Amazon Inspector includes Amazon EC2 Instance Details to Security Findings

Amazon Inspector aids you to locate security vulnerabilities also divergence from security in applications, both before they are deployed, and while they are running in a production domain. Amazon Inspector is API-driven service which analyzes network configurations in your AWS account that utilizes voluntary agent for visibility into your Amazon EC2 instances. Amazon Inspector aids you minimize the chance of introducing security issues through deployment and development by automating the security evaluation of your applications and identifying vulnerabilities.

Amazon Inspector is an automated security evaluation service which assists to upgrade the security and compliance of applications deployed on AWS. After executing an evaluation, Amazon Inspector creates a complete list of security findings prioritized by level of severity. These findings can be reviewed straight or as part of complete evaluation reports which are available through the Amazon Inspector console or API. These additional fields assist you filter, group, and prioritize your security findings based on the image, network location, tags, or other attributes of vulnerable EC2 instances.

Amazon Inspector security findings now contain the Amazon Machine Image (AMI) ID, instance tags, auto scaling group, host name, IP addresses, DNS names, and subnet ID of the Amazon EC2 instance which has the vulnerability or insecure configuration. You can spot these fields by clicking the ‘Show Details’ button while examining a finding in the management console. These fields are also available when you describe findings through the AWS API and CLI.

Amazon Inspector security evaluation assist you to examine for unplanned network accessibility of your Amazon EC2 instances and for vulnerabilities on those EC2 instances. Amazon Inspector evaluations gave to you as pre-defined rules packages linked to familiar security best practices and vulnerability definitions. Examples of built-in rules contains reviewing for ingress to your EC2 instances from the internet, remote root login being allowed, or vulnerable software versions installed. These rules are regularly updated by AWS security researchers.