More easily validate the components of the software you build
summary
Automated vulnerability management that continuously scans EC2, ECR images and Lambda, with one-click enablement across an AWS Organization and delegated admin visibility. Exports SBOMs in SPDX and CycloneDX to S3 for Athena or QuickSight queries, shows deep EC2 inspection including language packages and configurable extra paths, and surfaces prioritized findings using CVSS plus EPSS exploitability score. Lambda adds standard dependency scanning plus code scanning for OWASP issues, integrates via EventBridge/Security Hub for ticketing, and excludes stale functions after 90 days.
AI-written summary · about
chapters (5)
- 0:00Introduction to Amazon Inspector
- 9:45New Inspector features overview
- 22:33Volkswagen's Inspector journey
- 47:47Live demo and SBOM export
- 55:27Q&A and resources
related talks
14mDeveloping and deploying secure AWS Lambda applications
21mAWS On Air ft. Amazon Inspector
50mAutomated Serverless Security Testing: Delivering secure apps continuously
54mKeeping your code secure
29mPragmatic Security Automation and DevSecOps in the Cloud
15mSecure and scale your cloud foundations using AWS Built-in
15mDevopsec: Rapid Security in the Cloud with AWS and CIS
44mVulnerability Management that developers won't hate