A multinational e-commerce company operating on AWS has detected anomalous outbound network traffic originating from an EC2 instance in its European (Frankfurt) region. Initial investigations suggest a potential exfiltration of customer data, including Personally Identifiable Information (PII), which could trigger stringent notification requirements under regulations like the GDPR. The company’s Chief Information Security Officer (CISO) needs a consolidated view of security findings, an assessment of the potential impact on sensitive data, and a mechanism to streamline the preparation of evidence for regulatory compliance reporting. Which AWS service would be most instrumental in facilitating this initial assessment and compliance preparation phase of the incident response?