# Amazon Inspector User Guide

> Amazon Inspector is a vulnerability management service that automatically discovers workloads and continually scans them for software vulnerabilities and unintended network exposure.

- [What is Amazon Inspector?](https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.md)
- [Dashboard](https://docs.aws.amazon.com/inspector/latest/user/understanding-dashboard.md)
- [Searching the vulnerability database](https://docs.aws.amazon.com/inspector/latest/user/vulnerability-search.md)
- [Exporting SBOMs](https://docs.aws.amazon.com/inspector/latest/user/sbom-export.md)
- [EventBridge schema](https://docs.aws.amazon.com/inspector/latest/user/eventbridge-integration.md)
- [Assessing coverage](https://docs.aws.amazon.com/inspector/latest/user/assessing-coverage.md)
- [Usage](https://docs.aws.amazon.com/inspector/latest/user/usage.md)
- [Supported operating systems and programming languages](https://docs.aws.amazon.com/inspector/latest/user/supported.md)
- [Deactivating Amazon Inspector](https://docs.aws.amazon.com/inspector/latest/user/deactivating-best-practices.md)
- [Quotas](https://docs.aws.amazon.com/inspector/latest/user/quotas.md)
- [Regions and endpoints](https://docs.aws.amazon.com/inspector/latest/user/inspector_regions.md)
- [Document history](https://docs.aws.amazon.com/inspector/latest/user/doc-history.md)
- [AWS Glossary](https://docs.aws.amazon.com/inspector/latest/user/glossary.md)

## [Getting started](https://docs.aws.amazon.com/inspector/latest/user/getting_started.md)

- [Getting started tutorial: Activating Amazon Inspector](https://docs.aws.amazon.com/inspector/latest/user/getting_started_tutorial.md): Complete the tutorial to activate Amazon Inspector.


## [Automated scans](https://docs.aws.amazon.com/inspector/latest/user/scanning-resources.md)

- [Activating a scan type](https://docs.aws.amazon.com/inspector/latest/user/activate-scans.md): Learn about how to activate a scan type.

### [Amazon EC2 instance scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning-ec2.md)

Learn how Amazon Inspector scans Amazon EC2 instances and how to configure instances for scans.

- [Deep inspection for Linux instances](https://docs.aws.amazon.com/inspector/latest/user/deep-inspection.md): Learn about how to manage Amazon Inspector deep inspection for Amazon EC2 Linux instances.
- [Scanning Windows EC2 instance](https://docs.aws.amazon.com/inspector/latest/user/windows-scanning.md): Learn about how to scan Windows Amazon EC2 instances with Amazon Inspector.

### [Amazon ECR container image scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning-ecr.md)

Learn about which images in Amazon Elastic Container Registry that Amazon Inspector scans and how to configure Amazon ECR scanning.

- [Configuring the Amazon ECR re-scan duration](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_configure_duration_setting_ecr.md): Learn how Amazon Inspector discovers and monitors AWS resources and the different scan type options.

### [Lambda function scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning-lambda.md)

Learn about how to scan Lambda functions with Amazon Inspector.

### [Amazon Inspector Lambda standard scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_lambda.md)

Learn about Amazon Inspector Lambda standard scanning.

- [Excluding functions from Lambda standard scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_lambda_exclude_functions.md): Learn about how to exclude functions from Lambda standard scanning.

### [Amazon Inspector Lambda code scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_lambda_code.md)

Learn about Amazon Inspector Lambda code scanning.

- [Excluding functions from Lambda code scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_lambda_code_exclude_functions.md): Learn about how to exclude functions from Lambda code scanning
- [Deactivating a scan type](https://docs.aws.amazon.com/inspector/latest/user/deactivate-scans.md): Learn about how to deactivate a scan type in Amazon Inspector.


