Inspector

Basics

• Scans EC2 instances, the instance OS as well as containers and networking configurations for vulnerabilities and deviations from best practices
• After the audit it provides findings in order of priority
• The network assessment can be done in an agentless manner but host assessment needs an agent to be installed on the host
• The Rules package decides what gets inspected
• Network reachability check can be performed without an Agent
• The N/w reachability check returns RecognizedPortWithListener, RecognizedPortNoListener, RecognizedPortNoAgent, UnRecognizedPortWithListener
• Host assesments include Common vulnerabilities and exposures(CVE), Centre for Internet Security(CIS) benchmarks, Security Best Practices checks