCOUNT\$1NUMBER, DENMARK\$1BANK\$1ACCOUNT\$1NUMBER, DOMINICAN\$1REPUBLIC\$1BANK\$1ACCOUNT\$1NUMBER, EGYPT\$1BANK\$1ACCOUNT\$1NUMBER, ESTONIA\$1BANK\$1ACCOUNT\$1NUMBER, FAROE\$1ISLANDS\$1BANK\$1ACCOUNT\$1NUMBER, FINLAND\$1BANK\$1ACCOUNT\$1NUMBER, FRANCE\$1BANK\$1ACCOUNT\$1NUMBER, GEORGIA\$1BANK\$1ACCOUNT\$1NUMBER, GERMANY\$1BANK\$1ACCOUNT\$1NUMBER, GREECE\$1BANK\$1ACCOUNT\$1NUMBER, GREENLAND\$1BANK\$1ACCOUNT\$1NUMBER, HUNGARY\$1BANK\$1ACCOUNT\$1NUMBER, ICELAND\$1BANK\$1ACCOUNT\$1NUMBER, IRELAND\$1BANK\$1ACCOUNT\$1NUMBER, ITALY\$1BANK\$1ACCOUNT\$1NUMBER, JORDAN\$1BANK\$1ACCOUNT\$1NUMBER, KOSOVO\$1BANK\$1ACCOUNT\$1NUMBER, LIECHTENSTEIN\$1BANK\$1ACCOUNT\$1NUMBER, LITHUANIA\$1BANK\$1ACCOUNT\$1NUMBER, MALTA\$1BANK\$1ACCOUNT\$1NUMBER, MAURITANIA\$1BANK\$1ACCOUNT\$1NUMBER, MAURITIUS\$1BANK\$1ACCOUNT\$1NUMBER, MONACO\$1BANK\$1ACCOUNT\$1NUMBER, MONTENEGRO\$1BANK\$1ACCOUNT\$1NUMBER, NETHERLANDS\$1BANK\$1ACCOUNT\$1NUMBER, NORTH\$1MACEDONIA\$1BANK\$1ACCOUNT\$1NUMBER, POLAND\$1BANK\$1ACCOUNT\$1NUMBER, PORTUGAL\$1BANK\$1ACCOUNT\$1NUMBER, SAN\$1MARINO\$1BANK\$1ACCOUNT\$1NUMBER, SENEGAL\$1BANK\$1ACCOUNT\$1NUMBER, SERBIA\$1BANK\$1ACCOUNT\$1NUMBER, SLOVAKIA\$1BANK\$1ACCOUNT\$1NUMBER, SLOVENIA\$1BANK\$1ACCOUNT\$1NUMBER, SPAIN\$1BANK\$1ACCOUNT\$1NUMBER, SWEDEN\$1BANK\$1ACCOUNT\$1NUMBER, SWITZERLAND\$1BANK\$1ACCOUNT\$1NUMBER, TIMOR\$1LESTE\$1BANK\$1ACCOUNT\$1NUMBER, TUNISIA\$1BANK\$1ACCOUNT\$1NUMBER, TURKIYE\$1BANK\$1ACCOUNT\$1NUMBER, UK\$1BANK\$1ACCOUNT\$1NUMBER, UKRAINE\$1BANK\$1ACCOUNT\$1NUMBER, UNITED\$1ARAB\$1EMIRATES\$1BANK\$1ACCOUNT\$1NUMBER, VIRGIN\$1ISLANDS\$1BANK\$1ACCOUNT\$1NUMBER (for the British Virgin Islands) | No | Albania, Andorra, Bosnia-Herzegovina, Brazil, Bulgaria, Costa Rica, Croatia, Cyprus, Czech Republic, Denmark, Dominican Republic, Egypt, Estonia, Faroe Islands, Finland, France, Georgia, Germany, Greece, Greenland, Hungary, Iceland, Ireland, Italy, Jordan, Kosovo, Liechtenstein, Lithuania, Malta, Mauritania, Mauritius, Monaco, Montenegro, Netherlands, North Macedonia, Poland, Portugal, San Marino, Senegal, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Timor-Leste, Tunisia, Türkiye, UK, Ukraine, United Arab Emirates, Virgin Islands (British) |
| [JSON Web Token (JWT)](mdis-reference-credentials.md#mdis-reference-JSON_WEB_TOKEN) | Credentials | JSON\$1WEB\$1TOKEN | No | Any |
| [Mailing address](mdis-reference-pii.md#mdis-reference-mailing-address) | Personal information: PII | ADDRESS, BRAZIL\$1CEP\$1CODE (for Brazil's Código de Endereçamento Postal) | Varies | Australia, Brazil, Canada, France, Germany, Italy, Spain, UK, US |
| [National Drug Code (NDC)](mdis-reference-phi.md#mdis-reference-NDC) | Personal information: PHI | USA\$1NATIONAL\$1DRUG\$1CODE | Yes | US |
| [National identification number](mdis-reference-pii.md#mdis-reference-national-id) | Personal information: PII | Depending on country or region: ARGENTINA\$1DNI\$1NUMBER, BRAZIL\$1RG\$1NUMBER, CHILE\$1RUT\$1NUMBER, COLOMBIA\$1CITIZENSHIP\$1CARD\$1NUMBER, FRANCE\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, GERMANY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, INDIA\$1AADHAAR\$1NUMBER, ITALY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, MEXICO\$1CURP\$1NUMBER, SPAIN\$1DNI\$1NUMBER | Yes | Argentina, Brazil, Chile, Colombia, France, Germany, India, Italy, Mexico, Spain |
| [National Insurance Number (NINO)](mdis-reference-pii.md#mdis-reference-NINO) | Personal information: PII | UK\$1NATIONAL\$1INSURANCE\$1NUMBER | Yes | UK |
| [National Provider Identifier (NPI)](mdis-reference-phi.md#mdis-reference-NPI) | Personal information: PHI | USA\$1NATIONAL\$1PROVIDER\$1IDENTIFIER | Yes | US |
| [OpenSSH private key](mdis-reference-credentials.md#mdis-reference-OPENSSH_PRIVATE_KEY) | Credentials | OPENSSH\$1PRIVATE\$1KEY | No | Any |
| [Passport number](mdis-reference-pii.md#mdis-reference-passport-num) | Personal information: PII | Depending on country or region: CANADA\$1PASSPORT\$1NUMBER, FRANCE\$1PASSPORT\$1NUMBER, GERMANY\$1PASSPORT\$1NUMBER, ITALY\$1PASSPORT\$1NUMBER, SPAIN\$1PASSPORT\$1NUMBER, UK\$1PASSPORT\$1NUMBER, USA\$1PASSPORT\$1NUMBER | Yes | Canada, France, Germany, Italy, Spain, UK, US |
| [Permanent residence number](mdis-reference-pii.md#mdis-reference-permanent-residence-num) | Personal information: PII | CANADA\$1NATIONAL\$1IDENTIFICATION\$1NUMBER | Yes | Canada |
| [PGP private key](mdis-reference-credentials.md#mdis-reference-PGP_PRIVATE_KEY) | Credentials | PGP\$1PRIVATE\$1KEY | No | Any |
| [Phone number](mdis-reference-pii.md#mdis-reference-phone-num) | Personal information: PII | Depending on country or region: BRAZIL\$1PHONE\$1NUMBER, FRANCE\$1PHONE\$1NUMBER, GERMANY\$1PHONE\$1NUMBER, ITALY\$1PHONE\$1NUMBER, PHONE\$1NUMBER (for Canada and the US), SPAIN\$1PHONE\$1NUMBER, UK\$1PHONE\$1NUMBER | Varies | Brazil, Canada, France, Germany, Italy, Spain, UK, US |
| [Public-Key Cryptography Standard (PKCS) private key](mdis-reference-credentials.md#mdis-reference-PKCS) | Credentials | PKCS | No | Any |
| [Public transportation card number](mdis-reference-pii.md#mdis-reference-public-transport-num) | Personal information: PII | ARGENTINA\$1TARJETA\$1SUBE | Yes | Argentina |
| [PuTTY private key](mdis-reference-credentials.md#mdis-reference-PUTTY_PRIVATE_KEY) | Credentials | PUTTY\$1PRIVATE\$1KEY | No | Any |
| [Social Insurance Number (SIN)](mdis-reference-pii.md#mdis-reference-social-insurance-num) | Personal information: PII | CANADA\$1SOCIAL\$1INSURANCE\$1NUMBER | Yes | Canada |
| [Social Security number (SSN)](mdis-reference-pii.md#mdis-reference-social-security-num) | Personal information: PII | Depending on country or region: SPAIN\$1SOCIAL\$1SECURITY\$1NUMBER, USA\$1SOCIAL\$1SECURITY\$1NUMBER | Yes | Spain, US |
| [Stripe API key](mdis-reference-credentials.md#mdis-reference-Stripe_API_key) | Credentials | STRIPE\$1CREDENTIALS | No | Any |
| [Taxpayer identification or reference number](mdis-reference-pii.md#mdis-reference-taxpayer-num) | Personal information: PII | Depending on country or region: ARGENTINA\$1INDIVIDUAL\$1TAX\$1IDENTIFICATION\$1NUMBER, ARGENTINA\$1ORGANIZATION\$1TAX\$1IDENTIFICATION\$1NUMBER, AUSTRALIA\$1TAX\$1FILE\$1NUMBER, BRAZIL\$1CNPJ\$1NUMBER, BRAZIL\$1CPF\$1NUMBER, CHILE\$1RUT\$1NUMBER, COLOMBIA\$1INDIVIDUAL\$1NIT\$1NUMBER, COLOMBIA\$1ORGANIZATION\$1NIT\$1NUMBER, FRANCE\$1TAX\$1IDENTIFICATION\$1NUMBER, GERMANY\$1TAX\$1IDENTIFICATION\$1NUMBER, INDIA\$1PERMANENT\$1ACCOUNT\$1NUMBER, ITALY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, MEXICO\$1INDIVIDUAL\$1RFC\$1NUMBER, MEXICO\$1ORGANIZATION\$1RFC\$1NUMBER, SPAIN\$1NIE\$1NUMBER, SPAIN\$1NIF\$1NUMBER, SPAIN\$1TAX\$1IDENTIFICATION\$1NUMBER, UK\$1TAX\$1IDENTIFICATION\$1NUMBER, USA\$1INDIVIDUAL\$1TAX\$1IDENTIFICATION\$1NUMBER | Yes | Argentina, Australia, Brazil, Chile, Colombia, France, Germany, India, Italy, Mexico, Spain, UK, US |
| [Unique device identifier (UDI)](mdis-reference-phi.md#mdis-reference-UDI) | Personal information: PHI | MEDICAL\$1DEVICE\$1UDI | Yes | US |
| [Vehicle identification number (VIN)](mdis-reference-pii.md#mdis-reference-vin) | Personal information: PII | VEHICLE\$1IDENTIFICATION\$1NUMBER | Yes | Any, if the VIN is in proximity of a keyword in one of the following languages: English, French, German, Lithuanian, Polish, Portuguese, Romanian, or Spanish |
# Detailed reference: Managed data identifiers by category
In Amazon Macie, *managed data identifiers* are built-in criteria and techniques that are designed to detect specific types of sensitive data. They can detect a large and growing list of sensitive data types for many countries and regions, including multiple types of credentials data, financial information, and personal information. Each managed data identifier is designed to detect a specific type of sensitive data—for example, AWS secret access keys, credit card numbers, or passport numbers for a particular country or region.
