A security team wants a service that continuously analyzes AWS account activity, VPC flow logs, and DNS logs to intelligently detect threats such as compromised credentials, unusual API calls, and communication with known malicious IP addresses. Which AWS service should they use?