Provisions SSM Patch Baselines with secure patch-management defaults — baseline creation (OS, product, classification, severity), approval rules (auto-approve after N days, compliance level), patch groups (tag-based targeting), default vs custom baseline selection, maintenance window integration, and custom repositories for Amazon Linux 2023, RHEL, Ubuntu, Windows, macOS.