## [CIS scans](https://docs.aws.amazon.com/inspector/latest/user/scanning-cis.md)

- [Creating a CIS scan configuration](https://docs.aws.amazon.com/inspector/latest/user/scanning-cis-create-cis-scan-configuration.md): Learn about how to create a CIS scan configuration
- [Viewing CIS scan results](https://docs.aws.amazon.com/inspector/latest/user/scanning-cis-view-cis-scan-configuration.md): Learn about how to details for a CIS scan.
- [Editing a CIS scan configuration](https://docs.aws.amazon.com/inspector/latest/user/scanning-cis-view-edit-cis-scan-configuration.md): Learn about how to view and edit a CIS scan configuration
- [Downloading a CIS scan results](https://docs.aws.amazon.com/inspector/latest/user/scanning-cis-view-download-cis-scan-configuration.md): Learn about how to download a CIS scan configuration


## [Amazon Inspector Code Security](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments.md)

### [Prerequisites](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-prerequisites.md)

Describes the prerequisites for Code Security.

- [Activating Code Security](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-activate.md): Learn about how to activate Code Security.
- [Creating a customer managed key to access AWS KMS](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-creating-a-key.md): Learn about using a customer managed key for Amazon Inspector Code Security.

### [Creating an integration](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-create-integration.md)

Learn about how to create an integration.

- [Creating an integration for GitHub](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-connect-github.md): Learn about how to create a connection for Code Security
- [Creating an integration for GitLab Self Managed](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-connect-gitlab.md): Learn about how to create a connection for Code Security
- [Viewing integrations](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-connect-view-integrations.md): Learn about how to view code integrations.

### [Viewing code repositories](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-connect-view-repositories.md)

Learn about how to view code repositories

- [Viewing details for a project](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-connect-view-details-for-repositories.md): Learn about how to view details for a project.
- [Deleting an integration](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-connect-delete-integrations.md): Learn about how to delete an integration.

### [Creating a scan configuration](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-create-configuration.md)

Learn about how to create a scan configuration for Amazon Inspector Code Security.

### [Viewing scan configurations](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-view-configurations.md)

Learn about how to view scan configurations.

- [Viewing details for a scan configuration](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-view-details-for-configurations.md): Learn about how to view details for a scan configuration.
- [Editing a scan configuration](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-edit-configuration.md): Learn about how to edit a scan configuration.
- [Deleting a scan configuration](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-delete-configuration.md): Learn about how to delete a scan configuration
- [Performing an on-demand scan](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-on-demand-scan.md): Learn about how to perform an on-demand scan.
- [Supported languages](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-supported-languages.md): Learn about how to use Amazon Inspector code security
- [Deactivating Code Security](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments-deactivate.md): Learn about how to activate Code Security.


## [Understanding findings](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding.md)

- [Finding types](https://docs.aws.amazon.com/inspector/latest/user/findings-types.md): Learn about the different Amazon Inspector finding types.
- [Viewing findings](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-locating-analyzing.md): Learn about how to view findings in the Amazon Inspector console and with the Amazon Inspector API.
- [Viewing finding details](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-details.md): Learn about how to view details for Amazon Inspector findings.
- [Viewing the Amazon Inspector score](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-score.md): Learn about how to interpret the Amazon Inspector score and understand vulnerability intelligence details in the console.
- [Understanding severity levels for findings](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.md): Learn about the different severity levels for Amazon Inspector findings.


## [Managing findings](https://docs.aws.amazon.com/inspector/latest/user/findings-managing.md)

- [Filtering findings](https://docs.aws.amazon.com/inspector/latest/user/findings-managing-filtering.md): Learn about how to filter your Amazon Inspector findings.
- [Suppressing findings](https://docs.aws.amazon.com/inspector/latest/user/findings-managing-supression-rules.md): Learn how to create suppression rules to hide unwanted findings from results
- [Exporting findings reports](https://docs.aws.amazon.com/inspector/latest/user/findings-managing-exporting-reports.md): Learn about how to export Amazon Inspector findings reports.
- [Automating responses to findings with EventBridge](https://docs.aws.amazon.com/inspector/latest/user/findings-managing-automating-responses.md): Learn about how to use Amazon EventBridge to route events from Amazon Inspector, and learn how to create an Amazon EventBridge rule to send notifications about findings through SNS, Amazon Chime, or Slack.