Macie can detect several categories of sensitive data by using managed data identifiers. Within each category, Macie can detect multiple types of sensitive data. The topics in this section list and describe each type and any relevant requirements for detecting the data. You can browse the topics by category:
+ [Credentials](mdis-reference-credentials.md) – For credentials data such as private keys and AWS secret access keys.
+ [Financial information](mdis-reference-financial.md) – For financial data such as credit card numbers and bank account numbers.
+ [Personal information: PHI](mdis-reference-phi.md) – For personal health information (PHI) such as health insurance and medical identification numbers.
+ [Personal information: PII](mdis-reference-pii.md) – For personally identifiable information (PII) such as driver's license identification numbers and passport numbers.
Or choose a specific type of sensitive data from the following table. The table lists all the managed data identifiers that Macie currently provides, organized by sensitive data type. The table also summarizes relevant requirements for detecting each type.
| Sensitive data type | Sensitive data category | Managed data identifier ID | Keyword required | Countries and regions |
| --- | --- | --- | --- | --- |
| [AWS secret access key](mdis-reference-credentials.md#mdis-reference-AWS-CREDENTIALS) | Credentials | AWS\$1CREDENTIALS | Yes | Any |
| [Bank account number](mdis-reference-financial.md#mdis-reference-BAN) | Financial information | BANK\$1ACCOUNT\$1NUMBER (for both Canada and the US) | Yes | Canada, US |
| [Basic Bank Account Number (BBAN)](mdis-reference-financial.md#mdis-reference-BBAN) | Financial information | Depending on country or region: FRANCE\$1BANK\$1ACCOUNT\$1NUMBER, GERMANY\$1BANK\$1ACCOUNT\$1NUMBER, ITALY\$1BANK\$1ACCOUNT\$1NUMBER, SPAIN\$1BANK\$1ACCOUNT\$1NUMBER, UK\$1BANK\$1ACCOUNT\$1NUMBER | Yes | France, Germany, Italy, Spain, UK |
| [Birth date](mdis-reference-pii.md#mdis-reference-DATE_OF_BIRTH) | Personal information: PII | DATE\$1OF\$1BIRTH | Yes | Any |
| [Credit card expiration date](mdis-reference-financial.md#mdis-reference-CC-expiration) | Financial information | CREDIT\$1CARD\$1EXPIRATION | Yes | Any |
| [Credit card magnetic stripe data](mdis-reference-financial.md#mdis-reference-CC-stripe) | Financial information | CREDIT\$1CARD\$1MAGNETIC\$1STRIPE | Yes | Any |
| [Credit card number](mdis-reference-financial.md#mdis-reference-CC-number) | Financial information | CREDIT\$1CARD\$1NUMBER (for credit card numbers in proximity of a keyword), CREDIT\$1CARD\$1NUMBER\$1(NO\$1KEYWORD) (for credit card numbers not in proximity of a keyword) | Varies | Any |
| [Credit card verification code](mdis-reference-financial.md#mdis-reference-CC-verification-code) | Financial information | CREDIT\$1CARD\$1SECURITY\$1CODE | Yes | Any |
| [Driver’s license identification number](mdis-reference-pii.md#mdis-reference-DL-num) | Personal information: PII | Depending on country or region: AUSTRALIA\$1DRIVERS\$1LICENSE, AUSTRIA\$1DRIVERS\$1LICENSE, BELGIUM\$1DRIVERS\$1LICENSE, BULGARIA\$1DRIVERS\$1LICENSE, CANADA\$1DRIVERS\$1LICENSE, CROATIA\$1DRIVERS\$1LICENSE, CYPRUS\$1DRIVERS\$1LICENSE, CZECHIA\$1DRIVERS\$1LICENSE, DENMARK\$1DRIVERS\$1LICENSE, DRIVERS\$1LICENSE (for the US), ESTONIA\$1DRIVERS\$1LICENSE, FINLAND\$1DRIVERS\$1LICENSE, FRANCE\$1DRIVERS\$1LICENSE, GERMANY\$1DRIVERS\$1LICENSE, GREECE\$1DRIVERS\$1LICENSE, HUNGARY\$1DRIVERS\$1LICENSE, INDIA\$1DRIVERS\$1LICENSE, IRELAND\$1DRIVERS\$1LICENSE, ITALY\$1DRIVERS\$1LICENSE, LATVIA\$1DRIVERS\$1LICENSE, LITHUANIA\$1DRIVERS\$1LICENSE, LUXEMBOURG\$1DRIVERS\$1LICENSE, MALTA\$1DRIVERS\$1LICENSE, NETHERLANDS\$1DRIVERS\$1LICENSE, POLAND\$1DRIVERS\$1LICENSE, PORTUGAL\$1DRIVERS\$1LICENSE, ROMANIA\$1DRIVERS\$1LICENSE, SLOVAKIA\$1DRIVERS\$1LICENSE, SLOVENIA\$1DRIVERS\$1LICENSE, SPAIN\$1DRIVERS\$1LICENSE, SWEDEN\$1DRIVERS\$1LICENSE, UK\$1DRIVERS\$1LICENSE | Yes | Australia, Austria, Belgium, Bulgaria, Canada, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, India, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, UK, US |
| [Drug Enforcement Agency (DEA) Registration Number](mdis-reference-phi.md#mdis-reference-DEA-registration-num) | Personal information: PHI | US\$1DRUG\$1ENFORCEMENT\$1AGENCY\$1NUMBER | Yes | US |
| [Electoral roll number](mdis-reference-pii.md#mdis-reference-electoral-roll-num) | Personal information: PII | UK\$1ELECTORAL\$1ROLL\$1NUMBER | Yes | UK |
| [Full name](mdis-reference-pii.md#mdis-reference-full-name) | Personal information: PII | NAME | No | Any, if the name uses a Latin character set |
| [Global Positioning System (GPS) coordinates](mdis-reference-pii.md#mdis-reference-GPS) | Personal information: PII | LATITUDE\$1LONGITUDE | Yes | Any, if the coordinates are in proximity of an English keyword |
| [Google Cloud API key](mdis-reference-credentials.md#mdis-reference-GCP-API-key) | Credentials | GCP\$1API\$1KEY | Yes | Any |
| [Health Insurance Claim Number (HICN)](mdis-reference-phi.md#mdis-reference-HICN) | Personal information: PHI | USA\$1HEALTH\$1INSURANCE\$1CLAIM\$1NUMBER | Yes | US |
| [Health insurance or medical identification number](mdis-reference-phi.md#mdis-reference-HI-ID) | Personal information: PHI | Depending on country or region: CANADA\$1HEALTH\$1NUMBER, EUROPEAN\$1HEALTH\$1INSURANCE\$1CARD\$1NUMBER, FINLAND\$1EUROPEAN\$1HEALTH\$1INSURANCE\$1NUMBER, FRANCE\$1HEALTH\$1INSURANCE\$1NUMBER, UK\$1NHS\$1NUMBER, USA\$1MEDICARE\$1BENEFICIARY\$1IDENTIFIER | Yes | Canada, EU, Finland, France, UK, US |
| [Healthcare Common Procedure Coding System (HCPCS) code](mdis-reference-phi.md#mdis-reference-HCPCS) | Personal information: PHI | USA\$1HEALTHCARE\$1PROCEDURE\$1CODE | Yes | US |
| [HTTP Basic Authorization header](mdis-reference-credentials.md#mdis-reference-HTTP_BASIC_AUTH_HEADER) | Credentials | HTTP\$1BASIC\$1AUTH\$1HEADER | No | Any |
| [HTTP cookie](mdis-reference-pii.md#mdis-reference-HTTP_COOKIE) | Personal information: PII | HTTP\$1COOKIE | No | Any |
| [International Bank Account Number (IBAN)](mdis-reference-financial.md#mdis-reference-IBAN) | Financial information | Depending on country or region: ALBANIA\$1BANK\$1ACCOUNT\$1NUMBER, ANDORRA\$1BANK\$1ACCOUNT\$1NUMBER, BOSNIA\$1AND\$1HERZEGOVINA\$1BANK\$1ACCOUNT\$1NUMBER, BRAZIL\$1BANK\$1ACCOUNT\$1NUMBER, BULGARIA\$1BANK\$1ACCOUNT\$1NUMBER, COSTA\$1RICA\$1BANK\$1ACCOUNT\$1NUMBER, CROATIA\$1BANK\$1ACCOUNT\$1NUMBER, CYPRUS\$1BANK\$1ACCOUNT\$1NUMBER, CZECH\$1REPUBLIC\$1BANK\$1ACCOUNT\$1NUMBER, DENMARK\$1BANK\$1ACCOUNT\$1NUMBER, DOMINICAN\$1REPUBLIC\$1BANK\$1ACCOUNT\$1NUMBER, EGYPT\$1BANK\$1ACCOUNT\$1NUMBER, ESTONIA\$1BANK\$1ACCOUNT\$1NUMBER, FAROE\$1ISLANDS\$1BANK\$1ACCOUNT\$1NUMBER, FINLAND\$1BANK\$1ACCOUNT\$1NUMBER, FRANCE\$1BANK\$1ACCOUNT\$1NUMBER, GEORGIA\$1BANK\$1ACCOUNT\$1NUMBER, GERMANY\$1BANK\$1ACCOUNT\$1NUMBER, GREECE\$1BANK\$1ACCOUNT\$1NUMBER, GREENLAND\$1BANK\$1ACCOUNT\$1NUMBER, HUNGARY\$1BANK\$1ACCOUNT\$1NUMBER, ICELAND\$1BANK\$1ACCOUNT\$1NUMBER, IRELAND\$1BANK\$1ACCOUNT\$1NUMBER, ITALY\$1BANK\$1ACCOUNT\$1NUMBER, JORDAN\$1BANK\$1ACCOUNT\$1NUMBER, KOSOVO\$1BANK\$1ACCOUNT\$1NUMBER, LIECHTENSTEIN\$1BANK\$1ACCOUNT\$1NUMBER, LITHUANIA\$1BANK\$1ACCOUNT\$1NUMBER, MALTA\$1BANK\$1ACCOUNT\$1NUMBER, MAURITANIA\$1BANK\$1ACCOUNT\$1NUMBER, MAURITIUS\$1BANK\$1ACCOUNT\$1NUMBER, MONACO\$1BANK\$1ACCOUNT\$1NUMBER, MONTENEGRO\$1BANK\$1ACCOUNT\$1NUMBER, NETHERLANDS\$1BANK\$1ACCOUNT\$1NUMBER, NORTH\$1MACEDONIA\$1BANK\$1ACCOUNT\$1NUMBER, POLAND\$1BANK\$1ACCOUNT\$1NUMBER, PORTUGAL\$1BANK\$1ACCOUNT\$1NUMBER, SAN\$1MARINO\$1BANK\$1ACCOUNT\$1NUMBER, SENEGAL\$1BANK\$1ACCOUNT\$1NUMBER, SERBIA\$1BANK\$1ACCOUNT\$1NUMBER, SLOVAKIA\$1BANK\$1ACCOUNT\$1NUMBER, SLOVENIA\$1BANK\$1ACCOUNT\$1NUMBER, SPAIN\$1BANK\$1ACCOUNT\$1NUMBER, SWEDEN\$1BANK\$1ACCOUNT\$1NUMBER, SWITZERLAND\$1BANK\$1ACCOUNT\$1NUMBER, TIMOR\$1LESTE\$1BANK\$1ACCOUNT\$1NUMBER, TUNISIA\$1BANK\$1ACCOUNT\$1NUMBER, TURKIYE\$1BANK\$1ACCOUNT\$1NUMBER, UK\$1BANK\$1ACCOUNT\$1NUMBER, UKRAINE\$1BANK\$1ACCOUNT\$1NUMBER, UNITED\$1ARAB\$1EMIRATES\$1BANK\$1ACCOUNT\$1NUMBER, VIRGIN\$1ISLANDS\$1BANK\$1ACCOUNT\$1NUMBER (for the British Virgin Islands) | No | Albania, Andorra, Bosnia-Herzegovina, Brazil, Bulgaria, Costa Rica, Croatia, Cyprus, Czech Republic, Denmark, Dominican Republic, Egypt, Estonia, Faroe Islands, Finland, France, Georgia, Germany, Greece, Greenland, Hungary, Iceland, Ireland, Italy, Jordan, Kosovo, Liechtenstein, Lithuania, Malta, Mauritania, Mauritius, Monaco, Montenegro, Netherlands, North Macedonia, Poland, Portugal, San Marino, Senegal, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Timor-Leste, Tunisia, Türkiye, UK, Ukraine, United Arab Emirates, Virgin Islands (British) |
| [JSON Web Token (JWT)](mdis-reference-credentials.md#mdis-reference-JSON_WEB_TOKEN) | Credentials | JSON\$1WEB\$1TOKEN | No | Any |
| [Mailing address](mdis-reference-pii.md#mdis-reference-mailing-address) | Personal information: PII | ADDRESS, BRAZIL\$1CEP\$1CODE (for Brazil's Código de Endereçamento Postal) | Varies | Australia, Brazil, Canada, France, Germany, Italy, Spain, UK, US |
| [National Drug Code (NDC)](mdis-reference-phi.md#mdis-reference-NDC) | Personal information: PHI | USA\$1NATIONAL\$1DRUG\$1CODE | Yes | US |
| [National identification number](mdis-reference-pii.md#mdis-reference-national-id) | Personal information: PII | Depending on country or region: ARGENTINA\$1DNI\$1NUMBER, BRAZIL\$1RG\$1NUMBER, CHILE\$1RUT\$1NUMBER, COLOMBIA\$1CITIZENSHIP\$1CARD\$1NUMBER, FRANCE\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, GERMANY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, INDIA\$1AADHAAR\$1NUMBER, ITALY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, MEXICO\$1CURP\$1NUMBER, SPAIN\$1DNI\$1NUMBER | Yes | Argentina, Brazil, Chile, Colombia, France, Germany, India, Italy, Mexico, Spain |
| [National Insurance Number (NINO)](mdis-reference-pii.md#mdis-reference-NINO) | Personal information: PII | UK\$1NATIONAL\$1INSURANCE\$1NUMBER | Yes | UK |
| [National Provider Identifier (NPI)](mdis-reference-phi.md#mdis-reference-NPI) | Personal information: PHI | USA\$1NATIONAL\$1PROVIDER\$1IDENTIFIER | Yes | US |
| [OpenSSH private key](mdis-reference-credentials.md#mdis-reference-OPENSSH_PRIVATE_KEY) | Credentials | OPENSSH\$1PRIVATE\$1KEY | No | Any |
| [Passport number](mdis-reference-pii.md#mdis-reference-passport-num) | Personal information: PII | Depending on country or region: CANADA\$1PASSPORT\$1NUMBER, FRANCE\$1PASSPORT\$1NUMBER, GERMANY\$1PASSPORT\$1NUMBER, ITALY\$1PASSPORT\$1NUMBER, SPAIN\$1PASSPORT\$1NUMBER, UK\$1PASSPORT\$1NUMBER, USA\$1PASSPORT\$1NUMBER | Yes | Canada, France, Germany, Italy, Spain, UK, US |
| [Permanent residence number](mdis-reference-pii.md#mdis-reference-permanent-residence-num) | Personal information: PII | CANADA\$1NATIONAL\$1IDENTIFICATION\$1NUMBER | Yes | Canada |
| [PGP private key](mdis-reference-credentials.md#mdis-reference-PGP_PRIVATE_KEY) | Credentials | PGP\$1PRIVATE\$1KEY | No | Any |
| [Phone number](mdis-reference-pii.md#mdis-reference-phone-num) | Personal information: PII | Depending on country or region: BRAZIL\$1PHONE\$1NUMBER, FRANCE\$1PHONE\$1NUMBER, GERMANY\$1PHONE\$1NUMBER, ITALY\$1PHONE\$1NUMBER, PHONE\$1NUMBER (for Canada and the US), SPAIN\$1PHONE\$1NUMBER, UK\$1PHONE\$1NUMBER | Varies | Brazil, Canada, France, Germany, Italy, Spain, UK, US |
| [Public-Key Cryptography Standard (PKCS) private key](mdis-reference-credentials.md#mdis-reference-PKCS) | Credentials | PKCS | No | Any |
| [Public transportation card number](mdis-reference-pii.md#mdis-reference-public-transport-num) | Personal information: PII | ARGENTINA\$1TARJETA\$1SUBE | Yes | Argentina |
| [PuTTY private key](mdis-reference-credentials.md#mdis-reference-PUTTY_PRIVATE_KEY) | Credentials | PUTTY\$1PRIVATE\$1KEY | No | Any |
| [Social Insurance Number (SIN)](mdis-reference-pii.md#mdis-reference-social-insurance-num) | Personal information: PII | CANADA\$1SOCIAL\$1INSURANCE\$1NUMBER | Yes | Canada |
| [Social Security number (SSN)](mdis-reference-pii.md#mdis-reference-social-security-num) | Personal information: PII | Depending on country or region: SPAIN\$1SOCIAL\$1SECURITY\$1NUMBER, USA\$1SOCIAL\$1SECURITY\$1NUMBER | Yes | Spain, US |
| [Stripe API key](mdis-reference-credentials.md#mdis-reference-Stripe_API_key) | Credentials | STRIPE\$1CREDENTIALS | No | Any |
| [Taxpayer identification or reference number](mdis-reference-pii.md#mdis-reference-taxpayer-num) | Personal information: PII | Depending on country or region: ARGENTINA\$1INDIVIDUAL\$1TAX\$1IDENTIFICATION\$1NUMBER, ARGENTINA\$1ORGANIZATION\$1TAX\$1IDENTIFICATION\$1NUMBER, AUSTRALIA\$1TAX\$1FILE\$1NUMBER, BRAZIL\$1CNPJ\$1NUMBER, BRAZIL\$1CPF\$1NUMBER, CHILE\$1RUT\$1NUMBER, COLOMBIA\$1INDIVIDUAL\$1NIT\$1NUMBER, COLOMBIA\$1ORGANIZATION\$1NIT\$1NUMBER, FRANCE\$1TAX\$1IDENTIFICATION\$1NUMBER, GERMANY\$1TAX\$1IDENTIFICATION\$1NUMBER, INDIA\$1PERMANENT\$1ACCOUNT\$1NUMBER, ITALY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, MEXICO\$1INDIVIDUAL\$1RFC\$1NUMBER, MEXICO\$1ORGANIZATION\$1RFC\$1NUMBER, SPAIN\$1NIE\$1NUMBER, SPAIN\$1NIF\$1NUMBER, SPAIN\$1TAX\$1IDENTIFICATION\$1NUMBER, UK\$1TAX\$1IDENTIFICATION\$1NUMBER, USA\$1INDIVIDUAL\$1TAX\$1IDENTIFICATION\$1NUMBER | Yes | Argentina, Australia, Brazil, Chile, Colombia, France, Germany, India, Italy, Mexico, Spain, UK, US |
| [Unique device identifier (UDI)](mdis-reference-phi.md#mdis-reference-UDI) | Personal information: PHI | MEDICAL\$1DEVICE\$1UDI | Yes | US |
| [Vehicle identification number (VIN)](mdis-reference-pii.md#mdis-reference-vin) | Personal information: PII | VEHICLE\$1IDENTIFICATION\$1NUMBER | Yes | Any, if the VIN is in proximity of a keyword in one of the following languages: English, French, German, Lithuanian, Polish, Portuguese, Romanian, or Spanish |
# Managed data identifiers for credentials data
Amazon Macie can detect multiple types of sensitive credentials data by using managed data identifiers. The topics on this page specify each type and provide information about the managed data identifier that's designed to detect the data. Each topic provides the following information:
+ **Managed data identifier ID** – Specifies the unique identifier (ID) for the managed data identifier that's designed to detect the data. When you [create a sensitive data discovery job](discovery-jobs-create.md) or [configure settings for automated sensitive data discovery](discovery-asdd-account-configure.md), you can use this ID to specify whether you want Macie to use the managed data identifier when it analyzes data.
