Amazon Inspector

Amazon Inspector is an automated, agent-based security and vulnerability assessment service for your AWS resources. As of now, it supports only EC2 instances. It essentially complements devops culture in an organization, and it integrates with continuous integration and continuous deployment tools.

To begin with, you install an agent in your EC2 instance, prepare an assessment template, and run a security assessment for this EC2 instance.

Amazon Inspector will collect data related to running processes, the network, the filesystem and lot of data related to configuration, the traffic flow between AWS services and network, the secure channels, and so on.

Once this data is collected, it is validated against a set of predefined rules ...

Get AWS: Security Best Practices on AWS now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.