## [Amazon Inspector VM Scanner](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner.md)

- [Enabling Inspector VM Scanner](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner-enabling.md): When you enable Enhanced EC2 Scanning in the Amazon Inspector console, Amazon Inspector uses Amazon EC2 Systems Manager (SSM) to automatically install the VM Scanner on your managed Amazon EC2 instances.
- [Manual installation and configuration](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner-using.md): This section describes how to manually install and configure Inspector VM Scanner on your Amazon EC2 instances.
- [Viewing logs](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner-viewing-logs.md): Inspector VM Scanner logs always start with inspector-vm-scanner and end with .log.
- [Advanced configuration](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner-advanced-config.md): This section describes advanced configuration options for Inspector VM Scanner.
- [SSM plugin](https://docs.aws.amazon.com/inspector/latest/user/inspector-ssm-plugin.md): Learn about the Amazon Inspector SSM plugin (legacy version).


## [Azure integration](https://docs.aws.amazon.com/inspector/latest/user/inspector-azure.md)

- [Prerequisites](https://docs.aws.amazon.com/inspector/latest/user/inspector-azure-prereqs.md): Requirements for creating a connector in Amazon Inspector.
- [Configuring Azure](https://docs.aws.amazon.com/inspector/latest/user/inspector-azure-setup-azure.md): Configure your Azure environment for integration with Amazon Inspector.
- [Configuring Amazon Inspector](https://docs.aws.amazon.com/inspector/latest/user/inspector-azure-setup-inspector.md): Create a connector in Amazon Inspector to begin scanning your Azure resources.
- [Deleting a connector](https://docs.aws.amazon.com/inspector/latest/user/inspector-azure-delete.md): Delete an Azure connector to stop scanning Azure resources in Amazon Inspector.


## [Amazon Inspector SBOM Generator](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator.md)

- [Previous versions](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-versions.md): Access links to previous versions of the Amazon Inspector SBOM Generator.
- [Operating system collection](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-operating-system-collection.md): Learn about the operating systems the Amazon Inspector SBOM Generator support.
- [Dependency collection](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-dependency-collection.md): Learn about the dependencies the Amazon Inspector SBOM Generator support.
- [Ecosystem collection](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-ecosystem-collection.md): Learn about the dependencies the Amazon Inspector SBOM Generator support.
- [SSL/TLS certificate scans](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-ssl-tls-certificate-scans.md): Learn about SSL/TLS certificate scans.
- [License collection](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-license-collection.md): Learn about the licenses Amazon Inspector SBOM Generator support.
- [Package URLs](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-purl-sbom.md): Learn about package URLs.
- [Version references](https://docs.aws.amazon.com/inspector/latest/user/sbom-generator-unresolved-non-standard-version-reference.md): Learn about how to handle unresolved or non-standard version references.
- [Using CycloneDX namespaces](https://docs.aws.amazon.com/inspector/latest/user/cyclonedx-namespace.md): Learn about the CycloneDX namespaces that Amazon Inspector provides.
- [Plugin developer guide](https://docs.aws.amazon.com/inspector/latest/user/sbomgen-plugin-developer-guide.md): Learn how to extend Sbomgen with custom Lua plugins for new package ecosystems.
- [Plugin testing guide](https://docs.aws.amazon.com/inspector/latest/user/sbomgen-plugin-testing-guide.md): Learn how to write and run tests for Sbomgen Lua plugins.
- [Plugin API reference](https://docs.aws.amazon.com/inspector/latest/user/sbomgen-plugin-api-reference.md): Complete API reference for Sbomgen Lua plugins, including all sbomgen.* functions and testing.* assertions.


