Standard operating procedure is correct.

Standard operating procedure specifies the exact step by step actions operators must perform to complete a specific task. It translates higher level rules into task level instructions and checklists so work is repeatable and verifiable. That procedural and prescriptive nature is what makes it the precise match for a request for step by step actions.

Security baseline is incorrect because a baseline defines required configuration settings or minimum security levels for systems rather than a sequence of actions to perform a task. A baseline tells you what settings to enforce and not how to perform an operational task.

Organizational policy statement is incorrect because a policy is high level and states objectives rules and responsibilities. A policy describes what must be achieved and not the detailed steps staff must follow to complete a task.

Guidance document is incorrect because guidance provides recommendations and best practices and it is often optional. Guidance may include examples but it does not usually mandate the precise step by step procedures that a standard operating procedure provides.

Full AWS Practitioner Certification Question