Abstract: Devices, systems, and methods are provided detecting personal information in cloud-based infrastructure configuration. A method may include sending, by a computer-based system, a first request to a first service associated with the computer-based system, the first request associated with first application programming interface (API) call data. The method may include receiving the first API call data from the first service. The method may include determining, based on the first API call data, first data associated with the first service, and determining that the first data includes personal information. The method may include sending a message to a device, the message indicative of the personal information. The method may include receiving a second request to modify the first data, and modifying the first data based on the second request.