Introduction
Amazon Inspector is an automated security checker service that helps improve security and compliance with applications installed on AWS. Amazon Inspector automatically detects malicious or deviant applications. After performing the inspection, Amazon Inspector produces a detailed list of security results prioritized by difficulty level.
It includes a knowledge base of hundreds of rules on the map for best safety practices and definitions of vulnerability. Examples of built-in rules include testing remote root login enabled or compromised software versions installed. AWS security researchers regularly review these rules
It is also an automated risk management service that regularly scans AWS workloads for software risks and unintended network exposure. It was first launched in 2015. During the recent redevelopment: Invent 2021, AWS is re-launching with brand new construction and new features such as container-based load, integration with Amazon Event Bridge, and the AWS Security Hub.
Architecture
Amazon Inspector is present in most AWS regions. To find the list of Regions where Amazon Inspector is currently located, check out Amazon Inspector locations in Amazon Web Services General Reference. See Managing AWS Regions in the Amazon Web Services General Reference to learn more about AWS regions. In each area, you can work with Amazon Inspector in the following ways:-
AWS Management Console
AWS Management Console is a browser-based communication that you can use to create and manage AWS resources. The Amazon Inspector console provides access to your Amazon Inspector account and services. You can perform Amazon Inspector functions from the Amazon Inspector console.
AWS command-line tools
You can extract commands from your system command line to perform Amazon Inspector tasks with AWS command-line tools. Using the command line can be faster and easier than using the console. Command-line tools are also helpful if you want to create scripts that perform tasks.
AWS provides two command-line tools: AWS Command Line Interface (AWS CLI) and AWS PowerShell tools. See the AWS Command Line Interface User Guide for installing and using AWS CLI. For information on installing and using PowerShell Tools, see the AWS Tools for PowerShell User Guide.
AWS SDK
AWS provides SDKs containing libraries and sample code of various programming languages and platforms, including Java, Go, Python, C ++, and .NET. SDKs provide easy, scheduled access to Amazon Inspector and other AWS services. They also manage cryptographically signing applications, error management, and automatically retrying applications. For information on installing and using the AWS SDKs, see AWS Building Tools.
Amazon Inspector REST API
The Amazon Inspector REST API gives you complete, scheduled access to your Amazon Inspector account and services. With this API, you can send HTTPS requests directly to Amazon Inspector. However, unlike AWS command-line tools and SDKs, this API requires your application to handle low-level details such as hash to sign a request.