Operations needs a standard configuration document applied to all EC2 instances tagged Environment=Production every hour. Newly tagged managed instances should receive the same configuration without a manual command for each host. Which service feature best fits?

1. A one-time Run Command invocation against a fixed list of instance IDs.
2. A Systems Manager State Manager association with tag-based targets and an hourly schedule.
3. Create an hourly State Manager association targeting only the currently known instance IDs.
4. Create a Patch Manager baseline and expect it to enforce arbitrary application configuration every hour.