A company runs production workloads across Azure, AWS, and on-premises virtual machines. The security team wants a single Microsoft solution that continuously assesses security posture, provides configuration hardening recommendations, and protects the running workloads across all of these environments. Which Microsoft solution should they use?