Vulnerability management at scale drives enterprise transformation
summary
Amazon announces that Amazon Inspector continually scans EC2, Lambda and ECR images, adds deep inspection of JAR/Golang/Python artifacts, and exposes an SBOM export plus code scanning GA and EPSS scores for exploitability. A customer example shows assessment across 15,000 accounts in 16 minutes and tickets out in 74 minutes. Another user running ~150 accounts and ~10,000 compute resources reports ~90% coverage on day one, 100% Lambda coverage, integrations into Security Hub/EventBridge and an internal alerting pipeline that reduces remediations to hours.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:49Amazon Inspector
- 2:22Customer feedback
- 4:47Three core areas
- 6:11frictionless activation
- 7:42continually continual vulnerability monitoring
- 11:33prioritization
- 12:44new features
- 15:59Software Bill of Materials
- 17:26Code Scanning
- 19:33Standard Scanning
- 20:43Brandon Stevens
- 41:37Enabling Inspector
- 42:26Demo
- 45:18Inspector
- 48:46Critical Findings
- 52:50Inspector Dashboard
related talks
21mAWS On Air ft. Amazon Inspector
36mThe Road To Being Rugged
44mVulnerability Management that developers won't hate
41mCloud Compliance with InSpec and Automate
35mThe Good, the Bad and the Ugly — one year of integrating AWS security services
54mKeeping your code secure
14mDeveloping and deploying secure AWS Lambda applications
50mAutomated Serverless Security Testing: Delivering secure apps continuously