A company provides marketing services to stores. Stores upload transaction data via SFTP to the company; the company processes and analyzes the data to produce marketing offers. Some files can exceed 200 GB. Recently, some stores uploaded files that included personally identifiable information (PII) that should not have been included. The company wants administrators alerted if PII is shared again and wants automated remediation, with the least development effort. What should a solutions architect do?

The correct answer leverages Amazon Macie, a fully managed data security and data privacy service that uses machine learning and pattern matching to discover, classify, and protect sensitive data, including PII, in Amazon S3. Macie automatically detects PII, and its findings can trigger an SNS notification to alert administrators, fulfilling the requirement for alerts and least development effort. Incorrect options: Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS, but it does not scan S3 objects for PII. S3 Lifecycle policies are for object management (e.g., deletion after a certain period or transition to different storage classes), not for conditional deletion based on content. Implementing custom scanning algorithms in an AWS Lambda function would require significant development effort to accurately identify PII, which contradicts the "least development effort" requirement. Similar to the previous point, custom Lambda functions for PII detection are high effort. Using Amazon SES for notification is viable, but combining it with an S3 Lifecycle policy for removal based on content is not a standard or simple mechanism.