An application keeps user data in S3 buckets across multiple Regions. A developer must analyze the S3 objects to discover sensitive data and ensure that all findings from every bucket are available in the eu-west-2 Region. Which approach delivers this with the least development effort?

The correct answer is to enable Amazon Macie and use EventBridge. Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in Amazon S3. It automatically generates findings when sensitive data is discovered. EventBridge can then be configured to capture these findings and route them to a central S3 bucket or another destination in the eu-west-2 Region, centralizing the findings with minimal development effort. The other options are less suitable. Writing a Lambda function for analysis is labor-intensive and reinvents Macie's functionality. Amazon Inspector focuses on EC2 instances and container images, not S3 object analysis. While Macie can produce findings, sending them to CloudTrail and then using a CloudTrail trail to copy results is an indirect and less efficient method compared to using EventBridge directly with Macie findings.