At Global Dynamics, the QA team needs to launch numerous temporary test environments for their application running on EC2 instances in an Auto Scaling group, currently managed by a single manager via CloudFormation, and they seek a secure, self-service solution without granting broad permissions to each tester. Which setup would achieve these goals?