+ **Supported countries and regions** – Indicates which countries or regions the applicable managed data identifier is designed for. If the managed data identifier isn't designed for a particular country or region, this value is *Any*.
+ **Keyword required** – Specifies whether detection requires a keyword to be in proximity of the data. If a keyword is required, the topic also provides examples of required keywords. For information about how Macie uses keywords when it analyzes data, see [Keyword requirements](managed-data-identifiers-keywords.md).
+ **Comments** – Provides any relevant details that might affect your choice of managed data identifier or your investigation into reported occurrences of the sensitive data. The details include information such as supported standards, syntax requirements, and exceptions.
The topics are listed in alphabetical order by sensitive data type.
**Topics**
+ [AWS secret access key](#mdis-reference-AWS-CREDENTIALS)
+ [Google Cloud API key](#mdis-reference-GCP-API-key)
+ [HTTP Basic Authorization header](#mdis-reference-HTTP_BASIC_AUTH_HEADER)
+ [JSON Web Token (JWT)](#mdis-reference-JSON_WEB_TOKEN)
+ [OpenSSH private key](#mdis-reference-OPENSSH_PRIVATE_KEY)
+ [PGP private key](#mdis-reference-PGP_PRIVATE_KEY)
+ [Public-Key Cryptography Standard (PKCS) private key](#mdis-reference-PKCS)
+ [PuTTY private key](#mdis-reference-PUTTY_PRIVATE_KEY)
+ [Stripe API key](#mdis-reference-Stripe_API_key)
## AWS secret access key
**Managed data identifier ID:** AWS\$1CREDENTIALS
**Supported countries and regions:** Any
**Keyword required:** Yes. Keywords include: *aws\$1secret\$1access\$1key, credentials, secret access key, secret key, set-awscredential*
**Comments:** Macie doesn't report occurrences of the following character sequences, which are commonly used as fictitious examples: `je7MtGbClwBF/2Zp9Utk/h3yCo8nvbEXAMPLEKEY` and `wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY`.
## Google Cloud API key
**Managed data identifier ID:** GCP\$1API\$1KEY
**Supported countries and regions:** Any
**Keyword required:** Yes. Keywords include: *G\$1PLACES\$1KEY, GCP api key, GCP key, google cloud key, google-api-key, google-cloud-apikeys, GOOGLEKEY, X-goog-api-key*
**Comments:** Macie can detect only the string (`keyString`) component of a Google Cloud API key. Support doesn't include detection of the ID or display name component of a Google Cloud API key.
## HTTP Basic Authorization header
**Managed data identifier ID:** HTTP\$1BASIC\$1AUTH\$1HEADER
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** Detection requires a complete header, including the field name and authentication scheme directive, as specified by [RFC 7617](https://tools.ietf.org/html/rfc7617). For example: `Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==` and `Proxy-Authorization: Basic dGVzdDoxMjPCow==`.
## JSON Web Token (JWT)
**Managed data identifier ID:** JSON\$1WEB\$1TOKEN
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** Macie can detect JSON Web Tokens (JWTs) that comply with the requirements specified by [RFC 7519](https://tools.ietf.org/html/rfc7519) for JSON Web Signature (JWS) structures. The tokens can be signed or unsigned.
## OpenSSH private key
**Managed data identifier ID:** OPENSSH\$1PRIVATE\$1KEY
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** None
## PGP private key
**Managed data identifier ID:** PGP\$1PRIVATE\$1KEY
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** None
## Public-Key Cryptography Standard (PKCS) private key
**Managed data identifier ID:** PKCS
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** None
## PuTTY private key
**Managed data identifier ID:** PUTTY\$1PRIVATE\$1KEY
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** Macie can detect PuTTY private keys that use the following standard headers and header sequence: `PuTTY-User-Key-File`, `Encryption`, `Comment`, `Public-Lines`, `Private-Lines`, and `Private-MAC`. The header values can contain alphanumeric characters, hyphens (`‐`), and newline characters (`\n` or `\r`). `Public-Lines` and `Private-Lines` values can also contain forward slashes (`/`), plus signs (`+`), and equal signs (`=`). `Private-MAC` values can also contain plus signs (`+`). Support doesn’t include detection of private keys with header values that contain other characters, such as spaces or underscores (`_`). Support also doesn’t include detection of private keys that include custom headers.
## Stripe API key
**Managed data identifier ID:** STRIPE\$1CREDENTIALS
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** Macie doesn't report occurrences of the following character sequences, which are commonly used in Stripe code examples: `sk_test_4eC39HqLyjWDarjtT1zdp7dc` and `pk_test_TYooMQauvdEDq54NiTphI7jx`.
# Managed data identifiers for financial information
Amazon Macie can detect multiple types of sensitive financial information by using managed data identifiers. The topics on this page list each type and provide information about the managed data identifiers that are designed to detect the data. Each topic provides the following information:
+ **Managed data identifier ID** – Specifies the unique identifier (ID) for one or more managed data identifiers that are designed to detect the data. When you [create a sensitive data discovery job](discovery-jobs-create.md) or [configure settings for automated sensitive data discovery](discovery-asdd-account-configure.md), you can use these IDs to specify which managed data identifiers you want Macie to use when it analyzes data.
+ **Supported countries and regions** – Indicates which countries and regions the applicable managed data identifiers are designed for. If the managed data identifiers aren't designed for particular countries or regions, this value is *Any*.
+ **Keyword required** – Specifies whether detection requires a keyword to be in proximity of the data. If a keyword is required, the topic also provides examples of required keywords. For information about how Macie uses keywords when it analyzes data, see [Keyword requirements](managed-data-identifiers-keywords.md).
+ **Comments** – Provides any relevant details that might affect your choice of managed data identifier or your investigation into reported occurrences of the sensitive data. The details include information such as supported standards, syntax requirements, and exceptions.
The topics are listed in alphabetical order by sensitive data type.
**Topics**
+ [Bank account number](#mdis-reference-BAN)
+ [Basic Bank Account Number (BBAN)](#mdis-reference-BBAN)
+ [Credit card expiration date](#mdis-reference-CC-expiration)
+ [Credit card magnetic stripe data](#mdis-reference-CC-stripe)
+ [Credit card number](#mdis-reference-CC-number)
+ [Credit card verification code](#mdis-reference-CC-verification-code)
+ [International Bank Account Number (IBAN)](#mdis-reference-IBAN)
## Bank account number
Macie can detect Canadian and US bank account numbers that consist of 9–17 digit sequences and don't contain any spaces.
**Managed data identifier ID:** BANK\$1ACCOUNT\$1NUMBER
**Supported countries and regions:** Canada, US
**Keyword required:** Yes. Keywords include: *bank account, bank acct, checking account, checking acct, deposit account, deposit acct, savings account, savings acct, chequing account, chequing acct*
**Comments:** This managed data identifier is explicitly designed to detect bank account numbers for Canada and the US. These countries don’t use the Basic Bank Account Number (BBAN) or International Bank Account Number (IBAN) formats defined by the ISO international standard for numbering bank accounts, as specified by [ISO 13616](https://www.iso.org/standard/81090.html). To detect bank account numbers for other countries and regions, use the managed data identifiers that are designed for those formats. For more information, see [Basic Bank Account Number (BBAN)](#mdis-reference-BBAN) and [International Bank Account Number (IBAN)](#mdis-reference-IBAN).
## Basic Bank Account Number (BBAN)
Macie can detect Basic Bank Account Numbers (BBANs) that conform to the BBAN structure defined by the ISO international standard for numbering bank accounts, as specified by [ISO 13616](https://www.iso.org/standard/81090.html). This includes BBANs that don't contain spaces, or use space or hyphen separators—for example, `NWBK60161331926819`, `NWBK 6016 1331 9268 19`, and `NWBK-6016-1331-9268-19`.
**Managed data identifier ID:** Depending on country or region, FRANCE\$1BANK\$1ACCOUNT\$1NUMBER, GERMANY\$1BANK\$1ACCOUNT\$1NUMBER, ITALY\$1BANK\$1ACCOUNT\$1NUMBER, SPAIN\$1BANK\$1ACCOUNT\$1NUMBER, UK\$1BANK\$1ACCOUNT\$1NUMBER
**Supported countries and regions:** France, Germany, Italy, Spain, UK
**Keyword required:** Yes. The following table lists the keywords that Macie recognizes for specific countries and regions.
| Country or region | Keywords |
| --- | --- |
| France | account code, account number, accountno\$1, accountnumber\$1, bban, code bancaire, compte bancaire, customer account id, customer account number, customer bank account id, iban, numéro de compte |
| Germany | account code, account number, accountno\$1, accountnumber\$1, bankleitzahl, bban, customer account id, customer account number, customer bank account id, geheimzahl, iban, kartennummer, kontonummer, kreditkartennummer, sepa |
| Italy | account code, account number, accountno\$1, accountnumber\$1, bban, codice bancario, conto bancario, customer account id, customer account number, customer bank account id, iban, numero di conto |
| Spain | account code, account number, accountno\$1, accountnumber\$1, bban, código cuenta, código cuenta bancaria, cuenta cliente id, customer account ID, customer account number, customer bank account id, iban, número cuenta bancaria cliente, número cuenta cliente |
| UK | account code, account number, accountno\$1, accountnumber\$1, bban, customer account id, customer account number, customer bank account id, iban, sepa |
**Comments:** These managed data identifiers can also detect International Bank Account Numbers (IBANs) that comply with the ISO 13616 standard. For more information, see [International Bank Account Number (IBAN)](#mdis-reference-IBAN). The managed data identifier for the UK (UK\$1BANK\$1ACCOUNT\$1NUMBER) can also detect domestic bank account numbers for the UK—for example, `60-16-13 31926819`.
## Credit card expiration date
**Managed data identifier ID:** CREDIT\$1CARD\$1EXPIRATION
**Supported countries and regions:** Any
**Keyword required:** Yes. Keywords include: *exp d, exp m, exp y, expiration, expiry*
**Comments:** Support includes most date formats, such as all digits and combinations of digits and names of months. Date components can be separated by slashes (/), hyphens (‐), or applicable keywords. For example, Macie can detect dates such as `02/26`, `02/2026`, `Feb 2026`, `26-Feb`, and `expY=2026, expM=02`.
