AWS SAP-C02 · Question 61 · Domain 3.2: Security Improvement

A security team wants to automate vulnerability management for their EC2 fleet. They need to scan instances weekly, automatically apply missing critical patches, and generate a compliance report. Which THREE services/features should be used? (Select THREE)