Which service automatically discovers and protects sensitive data in AWS?

Amazon Macie is the service that automatically discovers and protects sensitive data in AWS. It utilizes machine learning, pattern matching, and natural language processing to identify sensitive data such as personally identifiable information (PII) and intellectual property across Amazon S3 buckets. Macie continuously monitors data stored in S3, assesses its security posture, and provides alerts to organizations if any sensitive data is exposed or misconfigured.

This service empowers organizations to maintain compliance with data protection regulations by providing insights and visibility into how sensitive data is stored and accessed. Additionally, Amazon Macie allows users to automate the classification of data, making it easier for companies to implement data privacy practices and protect their critical information assets.

The other AWS services mentioned serve different purposes; for instance, Amazon Inspector focuses on security assessments for applications, AWS CloudHSM provides hardware security module services for managing cryptographic keys, and AWS Firewall Manager centralizes the management of firewall rules across multiple accounts and applications. These services do not specialize in the discovery and protection of sensitive data in the same manner as Amazon Macie.