Which service offers detailed attack diagnostics and manages sophisticated DDoS attacks?

The correct choice is the service that specifically provides detailed attack diagnostics and is designed to manage sophisticated Distributed Denial of Service (DDoS) attacks. AWS Shield Advanced is a managed DDoS protection service that safeguards applications running on AWS. It provides enhanced protection against larger attacks, adaptive threat mitigation, and detailed attack diagnostics, which makes it particularly valuable for organizations that must ensure the availability of their applications in the face of potential DDoS threats.

AWS Shield Advanced includes features such as real-time metrics, reports, and the ability to integrate with other AWS security services for comprehensive monitoring and response strategies. Additionally, it offers a 24/7 DDoS response team that can assist organizations in the event of an attack, providing expert guidance and support.

In contrast, the other options listed focus on different aspects of security. AWS Security Hub is a comprehensive security management service that provides a centralized view of security alerts and compliance status across AWS accounts. Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to help protect AWS accounts and workloads. Amazon Detective is used for security investigation purposes, allowing users to analyze and visualize their security data to understand the root cause of any issues.

Hence, the emphasis of AWS Shield Advanced on