Skip to content

AWS Inspector For S3

0

Hello, I am currently researching the capabilities of AWS Inspector, but I am unable to find whether it can monitor S3 components or not. Are there also any components that cannot be monitored by AWS Inspector?

2 Answers
2

Hello.

I think Amazon Inspector can only check vulnerabilities for EC2, ECR, and Lambda.
I don't think it can be used for S3.
https://docs.aws.amazon.com/inspector/latest/user/scanning-resources.html

If you want to protect S3, I think Amazon GuardDuty is more appropriate than Amazon Inspector.
https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html

EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

EXPERT

reviewed 2 years ago

2

To add to that, Inspector is meant for identifying vulnerabilities in code that the customer manages. There is no custom code with S3 and therefore no related vulnerabilities that customers would have to remedy.

For S3 as a storage service, several services can assist with various security aspects. As Riku Kobayashi also mentioned, GuardDuty S3 Protection (https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html) is one option, meant for identifying and warning about anomalous access patterns related to S3. In addition to that, GuardDuty Malware Protection for S3 (https://docs.aws.amazon.com/guardduty/latest/ug/gdu-malware-protection-s3.html) can be set to run an anti-malware scan for objects as they are uploaded to your S3 bucket. Amazon Macie (https://docs.aws.amazon.com/macie/latest/user/what-is-macie.html) analyses the data contents of your S3 bucket and notifies you about sensitive data it identifies, such as personal data subject to regulatory constraints that doesn't belong in any arbitrary bucket.

EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

EXPERT

reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.