Questions tagged [amazon-inspector]

Used for questions related to the Amazon Web Services (AWS) Amazon Inspector service.

https://aws.amazon.com/inspector/

14 questions
4
votes
0 answers

How to suppress findings on old/superseded AWS ECR images on AWS Inspector?

We are using AWS Inspector to scan vulnerabilities on our AWS ECR repositories. When there is a new image on a certain repository, we would like to suppress findings from past / superseded images, keep active only findings from the latest image for…
Diogo Melo
  • 1,735
  • 3
  • 20
  • 29
3
votes
1 answer

Enable Inspector v2 with Terraform

is it possible to enable Inspector new version by Terraform? as in https://registry.terraform.io/, I only found inspector classic resources
Tien Dung Tran
  • 1,127
  • 4
  • 16
  • 32
2
votes
1 answer

I cannot install Amazon Inspector

When I executed the "Run Command" with the "AmazonInspector-ManageAWSAgent " Document, The output gives me this error: Failed to find an inspector agent package for this OS:ol-5.4.. The OS version of the server is Oracle Linux Server (based from…
1
vote
1 answer

I'm not getting the expected response from client.describe_image_scan_findings() using Boto3

I'm trying to use Boto3 to get the number of vulnerabilities from my images in my repositories. I have a list of repository names and image IDs that are getting passed into this function. Based off their documentation I'm expecting a response like…
1
vote
1 answer

EC2 Image Builder with Amazon Inspector - different rule packages?

I've built golden image pipeline with EC2 Image Builder. It works perfectly fine. Now I want to integrate it with Amazon Inspector and there is aws-managed test component which I can add easily to my pipeline - inspector-test-linux. The issue here…
0
votes
0 answers

AWS Inspector : badges showing the latest ECR images vulnerability findings status

CodeBuild has a badge feature which allows to get the URL of a picture representing the status of the last build. I am looking for the same functionality in AWS Inspector so that I can display the result of the latest vulnerability scans performed…
pyb
  • 4,813
  • 2
  • 27
  • 45
0
votes
1 answer

AWS - Not able to enable AWS Inspector in us-west 2

We are not able to enable AWS inspector in our account in us-west-2. Our observation is that we are able to enable it in the other regions. We use cloudformation to setup the infrastructure. Looking at the error we thought that this might be due to…
user1305398
  • 3,550
  • 5
  • 26
  • 42
0
votes
1 answer

Is there a way to get the EC2 instances which belongs to an EKS cluster via AWS SDK library?

I created a function that will generate reports corresponding to vulnerabilities found in EC2 instances and push them to a bucket in S3 by using the SDK library for Node.js, I'm currently using the Inspector2 module for that task and everything…
0
votes
2 answers

How long does it take for AWS Amazon Inspector to complete a full EC2 Scan?

I enabled AWS Amazon Inspector (2) for a single EC2 instance that I have. It's an ubuntu with php and apache, nothing special, and the status shows Scanning for the last 3 hours. I look at the htop of this machine, and I see that the…
Joe
  • 39
  • 7
0
votes
0 answers

Does the new Amazon Inspector scan Amazon Lightsail instances

I'm about to enable the new Amazon Inspector on our AWS organization, My question is does the new Amazon Inspector scans our Amazon Light sail instances? If not, how could we configure our instances to include it to the list of instances to be…
0
votes
1 answer

AWS Pen test - vulnerability scanning

I am trying to find out if it is correct to say that - In AWS we can only perform vulnerability scanning for EC2 instances. From my research, it seems like there can be pen tests on other AWS services, but vulnerability scanning seems to be focused…
0
votes
1 answer

How do enable Amazon Inspector on an Amazon Lightsail instance

I am using AWS Lightsail instance, Is there any option to enable Amazon Inspector on the Lightsail environment?
0
votes
0 answers

console.log works but return doesn't

I've been racking my brains with this one for some time. When I try to "return" the value of an AWS API to pass it to another function, it comes back undefined. When I console log that value, it works fine. In this case the returned value is an…
0
votes
0 answers

AWS Inspector connection with EC2

How does Amazon Inspector manage to connect with awsagent(Inspector Agent) without any IAM Role? This is the setup I have: EC2 with Inspector agent installed via userdata The EC2 with No Role AWS Inspector with auto-created service linked role …