Managed instances must apply a configuration document hourly, including new instances with Environment=Production. Which Systems Manager feature fits?

1. A one-time command against only the current instance IDs.
2. A CloudTrail query containing the configuration document text.
3. A bucket lifecycle expiration rule on the document file.
4. A scheduled State Manager association using the appropriate tag-based targets.