A raw S3 landing zone may contain personal information in newly delivered files. The platform team needs managed discovery findings to inform classification and access decisions. Which service is the most direct fit?

1. Amazon Macie for supported S3 sensitive-data discovery, followed by the appropriate governance and remediation workflow.
2. A Glue table name containing the word private, without any content assessment or permissions changes.
3. An S3 Inventory report alone as a complete inspection of every object content field.
4. A CloudTrail trail alone, assuming API access events reveal the personal data inside every file.