Amazon Inspector
#115 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”Amazon Inspector is an automated vulnerability management service. A vulnerability is a known weakness in software that an attacker can use to get in. Inspector scans EC2 instances, container images in ECR and Lambda functions to look for such weaknesses. On EC2, it also finds and shows paths that are unexpectedly open from the network side. Each finding comes with a risk level, and it scans again automatically when a new vulnerability becomes known.
Simple example
Section titled “Simple example”Checking the windows and doors of a house — which lock is broken, which window bar is damaged.
Why it’s needed
Section titled “Why it’s needed”If old software has known weaknesses, hackers can use them to get in.
Where it’s used
Section titled “Where it’s used”Finding software on EC2 and container images that needs updates, and finding doors left open to the internet by mistake.
Azure equivalent
Section titled “Azure equivalent”Microsoft Defender for Cloud (vulnerability assessment)
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: