A security audit shows Amazon EC2 instances are not patched regularly. A solutions architect needs to run regular security scans across a large EC2 fleet, apply patches on a regular schedule, and provide a report of each instance’s patch status. Which solution meets these requirements?

Amazon Inspector is designed to continuously scan EC2 instances for software vulnerabilities and unintended network exposure, directly addressing the requirement for regular security scans. AWS Systems Manager Patch Manager automates the patching process for EC2 instances on a schedule and provides detailed patch compliance reports, fulfilling the need for regular patching and status reports. Incorrect options: Amazon Macie is a data security service that discovers and protects sensitive data, not for scanning EC2 instances for software vulnerabilities or patching. Cron jobs are not a centralized, scalable solution for managing patching across a large fleet. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, not for vulnerability scanning or patching EC2 instances. AWS Systems Manager Session Manager is for interactive access to instances, not for automated patching. Amazon Detective helps analyze, investigate, and quickly identify the root cause of security findings, not for scanning for vulnerabilities or patching. Amazon EventBridge can trigger actions but doesn't inherently provide vulnerability scanning or a robust patching solution like Patch Manager.