A company keeps data files in S3 and must label the data and locate any sensitive personal information within those objects. Which AWS service and configuration will accomplish this requirement?

Amazon Macie is the correct service for this task because it specializes in discovering, classifying, and protecting sensitive data stored in Amazon S3. By enabling Macie and running a discovery job with managed data identifiers, it can automatically detect personally identifiable information (PII) and other sensitive data within S3 objects. AWS Config is used for assessing, auditing, and evaluating the configurations of your AWS resources, not for scanning content within S3 objects. An S3 event-driven AI/ML pipeline with Amazon Rekognition is designed for image and video analysis, not for text-based sensitive data discovery in files. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, not for content-level sensitive data identification within S3 objects.