-
Export
- EventBridge (automatic)
- Security Hub
- Amazon S3 bucket (optional)
- CloudTrail
-
Package vulnerability
-
Scoring
- 0 Informational
- 0.1 - 3.9 Low
- 4.0 - 6.9 Medium
- 7.0 - 8.9 High
- 9.0 - 10.0 Critical
-
Network reachability
-
Configurations evaluated
- Amazon EC2 instances
- Application Load Balancers
- Direct Connect
- Elastic Load Balancers
- Elastic Network Interfaces
- Internet Gateways
- Network Access Control Lists
- Route Tables
- Security Groups
- Subnets
- Virtual Private Clouds
- Virtual Private Gateways
- VPC endpoints
- VPC gateway endpoints
- VPC peering connections
- VPN connections
-
Scoring
- Service
- TCP ports
- UDP ports
- Internet path rating
- Open path rating
-
Amazon Inspector Partners
- Software Solution Partners
- Managed Service Partners
- Vulnerability Feed Partners
- Support for AWS Organizations
-
EC2 Scanning
- As soon as the EC2 instance is discovered by Amazon Inspector
- When you launch a new instance
- When you install or uninstall software on an existing instance
- When Amazon Inspector adds a new common vulnerabilities
and exceptions (CVE) item to its database
-
ECR scanning
- Operating System
- Programming language packages
- By container layer
- Continuous or on-push scanning
- When Amazon Inspector adds a new common vulnerabilities
and exceptions (CVE) item to its database
- Amazon Inspector Security Blogs
- Amazon Inspector Pricing
- AWS re:Post questions for Amazon Inspector
- Amazon Inspector FAQs
- Free Cybersecurity Training