Amazon Inspector
Automated and continual vulnerability management at scale
What is Amazon Inspector?
Amazon Inspector automatically discovers workloads, such as Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon Machine Images (AMIs), container images, and AWS Lambda functions, as well as code repositories, and scans them for software vulnerabilities and unintended network exposure.
Benefits of Amazon Inspector
Detect software vulnerabilities and unintended network exposure in near real time across AWS workloads such as Amazon EC2, AWS Lambda functions, and container images in Amazon Elastic Container Registry (Amazon ECR), as well as in non-AWS resources such as code repositories and within continuous integration and continuous delivery (CI/CD) tools.
Incorporate security earlier in the development cycles and centrally manage software bill of materials (SBOM) exports for all monitored resources.
Use the Amazon Inspector risk score to prioritize remediation reducing mean time to remediate (MTTR).
Seamlessly scan EC2 instances switching between agent-based and agentless scanning
Scan Amazon Machine Images (AMIs) directly for software vulnerabilities without launching EC2 instances. Detect and fix issues in the blueprint before they propagate across your fleet, shifting security left and eliminating the cost of temporary instance-based scanning workflows.
Use cases
Automate discovery, expedite vulnerability routing, and shorten MTTR with over 50 sources of vulnerability intelligence.
Use current common vulnerabilities and exposures (CVE) information and network accessibility to create contextual risk scores to prioritize and resolve vulnerable resources.
-
Support compliance requirements and best practices for NIST CSF, PCI DSS, and other regulations with Amazon Inspector scans.
Embed vulnerability scanning in your developer tools and export a consolidated SBOM for monitored resources.
Continuously evaluate AMIs as new vulnerabilities are published and pair findings with EC2 Allowed AMIs to block launches from non-compliant images. Detect drift when running instances diverge from their source AMI, so you know whether to fix the image or patch the host.
Did you find what you were looking for today?
Let us know so we can improve the quality of the content on our pages