Find vulnerabilities on EC2 instance using Amazon Inspector

Lab Details

This lab will walk you through how to launch an EC2 instance, configure an Inspector with an Assessment template and target, and then finally shut down the instance.

Amazon Inspector target will be used to practice with AWS Agent installed on an EC2 Instance. After the template and Assessment target are created, you can run the template to identify vulnerabilities in the instance.

Duration: 90 minutes

AWS Region: US East, N. Virginia us-east-1

Introduction

What is Amazon Inspector?

Amazon Inspector allows us find vulnerabilities in configured EC2 instances.

There are two types of assessment runs: Network assessment and host assessment.

Network assessment uses the Network Reachability package rule, while Host assessment uses three types of package rules i.e. Common vulnerabilities and exposures. Center for Internet Security (CIS), Benchmarks. Security best practices for Amazon Inspector.

Amazon Inspector has three main types of severity levels. Amazon Inspector has three types of severity levels: Medium, High, and Low.

Amazon Inspector recommends that you only report the severity of your findings.

Architecture Diagram