- Newest
- Most votes
- Most comments
Hello.
I think Amazon Inspector can only check vulnerabilities for EC2, ECR, and Lambda.
I don't think it can be used for S3.
https://docs.aws.amazon.com/inspector/latest/user/scanning-resources.html
If you want to protect S3, I think Amazon GuardDuty is more appropriate than Amazon Inspector.
https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html
To add to that, Inspector is meant for identifying vulnerabilities in code that the customer manages. There is no custom code with S3 and therefore no related vulnerabilities that customers would have to remedy.
For S3 as a storage service, several services can assist with various security aspects. As Riku Kobayashi also mentioned, GuardDuty S3 Protection (https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html) is one option, meant for identifying and warning about anomalous access patterns related to S3. In addition to that, GuardDuty Malware Protection for S3 (https://docs.aws.amazon.com/guardduty/latest/ug/gdu-malware-protection-s3.html) can be set to run an anti-malware scan for objects as they are uploaded to your S3 bucket. Amazon Macie (https://docs.aws.amazon.com/macie/latest/user/what-is-macie.html) analyses the data contents of your S3 bucket and notifies you about sensitive data it identifies, such as personal data subject to regulatory constraints that doesn't belong in any arbitrary bucket.
Relevant content
- AWS OFFICIALUpdated 7 months ago
