A healthcare provider has accumulated several thousand S3 buckets across a decade of projects. Ahead of a compliance audit it must produce a report of which buckets hold patient records and other personally identifiable information. Nobody knows what is in most of the older buckets, and the team does not want to write and maintain its own scanning code.