Plan
active
Amazon Inspector adds vulnerability scanning for EC2 AMIs
- Platform/SRE — Plan: New GA capability lets platform teams scan their AMI catalogs continuously via Inspector without launching instances; worth enabling this quarter to catch vulnerabilities before fleet deploys and to enforce security criteria org-wide via Declarative Policies.
- CI/CD — Plan: EC2 Image Builder pipelines can now integrate Inspector AMI scanning directly and block distribution of non-compliant AMIs; schedule adoption as a supply-chain hardening step to gate AMI publishing on scan results.
- Leader — Learn: Awareness item: AWS now offers org-wide AMI vulnerability enforcement via Inspector and Declarative Policies, which could inform updated security standards around base image management but requires no immediate strategic decision.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.