Remediate Vulnerabilities with Amazon Inspector

As a blue teamer, vulnerability scanning and management tools are a perfect complement to more manual red team activities. Let's get hands-on with Amazon Inspector in this beginner-friendly lab and use it to harden our attack surface!

As part of our efforts to increase buy-in and to drive-forward security improvements in engineering, we are collaborating with the DevOps team in a security assessment of their Elastic Container Registry (ECR) image deployment templates and Lambda functions. Let's show them how they can proactively secure their resources!

• Basic knowledge of vulnerability classes affecting web applications
• Basic knowledge of Docker / Podman

• Use Amazon Inspector to remediate vulnerabilities in Lambda and ECR
• Use various third-party tools to assess ECR image security
• Evaluate risk and impact, and decide whether to action or suppress findings

Vulnerability management is a key aspect of enterprise security. Having "always-on" tools that can automate the process of uncoverinbg vulnerabilities is a perfect complement to manual penetration testing and red teaming. Amazon Inspector can be great as part of a layered defensive suite and identify exploitable vulnerabilities in Lambda packages and code, EC2 instances and Elastic Container Registry (ECR).