You need to ensure that all EC2 instances within your AWS environment are configured with the latest security patches. How would you use AWS Systems Manager to automate the patch management process and ensure compliance with security best practices?