Amazon Inspector Tutorial Demonstrates Vulnerability Scanning and Remediation

Summary

The tutorial demonstrates Amazon Inspector’s vulnerability management across Lambda, EC2, container images and code repositories, showing how to prioritize findings, inspect vulnerable code and packages, remediate issues, and search for CVEs.

Key points

• The video presents Amazon Inspector as a way to scan Lambda functions, EC2 instances, container images, and code repositories for package and code vulnerabilities.
• Its dashboard highlights critical findings and findings with available exploits or fixes to help prioritize remediation.
• The tutorial shows an ECR image being pushed and then appearing in Inspector findings.
• Examples of Lambda findings include excessive privileges, AWS credentials logged in code, and potentially unsafe use of user input in Python commands.
• The video demonstrates a suggested remediation approach: validate user-supplied input used in Python subprocess and OS command functions.
• Inspector’s vulnerability database search is shown as a way to find affected resources for a searched CVE.