A DevOps team must ensure that specified AWS resource configuration changes are automatically reverted. Which solution fulfills this requirement?

AWS Config rules continuously evaluate resource configurations against desired settings. When a non-compliant change is detected, a remediation action can be automatically triggered. Integrating AWS Systems Manager Automation documents with Config rules allows for predefined scripts to execute, effectively reverting the resource to its compliant state without manual intervention. This fully automates the reversion process. CloudWatch alarms notify administrators but don't automate reversion. CloudFormation manages infrastructure as code, but directly updating a stack to revert a change isn't as dynamic or automated for unexpected, out-of-band changes as Config rules with remediation. Trusted Advisor provides recommendations but requires manual action for remediation.