AWS Re-launches Amazon Inspector To Find Software Vulnerabilities
4 minute read | Last updated 2-Aug-2022 | 
AWS Cloud Security
AWS re-launches a dramatically improved Amazon Inspector, a software vulnerability discovery/management service.
The idea behind these types of services is to scan your servers and containers before they reach production to identify known vulnerabilities so that you are aware of them and can mitigate them appropriately.
Notice I said “mitigate” not “patch”. Patching is just one of many possible mitigations.
Amazon Inspector launched in 2015 and a lot has changed since then. This is a much needed upgrade to the service that should help builders identify these issues with the minimal amount of effort possible.
This Twitter thread highlights some of the details of the launch…
this is HUGE!
https://www.youtube.com/watch?v=wi1PDr9n67Y&feature=youtu.be
☁️ #cloud #security
Inspector has always been better, but now it’s a lot more user friendly
☁️ #cloud #security
<< no more set time period assessments & super delayed results…if you remembered to scan at all
the service now just bubbles up findings == awesome
☁️ #cloud #security
the service leverages that to find EC2 instances as well as ECR repos
☁️ #cloud #security
☁️ #cloud #security
enabling Inspector was a pain. I ❤️ to be able to say that, “was”
critical improvement for adoption
☁️ #cloud #security
<< again, that greatly simplifies adoption
☁️ #cloud #security
most vulnerability discovery/management services use the CVE/CVSS score to assess risk but that lacks context
it’s a start…but only a start
☁️ #cloud #security
<< no more routing events through another service. I mean, it still happens behind the scenes but if it’s behind the scenes, I can safely ignore
☁️ #cloud #security
☁️ #cloud #security
this is GA now
the launch blog is up at https://aws.amazon.com/blogs/aws/improved-automated-vulnerability-management-for-cloud-workloads-with-a-new-amazon-inspector/
/ ☁️