Inspector

Amazon Inspector is an automated security assessment service that continuously scans EC2 instances, Amazon ECR container images, and AWS Lambda functions for software vulnerabilities and unintended network exposure. It generates risk-scored findings and integrates with AWS Security Hub for a consolidated view of security posture across an account. For AIF-C01, the key distinction is scope: Inspector targets software vulnerabilities and network reachability in compute workloads, whereas AWS Config evaluates resource configuration compliance against rules, and Amazon Macie discovers sensitive data in S3. Inspector is the answer whenever a question asks about CVE detection or container image scanning before deployment.