AWS Config is the correct answer because it is specifically designed to assess, audit, and evaluate the configurations of your AWS resources. It helps you:

1. Evaluate compliance - AWS Config continuously monitors and records your AWS resource configurations and allows you to evaluate them against desired configurations defined in your organizational standards.

2. Automatically remediate issues - AWS Config can be integrated with AWS Systems Manager Automation documents to automatically remediate non-compliant resources.

3. Compliance tracking - It provides a detailed view of resource configurations and how they change over time, helping you maintain compliance with internal policies and external regulations.

Why the other options are incorrect:

• AWS CloudWatch (A): Primarily a monitoring service for metrics, logs, and events, not specifically for compliance evaluation and remediation.
• AWS Systems Manager (C): While it can be used for remediation when integrated with AWS Config, it's not primarily a compliance evaluation service.
• AWS Shield (D): A managed DDoS protection service, not related to resource compliance evaluation.