A SysOps administrator is tasked with reducing EC2 costs for a fleet of on-demand instances running a set of internal web applications. Analysis shows that many instances consistently run at under 10% average CPU utilization and low network throughput throughout the month. Management wants a data-driven approach to identify specific instances that are over-provisioned and receive recommendations for smaller instance types before making any changes. Which AWS tool provides this capability with the least effort?