• Allows you to run automated security assessments.

• For EC2 instances, it uses an SSM (AWS System Manager) agent.
  • Detects unintended network accessibility and OS known vulnerabilities.
• Assesses Container Images pushed to Amazon ECR.
• Identifies software vulns in code and package dependencies in Lambda functions.
• Provides risk score of vulnerability.

• Integration with AWS Security Hub.
• Findings can be sent to EventBridge.

• EC2, Container Images, Lambda Functions only.

More reading:

• https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html