Sensitive data classification for micro-service applications

Abstract

A datastore layer service of a plurality of services that compose an application receives, from an upstream service of the plurality of services, a request, the request being associated with a transaction submitted to the application, the request including a transaction identifier that uniquely identifies the transaction. The datastore layer service, in response to the request, initiates a query against a datastore to obtain a data item based on information included in the request. A sensitive data classifier analyzes query information associated with the query. The sensitive data classifier determines that the query requests a data item that has been classified as a sensitive data item. The sensitive data classifier causes the transaction identifier and classification information that indicates the query requested the data item that has been classified as a sensitive data item to be sent to a collector service.