## [CI/CD integration](https://docs.aws.amazon.com/inspector/latest/user/scanning-cicd.md)

- [Set up an account for CI/CD integration](https://docs.aws.amazon.com/inspector/latest/user/configure-cicd-account.md): Learn about how to set up an AWS account with an IAM role that allows you to use the Amazon Inspector CI/CD integration.
- [Amazon Inspector Dockerfile checks](https://docs.aws.amazon.com/inspector/latest/user/dockerfile-checks.md): Learn about how Amazon Inspector scans Dockerfiles and Docker container images.
- [Creating a custom CI/CD integration](https://docs.aws.amazon.com/inspector/latest/user/cicd-custom.md): Learn about how to create your own custom CI/CD integration for your pipeline using Amazon Inspector Scan.
- [GitHub actions](https://docs.aws.amazon.com/inspector/latest/user/cicd-inspector-github-actions.md): Learn about how to use GitHub actions with Amazon Inspector.
- [Jenkins plugin](https://docs.aws.amazon.com/inspector/latest/user/cicd-jenkins.md): Learn about how to integrate Amazon Inspector scans into your Jenkins pipeline.
- [CodeCatalyst actions](https://docs.aws.amazon.com/inspector/latest/user/cicd-inspector-codecatalyst-actions.md): Learn about how to use CodeCatalyst actions in Amazon Inspector vulnerability scans.
- [CodePipeline actions](https://docs.aws.amazon.com/inspector/latest/user/cicd-inspector-codepipeline-actions.md): Learn about how to use Amazon Inspector Scan actions with CodePipeline.
- [TeamCity plugin](https://docs.aws.amazon.com/inspector/latest/user/cicd-teamcity.md): Learn how to integrate Amazon Inspector scans into your TeamCity pipeline.
- [GitLab components](https://docs.aws.amazon.com/inspector/latest/user/cicd-inspector-gitlab-components.md): Learn about how to use GitLab components with Amazon Inspector.


## [Managing multiple accounts](https://docs.aws.amazon.com/inspector/latest/user/managing-multiple-accounts.md)

- [Understanding the delegated administrator account and member account](https://docs.aws.amazon.com/inspector/latest/user/admin-member-relationship.md): Learn about the differences between a delegated administrator account and member account in Amazon Inspector.

### [Designating an administrator account](https://docs.aws.amazon.com/inspector/latest/user/designating-admin.md)

Learn about how to designate a delegated administrator account for Amazon Inspector.

- [Activating Amazon Inspector scans for member accounts](https://docs.aws.amazon.com/inspector/latest/user/adding-member-accounts.md): Learn about how to activate Amazon EC2 scanning and Amazon ECR scanning for member accounts.
- [Disassociating member accounts](https://docs.aws.amazon.com/inspector/latest/user/disassociating-member-accounts.md): Learn about how to disassociate a member account .
- [Removing the delegated administrator](https://docs.aws.amazon.com/inspector/latest/user/remove-delegated-admin.md): Learn about how to remove a delegated administrator in Amazon Inspector.


## [Tagging resources](https://docs.aws.amazon.com/inspector/latest/user/tagging-resources.md)

- [Tagging fundamentals](https://docs.aws.amazon.com/inspector/latest/user/tagging-fundamentals.md): Learn about tagging fundamentals.
- [Adding tags](https://docs.aws.amazon.com/inspector/latest/user/tagging-add.md): Learn about how to agg a tag to an Amazon Inspector resource.
- [Removing tags](https://docs.aws.amazon.com/inspector/latest/user/tagging-remove.md): Learn about how to remove a tag from an Amazon Inspector resource.


## [Security](https://docs.aws.amazon.com/inspector/latest/user/security.md)

### [Data protection](https://docs.aws.amazon.com/inspector/latest/user/data-protection.md)

Learn about how the AWS shared responsibility model applies to data protection in Amazon Inspector

- [Encryption at rest](https://docs.aws.amazon.com/inspector/latest/user/encryption-rest.md): Learn about the default encryption options for data Amazon Inspector collects.
- [Encryption in transit](https://docs.aws.amazon.com/inspector/latest/user/encryption-transit.md): Learn about how AWS encrypts data in transit between AWS internal systems.

