Which AWS service will meet these requirements?

Explanations:

AWS Identity and Access Management (IAM) allows you to manage access to AWS services and resources securely. You can create policies that grant only the necessary permissions for specific tasks, aligning with the principle of least privilege.

Amazon CloudWatch is a monitoring service for AWS cloud resources and applications, providing data and insights but not managing permissions. It does not help in enforcing access control or permissions.

Amazon Macie is a security service that uses machine learning to discover, classify, and protect sensitive data in AWS. While it helps with data security, it does not manage permissions for applications or resources.

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts and workloads. It does not provide functionality for managing permissions or access control.