Instructor: Hi, let's talk about Amazon Inspector.
So Amazon Inspector allows you to do automated
security assessments for your AWS infrastructure.
That means it's going to look at two things.
Number one is EC2 instances.
And for these EC2 instances it's going to run
in the backend the AWS systems manager agent
and then it's going to analyze
against unintended network accessibility, number one.
And number two, it's going to analyze
the running operating system against non vulnerabilities.
That means that automatically you're going to detect
if you have issues on your EC2 instances.
And then the second type of workload
that is supported by Amazon Inspector
is to analyze containers that are being pushed to Amazon ECR
and Amazon ECR stands for Elastic Container Registry.
This is where you store your container images.
So you're going to get assessments of containers
as they are being pushed into Amazon ECR.
Now, all these reports are going to be delivered
into the AWS security hub
and these findings are going to be sent
to Amazon EventBridge as well.
So to summarize
we have an EC2 instance example, running the SSM agent.
And then the inspector service is going to run
assessments continuously and automatically.
The findings are going to be sent to security hub
and also Amazon EventBridge.
So what does AWS Inspector evaluate?
Well, first of all, you have to remember
it's only for EC2 instances and container infrastructure
and you're going to get continuous scanning
of the infrastructure, but only when needed.
You're going to look at package vulnerabilities.
So you're going to compare your packages
on your EC2 instances and your containers on ECR
against a known database
of vulnerabilities called the database of CVE.
And then on EC2 you're also going to get
network reachability assessments.
After that you're going to get a risk score
that is going to be associated with all the vulnerabilities
and you're going to have to prioritize for them.
Okay, that's all for Amazon Inspector, I hope you liked it.
And I will see you in the next lecture.