Amazon inspector

Question

I would like to use AWS tool, like in topic. To me it looks like there are two releases of this tool. One with AWS agent installed on EC2 instance, allows tracking security issues. New one with some benchmarking, and so on. So I'm interested in the new one.

I've red docs, set up sample, test env. but still it looks a bit unclear for me. I understand that they are using public database of vulnerabilities . As well as benchmarking, or testing against best practices.

The question is - how can I know that all of that is tested in lowest 15min. target? Or in the other words - if time is short - what is less tested?

Is anyone use this tool and would like to share knowledge, insights?

Answer 1

A report provided at the end of the testing gives you an overview of the scanning results. The results indicates which of your preselected resources has security issues.