Which AWS service should be used to enforce and continually identify all resources that are not in compliance with the policy?

A company has a new requirement stating that all resources in AWS must be tagged according to a set policy.
Which AWS service should be used to enforce and continually identify all resources that are not in compliance with the policy?
A. AWS CloudTrail
B. Amazon Inspector
C. AWS Config
D. AWS Systems Manager

Correct Answer: C
Explanation/Reference:
Explanation:
Reference: https://aws.amazon.com/config/