Amazon Inspector

Definition

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on Amazon Web Services (AWS). It automatically assesses applications for vulnerabilities or deviations from best practices, including network exposure, operating system vulnerabilities, and application security issues. The service provides a detailed list of security findings prioritized by level of severity, enabling users to remediate issues efficiently.

Secure Settings Example

{
  "assessmentTemplate": {
    "name": "SecureAssessmentTemplate",
    "durationInSeconds": 3600,
    "rulesPackageArns": [
      "arn:aws:inspector:us-west-2:123456789012:rulespackage/0-7fLr2n8m",
      "arn:aws:inspector:us-west-2:123456789012:rulespackage/0-T8r2n8m"
    ],
    "targetArn": "arn:aws:inspector:us-west-2:123456789012:target/0-0kFIPusq"
  }
}

Insecure Settings Example

{
  "assessmentTemplate": {
    "name": "InsecureAssessmentTemplate",
    "durationInSeconds": 600,
    "rulesPackageArns": [],
    "targetArn": "arn:aws:inspector:us-west-2:123456789012:target/0-0kFIPusq"
  }
}