What Inspector Actually Scans, Resource by Resource

~8 min read

The specific scope of Inspector's coverage across EC2, ECR, and Lambda.

What Inspector Actually Scans, Resource by Resource is a Pro topic

Sign in, then upgrade to Pro or Power to unlock this topic and the full AWS curriculum.

Key points

  • EC2: OS/package CVE scanning plus network reachability analysis for exposure-aware risk scoring
  • ECR: container image layer scanning for CVEs, both on push and continuously afterward
  • Lambda: function code and dependency/layer scanning for known vulnerabilities
  • All three are continuous and automatic once enabled — no manual scan scheduling required