A company has utilized infrastructure as code (IaC) to provision a pair of Amazon EC2 instances that have remained unchanged for several years. Due to rapid business growth in recent months, the operations team has implemented an Auto Scaling group to handle the increased traffic. The company mandates monthly security updates on all running operating systems. The latest security update necessitated a reboot, causing the Auto Scaling group to terminate the instances and replace them with new, unpatched instances. What steps should a solutions architect recommend to prevent this issue from recurring? (Select two options.)