AWS Re-launches Amazon Inspector To Find Software Vulnerabilities

at #reinvent, @awscloud has just re-launched Amazon Inspector

this is HUGE!

https://www.youtube.com/watch?v=wi1PDr9n67Y&feature=youtu.be

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

re-launches are hard. @awscloud Macie is way, way better now but still doesn't have the traction it should (a/k/a everyone using it) because of a few years of brutal costs & #ux

Inspector has always been better, but now it’s a lot more user friendly

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

1: assessments are now continual & automated

<< no more set time period assessments & super delayed results…if you remembered to scan at all

the service now just bubbles up findings == awesome

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

2: Inspector uses "the" @awscloud agent (I think there's only one now) which means it's already there on AWS managed AMIs

the service leverages that to find EC2 instances as well as ECR repos

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

3: containers!

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

4: @awscloud Organizations support << about f--king time!

enabling Inspector was a pain. I ❤️ to be able to say that, “was”

critical improvement for adoption

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

5: see no. 2 ... the custom Inspector agent is out the door. the @awscloud Systems Manager agent—the one agent to rule them all—is now used

<< again, that greatly simplifies adoption

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

6: better risk scoring << we'll see about this one. assigning risk scores is tricky as there are layers involved

most vulnerability discovery/management services use the CVE/CVSS score to assess risk but that lacks context

it’s a start…but only a start

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

7: integrates directly with @awscloud EventBridge

<< no more routing events through another service. I mean, it still happens behind the scenes but if it’s behind the scenes, I can safely ignore

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

8: AWS Security Hub integration << need to dive into this one more. it's unclear what's changed here as there was some level of integration...at least if you consider dumping findings in the Hub "integrating"

🧵☁️ #cloud #security

@marknca tweeted at 29-Nov-2021, 20:52

overall, this is a huge improvement to @awscloud Inspector. I'll take some time next week to dive in but so far, this is a big win for #cloud #security

this is GA now

the launch blog is up at https://aws.amazon.com/blogs/aws/improved-automated-vulnerability-management-for-cloud-workloads-with-a-new-amazon-inspector/

/ 🧵☁️

@marknca tweeted at 29-Nov-2021, 20:52

👆 Start