A SysOps administrator manages over 50 EC2 instances across a single production account running multiple operating systems. Company policy requires monthly OS patching. The administrator wants to use AWS Systems Manager to reduce the manual hours spent on patching. Which combination of actions should the administrator perform? (Choose three.)

To effectively manage patching for diverse EC2 instances, organizing them into AWS Resource Groups is crucial. This allows for targeted patching based on OS type or other criteria. Systems Manager Patch Manager is the appropriate service for OS patching. You would create a schedule within Patch Manager and target the relevant resource groups. For more complex or customized patching, or to orchestrate patching with other tasks, Systems Manager Automation runbooks are used. These runbooks are then registered as tasks within a Maintenance Window, which ensures patching occurs during defined periods to minimize disruption. Creating separate Maintenance Windows for each resource group provides granular control over patching schedules for different instance types or environments. Incorrect options: "Create a Systems Manager Automation runbook that continuously monitors and controls patch state, then attach that runbook to Patch Manager" is incorrect because Patch Manager handles patch state and application; an Automation runbook isn't attached to Patch Manager in this way for continuous monitoring. "Use Systems Manager Fleet Manager to apply an Automation runbook to the appropriate resource group" is incorrect as Fleet Manager is primarily for remote management of instances, not for orchestrating scheduled patching via Automation runbooks in this manner.