### [Identity and Access Management](https://docs.aws.amazon.com/inspector/latest/user/security-iam.md)

How to authenticate requests and manage access to your Amazon Inspector resources.

- [How Amazon Inspector works with IAM](https://docs.aws.amazon.com/inspector/latest/user/security_iam_service-with-iam.md): Learn about how IAM works with Amazon Inspector.
- [Identity-based policy examples](https://docs.aws.amazon.com/inspector/latest/user/security_iam_id-based-policy-examples.md): By default, users and roles don't have permission to create or modify Amazon Inspector resources.
- [AWS managed policies](https://docs.aws.amazon.com/inspector/latest/user/security-iam-awsmanpol.md): Learn about AWS managed policies for Amazon Inspector and recent changes to those policies.

### [Using service-linked roles](https://docs.aws.amazon.com/inspector/latest/user/using-service-linked-roles.md)

How to use service-linked roles to give Amazon Inspector access to resources in your AWS account.

- [Service-linked role permissions for Amazon Inspector](https://docs.aws.amazon.com/inspector/latest/user/slr-permissions.md): Amazon Inspector uses the managed policy named AWSServiceRoleForAmazonInspector2.
- [Service-linked role permissions for Amazon Inspector agentless scans](https://docs.aws.amazon.com/inspector/latest/user/slr-permissions-agentless.md): Amazon Inspector agentless scanning uses the service-linked role named AWSServiceRoleForAmazonInspector2Agentless.
- [Service-linked role permissions for Amazon Inspector multi-cloud scans](https://docs.aws.amazon.com/inspector/latest/user/slr-permissions-third-party.md): Amazon Inspector multi-cloud scanning uses the service-linked role named AWSServiceRoleForAmazonInspector2ThirdParty.
- [Troubleshooting](https://docs.aws.amazon.com/inspector/latest/user/security_iam_troubleshoot.md): Learn about how to diagnose and fix common issues you might encounter when working with Amazon Inspector and IAM.

### [Monitoring Amazon Inspector](https://docs.aws.amazon.com/inspector/latest/user/monitoring-overview.md)

Learn about the importance of monitoring in Amazon Inspector.

- [CloudTrail logs](https://docs.aws.amazon.com/inspector/latest/user/logging-using-cloudtrail.md): Learn about logging Amazon Inspector with AWS CloudTrail.
- [Compliance validation](https://docs.aws.amazon.com/inspector/latest/user/inspector-compliance.md): Learn about how AWS services within the scope of a specific compliance program.
- [Resilience](https://docs.aws.amazon.com/inspector/latest/user/disaster-recovery-resiliency.md): Learn about how the AWS architecture supports data redundancy, and learn about specific Amazon Inspector features for data resiliency.
- [Infrastructure security](https://docs.aws.amazon.com/inspector/latest/user/infrastructure-security.md): Learn about how Amazon Inspector isolates service traffic.
- [Incident response](https://docs.aws.amazon.com/inspector/latest/user/security-incident-response.md): Learn about how Amazon Inspector responds to security incidents.
- [Security Research](https://docs.aws.amazon.com/inspector/latest/user/security-research.md): Learn about Amazon Inspector Security Research, including malicious package detection across public package registries.
- [AWS PrivateLink](https://docs.aws.amazon.com/inspector/latest/user/vpc-interface-endpoints-inspector.md): You can use an AWS PrivateLink to create a private connection between your VPC and Amazon Inspector.


## [Integrations](https://docs.aws.amazon.com/inspector/latest/user/integrations.md)

- [Amazon ECR integration](https://docs.aws.amazon.com/inspector/latest/user/ecr-integration.md): Learn about how to use the Amazon Inspector integration with Amazon Elastic Container Registry (Amazon ECR).
- [Security Hub CSPM integration](https://docs.aws.amazon.com/inspector/latest/user/securityhub-integration.md): Learn about how to use the Amazon Inspector integration with AWS Security Hub CSPM.