Processing requests at a remote service to implement local data classification

A method, comprising:

• receiving, via a management interface of a network-based data classification service of a provider network, a request from a management device of a remote client network to classify data at one or more data sources of the remote client network, wherein the request indicates at least the one or more data sources of the remote client network;
• and
• transmitting, from the network-based data classification service of the provider network to a computing device running a local instance of the network-based data classification service at the remote client network, the request that was received by the provider network from the management device of the remote client network to classify the data at the one or more data sources of the remote client network, wherein at least some of the data is not exposed outside of a data isolation boundary associated with the remote client network during classification of the data to generate results of the classification of the data by the local instance of the network-based data classification service.

A non-transitory computer-readable storage medium storing program instructions that, when executed by one or more computing devices of a network-based data classification service of a provider network, cause the one or more computing devices to implement:

• receiving, via a management interface of the network-based data classification service of the provider network, a request from a management device of a remote client network to classify data at one or more data sources of the remote client network, wherein the request indicates at least the one or more data sources of the remote client network;
• and
• transmitting, from the network-based data classification service of the provider network to a computing device running a local instance of the network-based data classification service at the remote client network, the request that was received by the provider network from the management device of the remote client network to classify the data at the one or more data sources of the remote client network, wherein at least some of the data is not exposed outside of a data isolation boundary associated with the remote client network during classification of the data to generate results of the classification of the data by the local instance of the network-based data classification service.