## Credit card magnetic stripe data
**Managed data identifier ID:** CREDIT\$1CARD\$1MAGNETIC\$1STRIPE
**Supported countries and regions:** Any
**Keyword required:** Yes. Keywords include: *card data, iso7813, mag, magstripe, stripe, swipe*
**Comments:** Support includes tracks 1 and 2.
## Credit card number
**Managed data identifier ID:** CREDIT\$1CARD\$1NUMBER for credit card numbers that are in proximity of a keyword, CREDIT\$1CARD\$1NUMBER\$1(NO\$1KEYWORD) for credit card numbers that aren't in proximity of a keyword
**Supported countries and regions:** Any
**Keyword required:** Varies. Keywords are required by the CREDIT\$1CARD\$1NUMBER managed data identifier. Keywords include: *account number, american express, amex, bank card, c card, card, cc \$1, ccn, check card, cred card, credit, credit card, credit cards, credit no, credit num, dankort, debit, debit card, debit no, debit num, diners club, discover, electron, japanese card bureau, jcb, mastercard, mc, pan, payment account number, payment card number, pcn, pmnt \$1, pmnt card, pmnt no, pmnt number, union pay, visa*. Keywords aren't required by the CREDIT\$1CARD\$1NUMBER\$1(NO\$1KEYWORD) managed data identifier.
**Comments:** Detection requires the data to be a 13–19 digit sequence that adheres to the Luhn check formula and uses a standard card number prefix for any of the following types of credit cards: American Express, Dankort, Diner’s Club, Discover, Electron, Japanese Card Bureau (JCB), Mastercard, UnionPay, and Visa.
Macie doesn't report occurrences of the following sequences, which credit card issuers have reserved for public testing: `122000000000003`, `2222405343248877`, `2222990905257051`, `2223007648726984`, `2223577120017656`, `30569309025904`, `34343434343434`, `3528000700000000`, `3530111333300000`, `3566002020360505`, `36148900647913`, `36700102000000`, `371449635398431`, `378282246310005`, `378734493671000`, `38520000023237`, `4012888888881881`, `4111111111111111`, `4222222222222`, `4444333322221111`, `4462030000000000`, `4484070000000000`, `4911830000000`, `4917300800000000`, `4917610000000000`, `4917610000000000003`, `5019717010103742`, `5105105105105100`, `5111010030175156`, `5185540810000019`, `5200828282828210`, `5204230080000017`, `5204740009900014`, `5420923878724339`, `5454545454545454`, `5455330760000018`, `5506900490000436`, `5506900490000444`, `5506900510000234`, `5506920809243667`, `5506922400634930`, `5506927427317625`, `5553042241984105`, `5555553753048194`, `5555555555554444`, `5610591081018250`, `6011000990139424`, `6011000400000000`, `6011111111111117`, `630490017740292441`, `630495060000000000`, `6331101999990016`, `6759649826438453`, `6799990100000000019`, and `76009244561`.
## Credit card verification code
**Managed data identifier ID:** CREDIT\$1CARD\$1SECURITY\$1CODE
**Supported countries and regions:** Any
**Keyword required:** Yes. Keywords include: *card id, card identification code, card identification number, card security code, card validation code, card validation number, card verification data, card verification value, cvc, cvc2, cvv, cvv2, elo verification code*
**Comments:** None
## International Bank Account Number (IBAN)
Macie can detect International Bank Account Numbers (IBANs) that consist of up to 34 alphanumeric characters, including elements such as country code. More specifically, Macie can detect IBANs that comply with the ISO international standard for numbering bank accounts, as specified by [ISO 13616](https://www.iso.org/standard/81090.html). This includes IBANs that don't contain spaces, or use space or hyphen separators—for example, `GB29NWBK60161331926819`, `GB29 NWBK 6016 1331 9268 19`, and `GB29-NWBK-6016-1331-9268-19`. Detection includes validation checks based on the Modulus 97 scheme.
**Managed data identifier ID:** Depending on country or region, ALBANIA\$1BANK\$1ACCOUNT\$1NUMBER, ANDORRA\$1BANK\$1ACCOUNT\$1NUMBER, BOSNIA\$1AND\$1HERZEGOVINA\$1BANK\$1ACCOUNT\$1NUMBER, BRAZIL\$1BANK\$1ACCOUNT\$1NUMBER, BULGARIA\$1BANK\$1ACCOUNT\$1NUMBER, COSTA\$1RICA\$1BANK\$1ACCOUNT\$1NUMBER, CROATIA\$1BANK\$1ACCOUNT\$1NUMBER, CYPRUS\$1BANK\$1ACCOUNT\$1NUMBER, CZECH\$1REPUBLIC\$1BANK\$1ACCOUNT\$1NUMBER, DENMARK\$1BANK\$1ACCOUNT\$1NUMBER, DOMINICAN\$1REPUBLIC\$1BANK\$1ACCOUNT\$1NUMBER, EGYPT\$1BANK\$1ACCOUNT\$1NUMBER, ESTONIA\$1BANK\$1ACCOUNT\$1NUMBER, FAROE\$1ISLANDS\$1BANK\$1ACCOUNT\$1NUMBER, FINLAND\$1BANK\$1ACCOUNT\$1NUMBER, FRANCE\$1BANK\$1ACCOUNT\$1NUMBER, GEORGIA\$1BANK\$1ACCOUNT\$1NUMBER, GERMANY\$1BANK\$1ACCOUNT\$1NUMBER, GREECE\$1BANK\$1ACCOUNT\$1NUMBER, GREENLAND\$1BANK\$1ACCOUNT\$1NUMBER, HUNGARY\$1BANK\$1ACCOUNT\$1NUMBER, ICELAND\$1BANK\$1ACCOUNT\$1NUMBER, IRELAND\$1BANK\$1ACCOUNT\$1NUMBER, ITALY\$1BANK\$1ACCOUNT\$1NUMBER, JORDAN\$1BANK\$1ACCOUNT\$1NUMBER, KOSOVO\$1BANK\$1ACCOUNT\$1NUMBER, LIECHTENSTEIN\$1BANK\$1ACCOUNT\$1NUMBER, LITHUANIA\$1BANK\$1ACCOUNT\$1NUMBER, MALTA\$1BANK\$1ACCOUNT\$1NUMBER, MAURITANIA\$1BANK\$1ACCOUNT\$1NUMBER, MAURITIUS\$1BANK\$1ACCOUNT\$1NUMBER, MONACO\$1BANK\$1ACCOUNT\$1NUMBER, MONTENEGRO\$1BANK\$1ACCOUNT\$1NUMBER, NETHERLANDS\$1BANK\$1ACCOUNT\$1NUMBER, NORTH\$1MACEDONIA\$1BANK\$1ACCOUNT\$1NUMBER, POLAND\$1BANK\$1ACCOUNT\$1NUMBER, PORTUGAL\$1BANK\$1ACCOUNT\$1NUMBER, SAN\$1MARINO\$1BANK\$1ACCOUNT\$1NUMBER, SENEGAL\$1BANK\$1ACCOUNT\$1NUMBER, SERBIA\$1BANK\$1ACCOUNT\$1NUMBER, SLOVAKIA\$1BANK\$1ACCOUNT\$1NUMBER, SLOVENIA\$1BANK\$1ACCOUNT\$1NUMBER, SPAIN\$1BANK\$1ACCOUNT\$1NUMBER, SWEDEN\$1BANK\$1ACCOUNT\$1NUMBER, SWITZERLAND\$1BANK\$1ACCOUNT\$1NUMBER, TIMOR\$1LESTE\$1BANK\$1ACCOUNT\$1NUMBER, TUNISIA\$1BANK\$1ACCOUNT\$1NUMBER, TURKIYE\$1BANK\$1ACCOUNT\$1NUMBER, UK\$1BANK\$1ACCOUNT\$1NUMBER, UKRAINE\$1BANK\$1ACCOUNT\$1NUMBER, UNITED\$1ARAB\$1EMIRATES\$1BANK\$1ACCOUNT\$1NUMBER, VIRGIN\$1ISLANDS\$1BANK\$1ACCOUNT\$1NUMBER (for the British Virgin Islands)
**Supported countries and regions:** Albania, Andorra, Bosnia-Herzegovina, Brazil, Bulgaria, Costa Rica, Croatia, Cyprus, Czech Republic, Denmark, Dominican Republic, Egypt, Estonia, Faroe Islands, Finland, France, Georgia, Germany, Greece, Greenland, Hungary, Iceland, Ireland, Italy, Jordan, Kosovo, Liechtenstein, Lithuania, Malta, Mauritania, Mauritius, Monaco, Montenegro, Netherlands, North Macedonia, Poland, Portugal, San Marino, Senegal, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Timor-Leste, Tunisia, Türkiye, UK, Ukraine, United Arab Emirates, Virgin Islands (British)
**Keyword required:** No
**Comments:** The managed data identifiers for France, Germany, Italy, Spain, and the UK can also detect Basic Bank Account Numbers (BBANs) that conform to the BBAN structure defined by the ISO 13616 standard, if the character sequence is in proximity of a keyword. For more information, see [Basic Bank Account Number (BBAN)](#mdis-reference-BBAN).
# Managed data identifiers for PHI
Amazon Macie can detect multiple types of sensitive, personal health information (PHI) by using managed data identifiers. The topics on this page specify each type and provide information about the managed data identifier that's designed to detect the data. Each topic provides the following information:
+ **Managed data identifier ID** – Specifies the unique identifier (ID) for the managed data identifier that's designed to detect the data. When you [create a sensitive data discovery job](discovery-jobs-create.md) or [configure settings for automated sensitive data discovery](discovery-asdd-account-configure.md), you can use this ID to specify whether you want Macie to use the managed data identifier when it analyzes data.
+ **Supported countries and regions** – Indicates which countries or regions the applicable managed data identifier is designed for. If the managed data identifier isn't designed for a particular country or region, this value is *Any*.
+ **Keyword required** – Specifies whether detection requires a keyword to be in proximity of the data. If a keyword is required, the topic also provides examples of required keywords. For information about how Macie uses keywords when it analyzes data, see [Keyword requirements](managed-data-identifiers-keywords.md).
