A CloudOps team must build a repeatable, fully automated process to produce hardened 'golden' AMIs every month. The process should launch a temporary EC2 instance from a base AMI, run a series of hardening and patching steps, capture a new AMI, and then terminate the temporary instance—all without manual intervention and driven from a scheduled trigger. Which AWS Systems Manager capability should the team use to orchestrate these multi-step, sequential provisioning actions?