A compliance team must discover which S3 objects contain passport numbers, payment-card numbers, or other sensitive personal information. It wants managed classification findings rather than a custom scanning application. Which service should it use?

1. Amazon Macie with sensitive-data discovery configured for the relevant S3 data.
2. Amazon Inspector to parse all S3 documents for personal information.
3. AWS CloudTrail to classify every object's contents from API request logs.
4. Amazon GuardDuty alone to inventory all payment-card numbers in every S3 object.