A solutions architect must review the company's Amazon S3 buckets to discover personally identifiable information (PII). The PII is stored in the us-east-1 and us-west-2 Regions. Which solution will meet these requirements with the LEAST operational overhead?

Amazon Macie is a data security and data privacy service that uses machine learning and pattern matching to discover, classify, and protect sensitive data in AWS, including PII in S3 buckets. It is designed specifically for this purpose, making it the most direct solution with the least operational overhead. Since S3 buckets are regional, Macie must be configured in each region where PII discovery is needed (us-east-1 and us-west-2). AWS Security Hub aggregates security findings but doesn't directly analyze S3 content for PII. AWS Config rules monitor resource configurations, not data content. Amazon Inspector focuses on EC2 instances and container images, not S3 data. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, not PII discovery within S3 objects.