An Auto Scaling group launches EC2 instances from an AMI that already has the SSM Agent installed. Instances receive tags at launch. Instances must always have the correct OS configuration applied. Which solution ensures the instances have the required configuration immediately after launch?

A Systems Manager State Manager association is the correct choice because it allows you to define a desired state for your instances and automatically apply it. By targeting instances with a tag query and configuring it to run immediately, new instances launched by the Auto Scaling group will have the configuration applied right after they come online, ensuring immediate compliance. Incorrect options: Run Command documents are executed on demand, not continuously, and Systems Manager Compliance focuses on patch compliance, not general configuration. Maintenance Windows are scheduled and would not apply the configuration immediately upon instance launch. Patch Manager is specifically for OS patching, not general configuration management, and relying on a separate Run Command invocation would not guarantee immediate application upon launch.