Inspector from Amazon Web Service is a cost effective, automated assessment that helps ensure the security and compliance of your cloud deployed applications. Here's how it can help your organization.
Amazon Inspector is another Amazon web service that helps improve the security and performance of cloud-based applications. When this service is run, it automatically performs a search for security weaknesses or failures in applications and compares them with a set of rules that have been created based on the best security practices recommended in the market. The results of the analysis are presented in a detailed list and ordered by level of severity and can be viewed through the web console of the Amazon Inspector.
Amazon Inspector offers many rules that can be used to evaluate applications the same ones that are grouped in different packages of rules by category, gravity or price. This gives you options to choose the type of analysis you can perform. The rule packs available in the Amazon Inspector are detailed below:
If a particular CIS reference appears in a find created by an Amazon Inspector evaluation run, you can download a detailed description of the PDF reference from the CIS Benchmarks site (a free registration is required). The reference document provides detailed information about this CIS reference, its severity and how to mitigate it.
Among the rules found in this package are:
The rules that are analyzed are the following:
Image: Results displayed on the A.I console.
After the agent performed the analysis in the instance
Using the Amazon Inspector service presents companies an economic saving in view of the need to hire personnel to carry out the analysis, implementation and proper monitoring of security in an IT infrastructure. When we say that the Amazon Inspector automatically performs this work, we are ensuring that the selected security rule packets are executed in the instances by performing valuations in accordance with the best security practices recommended. This guarantees an optimum operation of the applications in production, which are a great support tool in the development of business processes.