+ **Comments** – Provides any relevant details that might affect your choice of managed data identifier or your investigation into reported occurrences of the sensitive data. The details include information such as supported standards, syntax requirements, and exceptions.
The topics are listed in alphabetical order by sensitive data type.
**Topics**
+ [Drug Enforcement Agency (DEA) Registration Number](#mdis-reference-DEA-registration-num)
+ [Health Insurance Claim Number (HICN)](#mdis-reference-HICN)
+ [Health insurance or medical identification number](#mdis-reference-HI-ID)
+ [Healthcare Common Procedure Coding System (HCPCS) code](#mdis-reference-HCPCS)
+ [National Drug Code (NDC)](#mdis-reference-NDC)
+ [National Provider Identifier (NPI)](#mdis-reference-NPI)
+ [Unique device identifier (UDI)](#mdis-reference-UDI)
## Drug Enforcement Agency (DEA) Registration Number
**Managed data identifier ID:** US\$1DRUG\$1ENFORCEMENT\$1AGENCY\$1NUMBER
**Supported countries and regions:** US
**Keyword required:** Yes. Keywords include: *dea number, dea registration*
**Comments:** None
## Health Insurance Claim Number (HICN)
**Managed data identifier ID:** USA\$1HEALTH\$1INSURANCE\$1CLAIM\$1NUMBER
**Supported countries and regions:** US
**Keyword required:** Yes. Keywords include: *health insurance claim number, hic no, hic no., hic number, hic\$1, hicn, hicn\$1., hicno\$1*
**Comments:** None
## Health insurance or medical identification number
Support includes European Health Insurance Card numbers for the EU and Finland, health insurance numbers for France, Medicare Beneficiary Identifiers for the US, NHS numbers for the UK, and Personal Health Numbers for Canada.
**Managed data identifier ID:** Depending on country or region, CANADA\$1HEALTH\$1NUMBER, EUROPEAN\$1HEALTH\$1INSURANCE\$1CARD\$1NUMBER, FINLAND\$1EUROPEAN\$1HEALTH\$1INSURANCE\$1NUMBER, FRANCE\$1HEALTH\$1INSURANCE\$1NUMBER, UK\$1NHS\$1NUMBER, USA\$1MEDICARE\$1BENEFICIARY\$1IDENTIFIER
**Supported countries and regions:** Canada, EU, Finland, France, UK, US
**Keyword required:** Yes. The following table lists the keywords that Macie recognizes for specific countries and regions.
| Country or region | Keywords |
| --- | --- |
| Canada | canada healthcare number, msp number, personal healthcare number, phn, soins de santé |
| EU | assicurazione sanitaria numero, carta assicurazione numero, carte d’assurance maladie, carte européenne d'assurance maladie, ceam, ehic, ehic\$1, finlandehicnumber\$1, gesundheitskarte, hälsokort, health card, health card number, health insurance card, health insurance number, insurance card number, krankenversicherungskarte, krankenversicherungsnummer, medical account number, numero conto medico, numéro d’assurance maladie, numéro de carte d’assurance, numéro de compte medical, número de cuenta médica, número de seguro de salud, número de tarjeta de seguro, sairaanhoitokortin, sairausvakuutuskortti, sairausvakuutusnumero, sjukförsäkring nummer, sjukförsäkringskort, suomi ehic-numero, tarjeta de salud, terveyskortti, tessera sanitaria assicurazione numero, versicherungsnummer |
| Finland | ehic, ehic\$1, finland health insurance card, finlandehicnumber\$1, finska sjukförsäkringskort, hälsokort, health card, health card number, health insurance card, health insurance number, sairaanhoitokortin, sairaanhoitokortin, sairausvakuutuskortti, sairausvakuutusnumero, sjukförsäkring nummer, sjukförsäkringskort, suomen sairausvakuutuskortti, suomi ehic-numero, terveyskortti |
| France | carte d'assuré social, carte vitale, insurance card |
| UK | national health service, NHS |
| US | mbi, medicare beneficiary |
**Comments:** None
## Healthcare Common Procedure Coding System (HCPCS) code
**Managed data identifier ID:** USA\$1HEALTHCARE\$1PROCEDURE\$1CODE
**Supported countries and regions:** US
**Keyword required:** Yes. Keywords include: *current procedural terminology, hcpcs, healthcare common procedure coding system*
**Comments:** None
## National Drug Code (NDC)
**Managed data identifier ID:** USA\$1NATIONAL\$1DRUG\$1CODE
**Supported countries and regions:** US
**Keyword required:** Yes. Keywords include: *national drug code, ndc*
**Comments:** None
## National Provider Identifier (NPI)
**Managed data identifier ID:** USA\$1NATIONAL\$1PROVIDER\$1IDENTIFIER
**Supported countries and regions:** US
**Keyword required:** Yes. Keywords include: *hipaa, n.p.i, national provider, npi*
**Comments:** None
## Unique device identifier (UDI)
**Managed data identifier ID:** MEDICAL\$1DEVICE\$1UDI
**Supported countries and regions:** US
**Keyword required:** Yes. Keywords include: *blood, blood bag, dev id, device id, device identifier, gs1, hibcc, iccbba, med, udi, unique device id, unique device identifier*
**Comments:** Macie can detect unique device identifiers (UDIs) that comply with formats approved by the US Food and Drug Administration. This includes standard formats defined by GS1, HIBCC, and ICCBBA. ICCBA support is for the ISBT standard.
# Managed data identifiers for PII
Amazon Macie can detect multiple types of sensitive, personally identifiable information (PII) by using managed data identifiers. The topics on this page list each type and provide information about the managed data identifiers that are designed to detect the data. Each topic provides the following information:
+ **Managed data identifier ID** – Specifies the unique identifier (ID) for one or more managed data identifiers that are designed to detect the data. When you [create a sensitive data discovery job](discovery-jobs-create.md) or [configure settings for automated sensitive data discovery](discovery-asdd-account-configure.md), you can use these IDs to specify which managed data identifiers you want Macie to use when it analyzes data.
+ **Supported countries and regions** – Indicates which countries and regions the applicable managed data identifiers are designed for. If the managed data identifiers aren't designed for particular countries or regions, this value is *Any*.
+ **Keyword required** – Specifies whether detection requires a keyword to be in proximity of the data. If a keyword is required, the topic also provides examples of required keywords. For information about how Macie uses keywords when it analyzes data, see [Keyword requirements](managed-data-identifiers-keywords.md).
+ **Comments** – Provides any relevant details that might affect your choice of managed data identifier or your investigation into reported occurrences of the sensitive data. The details include information such as supported standards, syntax requirements, and exceptions.
The topics are listed in alphabetical order by sensitive data type.
**Topics**
+ [Birth date](#mdis-reference-DATE_OF_BIRTH)
+ [Driver’s license identification number](#mdis-reference-DL-num)
+ [Electoral roll number](#mdis-reference-electoral-roll-num)
+ [Full name](#mdis-reference-full-name)
+ [Global Positioning System (GPS) coordinates](#mdis-reference-GPS)
+ [HTTP cookie](#mdis-reference-HTTP_COOKIE)
+ [Mailing address](#mdis-reference-mailing-address)
+ [National identification number](#mdis-reference-national-id)
+ [National Insurance Number (NINO)](#mdis-reference-NINO)
+ [Passport number](#mdis-reference-passport-num)
+ [Permanent residence number](#mdis-reference-permanent-residence-num)
+ [Phone number](#mdis-reference-phone-num)
+ [Public transportation card number](#mdis-reference-public-transport-num)
+ [Social Insurance Number (SIN)](#mdis-reference-social-insurance-num)
+ [Social Security number (SSN)](#mdis-reference-social-security-num)
+ [Taxpayer identification or reference number](#mdis-reference-taxpayer-num)
+ [Vehicle identification number (VIN)](#mdis-reference-vin)
## Birth date
**Managed data identifier ID:** DATE\$1OF\$1BIRTH
**Supported countries and regions:** Any
**Keyword required:** Yes. Keywords include: *bday, b-day, birth date, birthday, date of birth, dob*
**Comments:** Support includes most date formats, such as all digits and combinations of digits and names of months. Date components can be separated by spaces, slashes (/), or hyphens (‐).
## Driver’s license identification number
**Managed data identifier ID:** Depending on country or region, AUSTRALIA\$1DRIVERS\$1LICENSE, AUSTRIA\$1DRIVERS\$1LICENSE, BELGIUM\$1DRIVERS\$1LICENSE, BULGARIA\$1DRIVERS\$1LICENSE, CANADA\$1DRIVERS\$1LICENSE, CROATIA\$1DRIVERS\$1LICENSE, CYPRUS\$1DRIVERS\$1LICENSE, CZECHIA\$1DRIVERS\$1LICENSE, DENMARK\$1DRIVERS\$1LICENSE, DRIVERS\$1LICENSE (for the US), ESTONIA\$1DRIVERS\$1LICENSE, FINLAND\$1DRIVERS\$1LICENSE, FRANCE\$1DRIVERS\$1LICENSE, GERMANY\$1DRIVERS\$1LICENSE, GREECE\$1DRIVERS\$1LICENSE, HUNGARY\$1DRIVERS\$1LICENSE, INDIA\$1DRIVERS\$1LICENSE, IRELAND\$1DRIVERS\$1LICENSE, ITALY\$1DRIVERS\$1LICENSE, LATVIA\$1DRIVERS\$1LICENSE, LITHUANIA\$1DRIVERS\$1LICENSE, LUXEMBOURG\$1DRIVERS\$1LICENSE, MALTA\$1DRIVERS\$1LICENSE, NETHERLANDS\$1DRIVERS\$1LICENSE, POLAND\$1DRIVERS\$1LICENSE, PORTUGAL\$1DRIVERS\$1LICENSE, ROMANIA\$1DRIVERS\$1LICENSE, SLOVAKIA\$1DRIVERS\$1LICENSE, SLOVENIA\$1DRIVERS\$1LICENSE, SPAIN\$1DRIVERS\$1LICENSE, SWEDEN\$1DRIVERS\$1LICENSE, UK\$1DRIVERS\$1LICENSE
**Supported countries and regions:** Australia, Austria, Belgium, Bulgaria, Canada, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, India, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, UK, US
**Keyword required:** Yes. The following table lists the keywords that Macie recognizes for specific countries and regions.
