AWS Security Cookbook

How it works...

While enabling the Inspector, we selected the frequency of inspection as weekly. We can also run it once manually. We selected the types of inspection on EC2 instances as both network assessments and host assessments. With network assessments, AWS performs a network configuration analysis to check for the ports that are reachable from outside the VPC. With network assessments, installing an agent is optional; however, with the agent, AWS will also find the processes that are reachable on the ports.

With host assessments, AWS checks for common vulnerabilities and exposures (CVE), performs host hardening (CIS benchmarks), and implements other security best practices. With host assessments, we need to install the Inspector agent ...