An insurtech firm processes about 20 million customer records per day that include personally identifiable data such as full names, national ID numbers, and payment card details. They need the ETL pipeline to automatically discover and protect sensitive fields before loading curated data into their analytics warehouse. Which AWS Glue transformation should they use?