What Inspector Actually Scans, Resource by Resource
~8 min read
The specific scope of Inspector's coverage across EC2, ECR, and Lambda.
What Inspector Actually Scans, Resource by Resource is a Pro topic
Sign in, then upgrade to Pro or Power to unlock this topic and the full AWS curriculum.
Key points
- •EC2: OS/package CVE scanning plus network reachability analysis for exposure-aware risk scoring
- •ECR: container image layer scanning for CVEs, both on push and continuously afterward
- •Lambda: function code and dependency/layer scanning for known vulnerabilities
- •All three are continuous and automatic once enabled — no manual scan scheduling required