Amazon Inspector
Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure, providing detailed findings and prioritized remediation guidance.
APIs
AWS Amazon Inspector API
The Amazon Inspector API provides programmatic access to vulnerability management for scanning EC2 instances, container images, and Lambda functions for software vulnerabilities...
Features
Continuously scans EC2, container images, and Lambda functions for software vulnerabilities.
Ranks vulnerabilities by exploitability and impact to prioritize remediation.
Generates software bill of materials for scanned workloads.
Manages vulnerability scanning across all accounts in an AWS Organization.
Use Cases
Automatically scan container images in ECR during build pipelines.
Generate vulnerability reports for SOC 2, PCI DSS compliance.
Prioritize OS patches based on exploitability scores.