A financial institution stores sensitive customer data files, including personally identifiable information (PII), in Amazon S3 buckets. To enhance data security and compliance, the institution wants to automatically discover, classify, and protect the sensitive data in these S3 buckets. Which AWS service should the financial institution use to automatically identify and safeguard sensitive customer data stored in Amazon S3?