Amazon Inspector
An automated service that scans workloads for software vulnerabilities and unintended network exposure.
Amazon Inspector is an automated vulnerability management service that continuously scans EC2 instances, container images in Amazon ECR, and Lambda functions for known software vulnerabilities (CVEs) and unintended network exposure. It generates risk-scored, prioritized findings in a centralized view so security teams can remediate the most critical issues first. The key exam distinction is scope: Inspector assesses your resources for weaknesses that could be exploited, while GuardDuty analyzes logs and traffic to detect active threats at runtime. Inspector finds what is vulnerable; it does not detect intrusions.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →