Amazon Inspector

Continuous vulnerability and network-exposure scanning of EC2 instances, container images and Lambda functions.

Provider: aws
Kind: Monitoring
Category: Operations
Official docs: https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html

Properties · 4 set by this component

property	type	values	required	kind default	this component
alertGrouping	boolean	—	no	false	inherited
collectorMode	enum	pull \| push	no	pull	▸ pull
ec2ScanMode · component property	enum	hybrid \| agent-based \| agentless	no	hybrid	inherited
ec2Scanning · component property	boolean	—	no	true	inherited
ecrRescanDurationDays · component property	integer	—	no	90	inherited
ecrScanning · component property	boolean	—	no	true	inherited
independentOfMonitored	boolean	—	no	false	▸ false
lambdaCodeScanning · component property	boolean	—	no	false	inherited
lambdaStandardScanning · component property	boolean	—	no	true	inherited
managed	boolean	—	no	false	▸ true
retentionDays	integer	—	no	—	inherited
signal	enum	metrics \| logs \| traces \| alerts \| all	no	metrics	▸ alerts

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "inspector", component: "aws-inspector" }

Other Monitoring products · 174

and 134 more → Monitoring page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Amazon Inspector: continuous vulnerability and network-exposure scanning of EC2 instances, ECR
3# images and Lambda functions. "Automated scan types in Amazon Inspector": activating Inspector for
4# the first time enrols the account in EC2, ECR and Lambda standard scanning, EC2 scanning defaults
5# to hybrid (SSM agent plus agentless snapshot) mode, ECR images stay monitored for 90 days, and
6# Lambda code scanning is an optional layer. Findings are scored on a modified CVSS base score.
7schemaVersion: "1"
8type: "component"
9id: "aws-inspector"
10kind: "monitoring"
11provider: "aws"
12docs: "https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html"
13defaults:
14  signal: "alerts"
15  collectorMode: "pull"
16  independentOfMonitored: false
17  managed: true
18properties:
19  ec2Scanning:
20    type: "boolean"
21    default: true
22  ecrScanning:
23    type: "boolean"
24    default: true
25  lambdaStandardScanning:
26    type: "boolean"
27    default: true
28  lambdaCodeScanning:
29    type: "boolean"
30    default: false
31  ec2ScanMode:
32    type: "enum"
33    values: ["hybrid", "agent-based", "agentless"]
34    default: "hybrid"
35  ecrRescanDurationDays:
36    type: "integer"
37    default: 90

The same page as markdown, for an agent: /catalogue/components/aws-inspector.md