Skip to content

Amazon Comprehend Conditions

An Amazon Comprehend condition matches PII entities that Amazon Comprehend detects in a column’s sampled values (a sampled subset; see Sampling), joining Google DLP and Snowflake Native as the classifier rule builder’s external, ML-based signals.

  • Entity type(s) — a searchable multi-select of entity types (the picker itself is a single flat searchable list; grouped below for readability). Selecting multiple entity types combines them with OR logic: the condition passes if any selected type is detected at or above the Match Threshold.

  • Match Threshold — a score gate from 0-1 (not a percentage); a detection below it doesn’t satisfy the condition. Defaults to 0.5.

Entity types:

  • Contact and identity: Address, Age, Date/Time, Driver ID, Email, IP Address, License Plate, MAC Address, Name, Phone, URL, Username, Vehicle Identification Number
  • Financial: Credit/Debit CVV, Credit/Debit Expiry, Credit/Debit Number, International Bank Account Number (IBAN), SWIFT Code, Bank Account Number, Bank Routing
  • Credentials: AWS Access Key, AWS Secret Key, Password, PIN
  • Government/national identifiers: Passport Number, SSN, US Individual Taxpayer ID (ITIN), Canada Health Number, Canada Social Insurance Number, UK National Health Service Number, UK National Insurance Number, UK Unique Taxpayer Reference, India Aadhaar, India NREGA, India Permanent Account Number, India Voter Number

This condition matches columns Amazon Comprehend identifies as an email address, at a minimum score of 0.8:

{ "target": "AMAZON_COMPREHEND", "entity_type": "EMAIL", "minimum_score": 0.8 }

In Match Confidence scoring, an Amazon Comprehend match is outranked only by Google DLP and Snowflake Native matches, and outranks a Regex, Column Name, Data Location, Data Length, or Column Size match on the same column.

Amazon Comprehend evaluates on Snowflake ALTR Native jobs using ALTR Hosted processing (not In-Warehouse processing) and on OLTP ALTR Native jobs. On processing paths where it can’t run, the condition is treated as not evaluated rather than failing the job. See Classification Processing Location for the full picture.

Amazon Comprehend is opt-in per job: it only runs when all three hold — a classifier in the job includes an Amazon Comprehend condition, the job’s selected condition types include Amazon Comprehend, and the job samples row data.

On OLTP, Amazon Comprehend runs through your own AWS account rather than ALTR’s. See the OLTP Classification Agent for how ALTR handles credentials for this and other external conditions.