Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorized behavior in AWS accounts?

Amazon GuardDuty is a managed threat detection service that continuously monitors for malicious or unauthorized behavior to help protect your AWS accounts and workloads. It analyzes multiple AWS data sources, such as AWS CloudTrail event logs, Amazon VPC Flow Logs, and DNS logs. It uses machine learning, anomaly detection, and integrated threat intelligence to identify and prioritize potential threats, making it the correct service for this requirement.

A. Amazon Macie (assuming "Made" is a typo) is a data security service that discovers and protects sensitive data, not a general threat detection service for account activity.
B. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources for compliance, not for threat detection.
D. Amazon Inspector is a vulnerability management service that scans workloads for software vulnerabilities and unintended network exposure, not for monitoring malicious account activity.

1. AWS Documentation, "Amazon GuardDuty User Guide," What is Amazon GuardDuty? section. Retrieved from: https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html

2. AWS Product Page, "Amazon GuardDuty." Retrieved from: https://aws.amazon.com/guardduty/