Inspector EC2 Performance Considerations

Question

We have a big fleet of EC2 instances in our production account and we would like to know if we should be worried about any performance issues should we go ahead and enable inspector, since we can't exclude instances and once enabled will cover all instances, running the SSM agent. Is there any documentation that explains how the scanning and reporting mechanism works ?

For example, using the Guardduty malware scanning it will take a snapshot and do an offline scanning rather on the EC2 itself. So, knowing that the inspector scanning leverages the SSM agent running on the EC2, should there be any concerns at all, when we decide to go ahead and enable inspector in a production environment ?

Answer

Amazon Inspector should have minimum impact on your EC2 fleet. See extract from documentation at https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html.

For more details about how Inspector scan the resources, please refers to https://docs.aws.amazon.com/inspector/latest/user/scanning-resources.html

===Extracted ===

Unlike traditional security scanning software, Amazon Inspector has minimal impact on the performance of your fleet.

Inspector EC2 Performance Considerations

関連するコンテンツ