The best solution for the given requirements is AWS Config. This service provides the functionality for tracking configurations and assessing compliance against guidelines, making it ideal for the continuous monitoring necessary for governance and compliance tasks. Incorrect options, such as Amazon CloudWatch, are more focused on performance monitoring, not compliance. Amazon GuardDuty, while a security service, is focused on threat detection and does not track compliance per se. Amazon Inspector evaluates the application's security and compliance but not in the continuous configuration monitoring sense that AWS Config offers.