| Country or region | Keywords |
| --- | --- |
| Australia | dl\$1, dl:, dlno\$1, driver licence, driver license, driver permit, drivers lic., drivers licence, driver's licence, drivers license, driver's license, drivers permit, driver's permit, drivers permit number, driving licence, driving license, driving permit |
| Austria | führerschein, fuhrerschein, führerschein republik österreich, fuhrerschein republik osterreich |
| Belgium | fuehrerschein, fuehrerschein- nr, fuehrerscheinnummer, fuhrerschein, führerschein, fuhrerschein- nr, führerschein- nr, fuhrerscheinnummer, führerscheinnummer, numéro permis conduire, permis de conduire, rijbewijs, rijbewijsnummer |
| Bulgaria | превозно средство, свидетелство за управление на моторно, свидетелство за управление на мпс, сумпс, шофьорска книжка |
| Canada | dl\$1, dl:, dlno\$1, driver licence, driver licences, driver license, driver licenses, driver permit, drivers lic., drivers licence, driver's licence, drivers licences, driver's licences, drivers license, driver's license, drivers licenses, driver's licenses, drivers permit, driver's permit, drivers permit number, driving licence, driving license, driving permit, permis de conduire |
| Croatia | vozačka dozvola |
| Cyprus | άδεια οδήγησης |
| Czech Republic | číslo licence, císlo licence řidiče, číslo řidičského průkazu, ovladače lic., povolení k jízdě, povolení řidiče, řidiči povolení, řidičský prúkaz, řidičský průkaz |
| Denmark | kørekort, kørekortnummer |
| Estonia | juhi litsentsi number, juhiloa number, juhiluba, juhiluba number |
| Finland | ajokortin numero, ajokortti, förare lic., körkort, körkort nummer, kuljettaja lic., permis de conduire |
| France | permis de conduire |
| Germany | fuehrerschein, fuehrerschein- nr, fuehrerscheinnummer, fuhrerschein, führerschein, fuhrerschein- nr, führerschein- nr, fuhrerscheinnummer, führerscheinnummer |
| Greece | δεια οδήγησης, adeia odigisis |
| Hungary | illesztőprogramok lic, jogosítvány, jogsi, licencszám, vezető engedély, vezetői engedély |
| India | driver licence, driver licences, driver license, driver licenses, drivers lic., drivers licence, driver's licence, drivers licences, driver's licences, drivers license, driver's license, drivers licenses, driver's licenses, driving licence, driving license |
| Ireland | ceadúnas tiomána |
| Italy | patente di guida, patente di guida numero, patente guida, patente guida numero |
| Latvia | autovadītāja apliecība, licences numurs, vadītāja apliecība, vadītāja apliecības numurs, vadītāja atļauja, vadītāja licences numurs, vadītāji lic. |
| Lithuania | vairuotojo pažymėjimas |
| Luxembourg | fahrerlaubnis, führerschäin |
| Malta | liċenzja tas-sewqan |
| Netherlands | permis de conduire, rijbewijs, rijbewijsnummer |
| Poland | numer licencyjny, prawo jazdy, zezwolenie na prowadzenie |
| Portugal | carta de condução, carteira de habilitação, carteira de motorist, carteira habilitação, carteira motorist, licença condução, licença de condução, número de licença, número licença, permissão condução, permissão de condução |
| Romania | numărul permisului de conducere, permis de conducere |
| Slovakia | číslo licencie, číslo vodičského preukazu, ovládače lic., povolenia vodičov, povolenie jazdu, povolenie na jazdu, povolenie vodiča, vodičský preukaz |
| Slovenia | vozniško dovoljenje |
| Spain | carnet conducer, el carnet de conducer, licencia conducer, licencia de manejo, número carnet conducer, número de carnet de conducer, número de permiso conducer, número de permiso de conducer, número licencia conducer, número permiso conducer, permiso conducción, permiso conducer, permiso de conducción |
| Sweden | ajokortin numero, dlno\$1 ajokortti, drivere lic., förare lic., körkort, körkort nummer, körkortsnummer, kuljettajat lic. |
| UK | dl\$1, dl:, dlno\$1, driver licence, driver licences, driver license, driver licenses, driver permit, drivers lic., drivers licence, driver's licence, drivers licences, driver's licences, drivers license, driver's license, drivers licenses, driver's licenses, drivers permit, driver's permit, drivers permit number, driving licence, driving license, driving permit |
| US | dl\$1, dl:, dlno\$1, driver licence, driver licences, driver license, driver licenses, driver permit, drivers lic., drivers licence, driver's licence, drivers licences, driver's licences, drivers license, driver's license, drivers licenses, driver's licenses, drivers permit, driver's permit, drivers permit number, driving licence, driving license, driving permit |
**Comments:** None
## Electoral roll number
**Managed data identifier ID:** UK\$1ELECTORAL\$1ROLL\$1NUMBER
**Supported countries and regions:** UK
**Keyword required:** Yes. Keywords include: *electoral \$1, electoral number, electoral roll \$1, electoral roll no., electoral roll number, electoralrollno*
**Comments:** None
## Full name
**Managed data identifier ID:** NAME
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** Macie can detect full names only. Support is limited to Latin character sets.
## Global Positioning System (GPS) coordinates
**Managed data identifier ID:** LATITUDE\$1LONGITUDE
**Supported countries and regions:** Any, if the coordinates are in proximity of an English keyword.
**Keyword required:** Yes. Keywords include: *coordinate, coordinates, lat long, latitude longitude, position*
**Comments:** Macie can detect GPS coordinates if the latitude and longitude coordinates are stored as a pair and they're in Decimal Degrees (DD) format, for example `41.948614,-87.655311`. Support doesn't include detection of coordinates in: Degrees Decimal Minutes (DDM) format, for example `41°56.9168'N 87°39.3187'W`; or Degrees, Minutes, Seconds (DMS) format, for example `41°56'55.0104"N 87°39'19.1196"W`.
## HTTP cookie
**Managed data identifier ID:** HTTP\$1COOKIE
**Supported countries and regions:** Any
**Keyword required:** No
**Comments:** Detection requires a complete `Cookie` or `Set-Cookie` header. The header can include one or more name-value pairs, for example: `Set-Cookie: id=TWlrZQ` and `Cookie: session=3948; lang=en`.
## Mailing address
**Managed data identifier ID:** ADDRESS (for Australia, Canada, France, Germany, Italy, Spain, UK, and the US), BRAZIL\$1CEP\$1CODE (for Brazil's Código de Endereçamento Postal)
**Supported countries and regions:** Australia, Brazil, Canada, France, Germany, Italy, Spain, UK, US
**Keyword required:** Varies. Keywords aren't required by the ADDRESS managed data identifier. Keywords are required by the BRAZIL\$1CEP\$1CODE managed data identifier. Keywords include: *cep, código de endereçamento postal, codigo de endereçamento postal, código postal, codigo postal*
**Comments:** Although a keyword isn't required by the ADDRESS managed data identifier, detection requires an address to include the name of a city or place and a corresponding ZIP or Postal Code in a supported country or region. The BRAZIL\$1CEP\$1CODE managed data identifier can detect only the Código de Endereçamento Postal (CEP) portion of an address.
## National identification number
Support includes: Aadhaar numbers for India; Cédula de Ciudadanía numbers for Colombia; Clave Única de Registro de Población (CURP) numbers for Mexico; Codice Fiscale numbers for Italy; Documento Nacional de Identidad (DNI) numbers for Argentina and Spain; French National Institute for Statistics and Economic Studies (INSEE) codes; German National Identity Card numbers; Registro Geral (RG) numbers for Brazil; and, Rol Único Nacional (RUN) numbers for Chile.
**Managed data identifier ID:** Depending on country or region, ARGENTINA\$1DNI\$1NUMBER, BRAZIL\$1RG\$1NUMBER, CHILE\$1RUT\$1NUMBER, COLOMBIA\$1CITIZENSHIP\$1CARD\$1NUMBER, FRANCE\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, GERMANY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, INDIA\$1AADHAAR\$1NUMBER, ITALY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, MEXICO\$1CURP\$1NUMBER, SPAIN\$1DNI\$1NUMBER
**Supported countries and regions:** Argentina, Brazil, Chile, Colombia, France, Germany, India, Italy, Mexico, Spain
**Keyword required:** Yes. The following table lists the keywords that Macie recognizes for specific countries and regions.
| Country or region | Keywords |
| --- | --- |
| Argentina | dni, dni\$1, d.n.i., documento nacional de identidad |
| Brazil | registro geral, rg |
| Chile | identidad número, nacional identidad, national unique role, nationaluniqueroleID\$1, número identificación, rol único nacional, rol único tributario, run, run\$1, r.u.n., rut, rut\$1, r.u.t., unique national number, unique national role, unique tax registry, unique tax role, unique tributary number, unique tributary role |
| Colombia | cédula de ciudadanía, documento de identificación |
| France | assurance sociale, carte nationale d’identité, cni, code sécurité sociale, French social security number, fssn\$1, insee, insurance number, national id number, nationalid\$1, numéro d'assurance, sécurité sociale, sécurité sociale non., sécurité sociale numéro, social, social security, social security number, socialsecuritynumber, ss\$1, ssn, ssn\$1 |
| Germany | ausweisnummer, id number, identification number, identity number, insurance number, personal id, personalausweis |
| India | aadhaar, aadhar, adhaar, uidai |
| Italy | codice fiscal, dati anagrafici, ehic, health card, health insurance card, p. iva, partita i.v.a., personal data, tax code, tessera sanitaria |
| Mexico | clave personal identidad, clave única, clave única de registro de población, clavepersonalIdentidad, curp, registration code, registry code, personal identidad clave, population code |
| Spain | dni, dni\$1, dninúmero\$1, documento nacional de identidad, identidad único, identidadúnico\$1, insurance number, national identification number, national identity, nationalid\$1, nationalidno\$1, número nacional identidad, personal identification number, personal identity no, unique identity number, uniqueid\$1 |
**Comments:** The managed data identifier for Chile (CHILE\$1RUT\$1NUMBER) is designed to detect both Rol Único Nacional (RUN) numbers and Rol Único Tributario (RUT) numbers. For either type of number, Macie doesn't report occurrences where all the digits are zeroes, such as `00000000-K`, because they're commonly used as examples.
Although DNI numbers for Argentina and Spain have different syntaxes, there are similarities between them. Therefore, Macie might report a DNI number for Argentina as a DNI number for Spain, or the other way around. In addition, Macie doesn't report occurrences of the following character sequences, which are commonly used as example DNI numbers: `99999999` and `99.999.999`. Macie also doesn't report occurrences that consist of only zeroes—for example, `000000000` and `00.000.000`.
