DEV Community

Aadit Unni
Aadit Unni

Posted on

Finding vulnerabilities on EC2 instance using Amazon Inspector

[57/100] #100DaysOfCloud Today, I ran Amazon Inspector and found vulnerabilities on EC2 instance.

Amazon Inspector Classic is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector Classic automatically assesses applications for exposure, vulnerabilities, and deviations from best practices. After performing an assessment, Amazon Inspector Classic produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports, which are available via the Amazon Inspector Classic console or API.

Use cases :

  • Quickly discover vulnerabilities in compute workloads
    • Automatically discover and quickly route vulnerability findings in near real time to the appropriate teams so they can take immediate action.
  • Prioritize patch remediation
    • Use up-to-date common vulnerabilities and exposures (CVE) information combined with factors such as network accessibility to create context-based risk scores that help you prioritize and address vulnerable resources.
  • Meet compliance requirements
    • Support compliance requirements and best practices for NIST CSF, PCI DSS, and other regulations with Amazon Inspector scans.
  • Identify zero-day vulnerabilities sooner
    • Accelerate MTTR by using over 50 sources for vulnerability intelligence to help identify zero-day vulnerabilities quickly.

You can try do it by yourself by following the steps from the link below: GitHub

Top comments (0)