A company's Developers plan to migrate their on-premises applications to Amazon EC2 instances running Amazon Linux AMIs. The applications are accessed by a grou...

A company's Developers plan to migrate their on-premises applications to Amazon EC2 instances running Amazon Linux AMIs. The applications are accessed by a group of partner companies. The Security Engineer needs to implement the following host-based security measures for these instances:
- Block traffic from documented known bad IP addresses.
- Detect known software vulnerabilities and CIS Benchmarks compliance.
Which solution addresses these requirements?