## National Insurance Number (NINO)
**Managed data identifier ID:** UK\$1NATIONAL\$1INSURANCE\$1NUMBER
**Supported countries and regions:** UK
**Keyword required:** Yes. Keywords include: *insurance no., insurance number, insurance\$1, national insurance number, nationalinsurance\$1, nationalinsurancenumber, nin, nino*
**Comments:** None
## Passport number
**Managed data identifier ID:** Depending on country or region, CANADA\$1PASSPORT\$1NUMBER, FRANCE\$1PASSPORT\$1NUMBER, GERMANY\$1PASSPORT\$1NUMBER, ITALY\$1PASSPORT\$1NUMBER, SPAIN\$1PASSPORT\$1NUMBER, UK\$1PASSPORT\$1NUMBER, USA\$1PASSPORT\$1NUMBER
**Supported countries and regions:** Canada, France, Germany, Italy, Spain, UK, US
**Keyword required:** Yes. The following table lists the keywords that Macie recognizes for specific countries and regions.
| Country or region | Keywords |
| --- | --- |
| Canada | passeport, passeport\$1, passport, passport\$1, passportno, passportno\$1 |
| France | numéro de passeport, passeport, passeport \$1, passeport n °, passeport non |
| Germany | ausstellungsdatum, ausstellungsort, geburtsdatum, passport, passports, reisepass, reisepass–nr, reisepassnummer |
| Italy | italian passport number, numéro passeport, numéro passeport italien, passaporto, passaporto italiana, passaporto numero, passport number, repubblica italiana passaporto |
| Spain | españa pasaporte, libreta pasaporte, número pasaporte, pasaporte, passport, passport book, passport no, passport number, spain passport |
| UK | passeport \$1, passeport n °, passeport non, passeportn °, passport \$1, passport no, passport number, passport\$1, passportid |
| US | passport, travel document |
**Comments:** None
## Permanent residence number
**Managed data identifier ID:** CANADA\$1NATIONAL\$1IDENTIFICATION\$1NUMBER
**Supported countries and regions:** Canada
**Keyword required:** Yes. Keywords include: *carte résident permanent, numéro carte résident permanent, numéro résident permanent, permanent resident card, permanent resident card number, permanent resident no, permanent resident no., permanent resident number, pr no, pr no., pr non, pr number, résident permanent no., résident permanent non*
**Comments:** None
## Phone number
**Managed data identifier ID:** Depending on country or region, BRAZIL\$1PHONE\$1NUMBER, FRANCE\$1PHONE\$1NUMBER, GERMANY\$1PHONE\$1NUMBER, ITALY\$1PHONE\$1NUMBER, PHONE\$1NUMBER (for Canada and the US), SPAIN\$1PHONE\$1NUMBER, UK\$1PHONE\$1NUMBER
**Supported countries and regions:** Brazil, Canada, France, Germany, Italy, Spain, UK, US
**Keyword required:** Varies. If a keyword is in proximity of the data, the number doesn’t have to include a country code. Keywords include: *cell, contact, fax, fax number, mobile, phone, phone number, tel, telephone, telephone number*. For Brazil, keywords also include: *cel, celular, fone, móvel, número residencial, numero residencial, telefone*. If a keyword isn’t in proximity of the data, the number has to include a country code.
**Comments:** For the US, support includes toll-free numbers.
## Public transportation card number
**Managed data identifier ID:** ARGENTINA\$1TARJETA\$1SUBE
**Supported countries and regions:** Argentina
**Keyword required:** Yes. Keywords include: *sistema único de boleto electrónico, sube*
**Comments:** Macie can detect 16‐digit Sistema Único de Boleto Electrónico (SUBE) card numbers that begin with `6061` and adhere to the Luhn check formula. Card number components can be separated by spaces or hyphens (‐), or not use a separator—for example, `6061 1234 1234 1234`, `6061‐1234‐1234‐1234`, and `6061123412341234`.
## Social Insurance Number (SIN)
**Managed data identifier ID:** CANADA\$1SOCIAL\$1INSURANCE\$1NUMBER
**Supported countries and regions:** Canada
**Keyword required:** Yes. Keywords include: *canadian id, numéro d'assurance sociale, sin, social insurance number*
**Comments:** None
## Social Security number (SSN)
**Managed data identifier ID:** Depending on country or region, SPAIN\$1SOCIAL\$1SECURITY\$1NUMBER, USA\$1SOCIAL\$1SECURITY\$1NUMBER
**Supported countries and regions:** Spain, US
**Keyword required:** Yes. For Spain, keywords include: *número de la seguridad social, social security no., social security number, socialsecurityno\$1, ssn, ssn\$1*. For the US, keywords include: *social security, ss\$1, ssn*.
**Comments:** None
## Taxpayer identification or reference number
Support includes: CUIL and CUIT codes for Argentina; CIF, NIE, and NIF numbers for Spain; CNPJ and CPF numbers for Brazil; Codice Fiscale numbers for Italy; ITINs for the US; NIT numbers for Colombia; PANs for India; RFC numbers for Mexico; RUN and RUT numbers for Chile; Steueridentifikationsnummer numbers for Germany; TFNs for Australia; TINs for France; and, TRN and UTR numbers for the UK.
**Managed data identifier ID:** Depending on country or region, ARGENTINA\$1INDIVIDUAL\$1TAX\$1IDENTIFICATION\$1NUMBER, ARGENTINA\$1ORGANIZATION\$1TAX\$1IDENTIFICATION\$1NUMBER, AUSTRALIA\$1TAX\$1FILE\$1NUMBER, BRAZIL\$1CNPJ\$1NUMBER, BRAZIL\$1CPF\$1NUMBER, CHILE\$1RUT\$1NUMBER, COLOMBIA\$1INDIVIDUAL\$1NIT\$1NUMBER, COLOMBIA\$1ORGANIZATION\$1NIT\$1NUMBER, FRANCE\$1TAX\$1IDENTIFICATION\$1NUMBER, GERMANY\$1TAX\$1IDENTIFICATION\$1NUMBER, INDIA\$1PERMANENT\$1ACCOUNT\$1NUMBER, ITALY\$1NATIONAL\$1IDENTIFICATION\$1NUMBER, MEXICO\$1INDIVIDUAL\$1RFC\$1NUMBER, MEXICO\$1ORGANIZATION\$1RFC\$1NUMBER, SPAIN\$1NIE\$1NUMBER, SPAIN\$1NIF\$1NUMBER, SPAIN\$1TAX\$1IDENTIFICATION\$1NUMBER, UK\$1TAX\$1IDENTIFICATION\$1NUMBER, USA\$1INDIVIDUAL\$1TAX\$1IDENTIFICATION\$1NUMBER
**Supported countries and regions:** Argentina, Australia, Brazil, Chile, Colombia, France, Germany, India, Italy, Mexico, Spain, UK, US
**Keyword required:** Yes. The following table lists the keywords that Macie recognizes for specific countries and regions.
| Country or region | Keywords |
| --- | --- |
| Argentina | argentina taxpayer id, clave única de identificación tributaria, cuil, c.u.i.l, cuit, c.u.i.t, número de identificación fiscal, número de contribuyente, unified labor identification code |
| Australia | tax file number, tfn |
| Brazil | cadastro de pessoa física, cadastro de pessoa fisica, cadastro de pessoas físicas, cadastro de pessoas fisicas, cadastro nacional da pessoa jurídica, cadastro nacional da pessoa juridica, cnpj, cpf |
| Chile | identidad número, nacional identidad, national unique role, nationaluniqueroleID\$1, número identificación, rol único nacional, rol único tributario, run, run\$1, r.u.n., rut, rut\$1, r.u.t., unique national number, unique national role, unique tax registry, unique tax role, unique tributary number, unique tributary role |
| Colombia | nit, nit., nit\$1, n.i.t. |
| France | numéro d'identification fiscal, tax id, tax identification number, tax number, tin, tin\$1 |
| Germany | identifikationsnummer, steuer id, steueridentifikationsnummer, steuernummer, tax id, tax identification number, tax number |
| India | e-pan, pan card, pan number, permanent account number |
| Italy | codice fiscal, dati anagrafici, ehic, health card, health insurance card, p. iva, partita i.v.a., personal data, tax code, tessera sanitaria |
| Mexico | código del registro federal de contribuyentes, identificación de impuestos, identificacion de impuestos, impuesto al valor agregado, iva, iva\$1, i.v.a., registro federal de contribuyentes, rfc, rfc\$1, r.f.c. |
| Spain | cif, cif número, cifnúmero\$1, nie, nif, número de contribuyente, número de identidad de extranjero, número de identificación fiscal, número de impuesto corporativo, personal tax number, tax id, tax identification number, tax number, tin, tin\$1 |
| UK | paye, tax id, tax id no., tax id number, tax identification, tax identification\$1, tax no., tax number, tax reference, tax\$1, taxid\$1, temporary reference number, tin, trn, unique tax reference, unique taxpayer reference, utr |
| US | i.t.i.n., individual taxpayer identification number, itin |
**Comments:** The managed data identifier for Chile (CHILE\$1RUT\$1NUMBER) is designed to detect both Rol Único Nacional (RUN) numbers and Rol Único Tributario (RUT) numbers. For Registro Federal de Contribuyentes (RFC) numbers for Mexico, Macie doesn't report occurrences of the following character sequences, which are commonly used as example RFC numbers: `XAXX010101000` and `XEXX010101000`.
For several types of taxpayer identification and reference numbers, Macie doesn't report occurrences where all the digits are zeroes—for example, `00000000-K`, `000000000`, and `00.000.000`. This is because the use of only zeroes is common in examples of certain types of taxpayer identification and reference numbers.
## Vehicle identification number (VIN)
**Managed data identifier ID:** VEHICLE\$1IDENTIFICATION\$1NUMBER
**Supported countries and regions:** Any, if the VIN is in proximity of a keyword in one of the following languages: English, French, German, Lithuanian, Polish, Portuguese, Romanian, or Spanish.
**Keyword required:** Yes. Keywords include: *Fahrgestellnummer, niv, numarul de identificare, numarul seriei de sasiu, numer VIN, Número de Identificação do Veículo, Número de Identificación de Automóviles, numéro d'identification du véhicule, vehicle identification number, vin, VIN numeris*
**Comments:** Macie can detect VINs that consist of a 17-character sequence and adhere to the ISO 3779 and 3780 standards. These standards were designed for worldwide use.