A company has a production workload that runs on 1,000 Amazon EC2 Linux instances. The workload is powered by third-party software. The company needs to patch the third-party software on all EC2 instances as quickly as possible to remediate a critical security vulnerability. What should a solutions architect do to meet these requirements?

1. Create an AWS Lambda function to apply the patch to all EC2 instances.
2. Configure AWS Systems Manager Patch Manager to apply the patch to all EC2 instances.
3. Schedule an AWS Systems Manager maintenance window to apply the patch to all EC2 instances.
4. Use AWS Systems Manager Run Command to run a custom command that applies the patch to all EC2 instances.