- Platform/SRE — Plan: New GA capability lets platform teams scan their AMI catalogs continuously via Inspector without launching instances; worth enabling this quarter to catch vulnerabilities before fleet deploys and to enforce security criteria org-wide via Declarative Policies.
- CI/CD — Plan: EC2 Image Builder pipelines can now integrate Inspector AMI scanning directly and block distribution of non-compliant AMIs; schedule adoption as a supply-chain hardening step to gate AMI publishing on scan results.
- Leader — Learn: Awareness item: AWS now offers org-wide AMI vulnerability enforcement via Inspector and Declarative Policies, which could inform updated security standards around base image management but requires no immediate strategic decision.