A team manually creates a hardened AMI every month. It wants a repeatable process that builds the image, runs validation tests, and distributes approved images to configured Regions. Which managed service is the most direct fit?

1. Use AWS Backup to create snapshots of the build instance and treat backup success as image validation.
2. Update the Auto Scaling launch template to the old AMI ID on a monthly schedule.
3. EC2 Image Builder with an image recipe, build and test components, and distribution settings.
4. Copy the existing AMI to the target Regions without building a new image or running validation.