Inspector

Question 1

What does Amazon Inspector provide?

Answer 1

It scans EC2 instances and the instance OS and containers looking for vulnerabilities and deviations against best practice.

Question 2

When is does Amazon Inspector require an Agent to be installed?

Answer 2

For Host Assessments. For Network Assessments, not Agent is needed.

Question 3

Does Amazon Inspector require an Agent to perform network reachability checks?

Answer 3

No. No Agent is required for Network Assessments.

Question 4

What types of Host Assessments require an Agent for Amazon Inspector?

Answer 4

1. Common vulnerabilities and exposures (CVE)
2. Center for Internet Security (CIS) Benchmarks
3. Security best practices for Amazon Inspector