Classified
0
Resources with evidence
Operations
Governance overview
Classification, document access and control evidence.
Loading governance evidence…
Governance evidence is temporarily unavailableThe service did not return a complete response.
Restricted
0
Highest sensitivity
Review queue
0
Restricted or confidential
Evidence coverage
0/100
Recorded actions, not certification
Latest completed run
Waiting for classification evidence
Classification
Sensitivity distribution
Processing path
From intake to evidence
-
01
Private intake
The browser or CLI requests a short-lived upload and writes the file to the private raw-data bucket.
S3 raw zone -
02
Automatic trigger
An S3 Object Created event travels through EventBridge and invokes the classifier without a manual scan.
EventBridge -
03
Classification
The Lambda function strictly extracts supported text, validates Malaysian PII patterns, and calculates sensitivity, confidence, and a review-priority baseline.
Lambda -
04
Protection
Non-public data receives a redacted clean copy and governance tags. Restricted results also raise an alert.
S3 clean · SNS -
05
Proof and review
Versioned results and hash-linked audit events are stored, then surfaced here for investigation and review.
DynamoDB
Demonstrated scope
This Learner Lab release proves text-based detection, redaction, tagging, alerts, versioned evidence, and audit chaining. OCR, Bedrock, IAM quarantine, and automatic policy remediation are not claimed here.
Evidence history
Recent classification decisions
| Resource | Sensitivity | Confidence | Priority | Classified |
|---|
No classification evidence yetUpload a controlled sample to start the pipeline.
| Resource | Sensitivity | Signals | Confidence | Priority | Timestamp |
|---|
No resources match this viewChange the filter or upload a supported document.
Recorded actions
Tamper-evident audit trail
The API recomputes every retrieved SHA-256 event hash and chain link. This detects modification and interior deletion; an external trusted checkpoint is still required to detect tail deletion or wholesale replacement.
Checking ledger0 events
No audit events yetEvents appear after a successful classification.
Storage zones
Control comparison
Compare the raw ingestion zone with the protected output zone. Each result comes from the current posture response.
—
Least-privilege workflow
Original-file access
Reviewers use protected copies by default. Every request for an original is explicit, time-limited, and decided by an administrator or data owner.
0 pendingLoading access scope
Deployment truth
Control coverage
0 active controls
0 production integrations
Decision queue
Access history
| Resource | Requester | Reason | Status | Expiry |
|---|
No access requestsRequests appear here when a reviewer needs a time-limited original.