Questions tagged with Amazon Inspector

We just recently updated our EKS v1.24 instances to the latest baseline AMI image provided by Amazon: amazon/amazon-eks-node-1.24-v20231106 When looking at the Inspector results, it shows that there...

Hi, We are running into an issue where we have applied all the fixes for Findings reported by the AWS Inspector. But, the Inspector Dashboard still reports them as Active instead of Closed....

I recently enabled Amazon Inspector. Upon reviewing the instances in Inspector settings, I noticed that all of them were in state "Actively monitoring with partial errors: Actively monitoring, but...

Hi Team, I am getting access denied for DescribeOrganizationConfiguration API action. event source: inspector2.amazonaws.com. note: I have administrator access and why i get this error.

It appears that the detection algorithms for Npm related vulnerabilities are identifying false positives results that could be easily avoided - https://github.com/browserify/resolve/issues/319 Can...

### Setup - I have several EC2 instances with Amazon Linux 2023 for ECS. - All have the latest SSM Agent 3.2.1542.0 installed, `ssm-cli get-diagnostics` shows all green. - Role: *ECS-Role* with...

We have Amazon Inspector scanning whole AWS Account. Amazon Inspector uses service linked role and policy which we cannot edit and link it with Amazon Inspector. While Amazon Inspector is scanning the...

As of a few days ago I started seeing Inspector findings related to by Ubuntu 20.04 LTS EC2 instances that appear to be false positives. For instance, CVE-2022-29217 was addressed by...

AWS Inspector has surfaced a couple of high vulnerabilities related to runc and containerd on some of our ec2 instances with Amazon Linux 2 installed in the past few days, and the CVE shows the...

I have an instance with UBUNTU 20.04 and AWS inspector2 installed. Inspector reported a vulnerability in `rsyslog` package and I checked the VM and found the package in the `dpkg` list but the...

I have an ubuntu 22.04 LTS EC2 instance with security patches and Inspector2 enabled. Inspector finds several vulnerabilities related to the outdated package `libopenexr25` Facts: * The remediation...

We are using AmazonInspector2 and noticed the following API call in CloudTrail which resulted in a deny: ``` { "eventVersion": "1.08", "userIdentity": { "type": "AssumedRole", ...