AWS Inspector is a vulnerability management service available in the AWS stack. The solution continually scans AWS workloads for software vulnerabilities and unintended network exposure.

Traditionally, Inspector is managed from the AWS Management Console to be used across all accounts in your organization. Upon launch, the Inspector automatically discovers running Amazon Elastic Compute Cloud (EC2) instances and container images in Amazon Elastic Container Registry (ECR).

Once discovered, the solution immediately starts assessing them for known vulnerabilities.

Vulnerabilities found are then correlated to common vulnerabilities and exposures (CVE), network access, and exploitability to calculate a highly contextualized risk score.

The risk score prioritizes the most critical vulnerabilities to help analysts improve the hierarchization and speed of their remediation response.

All findings are aggregated in a newly designed Amazon Inspector console and pushed to AWS Security Hub and Amazon EventBridge to automate workflows. Vulnerabilities found in container images are also sent to Amazon ECR for resource owners to view and remediate.