A company has a non-production application that runs on an Amazon EC2 instance. The EC2 instance has an instance profile and an associated IAM role. The company wants to automate patching for the EC2 instance. Which solution will meet this requirement?