User Guide Version Latest - AWS Documentation

1 Amazon InspectorUser GuideVersion LatestAmazon inspector user GuideAmazon inspector : user GuideCopyright 2018 Amazon Web Services, Inc. and/or its affiliates. All rights 's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any mannerthat is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks notowned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored inspector user GuideTable of ContentsWhat is Amazon inspector ?

2 1 Benefits of Amazon inspector .. 1 Features of Amazon inspector .. 1 Amazon inspector Pricing .. 2 Accessing Amazon inspector .. 2 Amazon inspector Terminology and Concepts .. 2 Amazon inspector Service Limits .. 3 Amazon inspector Supported Operating Systems and Regions .. 5 Supported Linux-based Operating Systems .. 5 Supported Windows-based Operating Systems .. 5 Supported Regions .. 6 Getting Started .. 7 Pre-Requisites for Using Amazon inspector .. 7 One-Click 7 Advanced Setup .. 8 Tutorials.

3 10 Amazon inspector Tutorial - Red Hat Enterprise Linux .. 10 Step 1: Set Up an Amazon EC2 Instance to Use With Amazon inspector .. 10 Step 2: Modify Your Amazon EC2 Instance .. 10 Step 3: Create an Assessment Target and Install an Amazon inspector Agent on the EC2 Instance .. 11 Step 4: Create and Run Your Assessment Template .. 11 Step 5: Locate and Analyze Generated Findings .. 12 Step 6: Apply the Recommended Fix to Your Assessment Target .. 13 Amazon inspector Tutorial - Ubuntu Server .. 13 Step 1: Set Up an Amazon EC2 Instance to Use With Amazon inspector .

4 13 Step 2: Modify Your Amazon EC2 Instance .. 14 Step 3: Create an Assessment Target and Install an Amazon inspector Agent on the EC2 Instance .. 14 Step 4: Create and Run Your Assessment Template .. 14 Step 5: Locate and Analyze Generated Findings .. 15 Step 6: Apply the Recommended Fix to Your Assessment Target .. 16 Using Service-Linked Roles .. 17 Service-Linked Role Permissions for Amazon inspector .. 17 Creating a Service-Linked Role for Amazon inspector .. 18If you are getting started with Amazon inspector for the first time.

5 18If you already have Amazon inspector running in your AWS account .. 18 Editing a Service-Linked Role for Amazon inspector .. 19 Deleting a Service-Linked Role for Amazon inspector .. 19 Amazon inspector Agents .. 20 Amazon inspector Agent Privileges .. 20 Network and Amazon inspector Agent Security .. 21 Amazon inspector Agent Updates .. 21 Telemetry Data Lifecycle .. 21 Access Control from Amazon inspector into AWS Accounts .. 22 Amazon inspector Agent Limits .. 22 Amazon inspector Agent Public Licensing.

6 22 Installing Amazon inspector Agents .. 22 Amazon Linux AMI with Amazon inspector Agent .. 23To install the Amazon inspector Agent on multiple EC2 instances using the Systems ManagerRun 23To install the Amazon inspector Agent on a Linux-based EC2 instance .. 24To install the Amazon inspector Agent on a Windows-based EC2 instance .. 24 Working with Amazon inspector Agents on Linux-based Operating Systems .. 25 Version LatestiiiAmazon inspector user GuideTo verify that the Amazon inspector Agent is running.

7 25To stop the Amazon inspector Agent .. 25To start the Amazon inspector Agent .. 25To configure proxy support for Amazon inspector Agents .. 26To uninstall the Amazon inspector Agent .. 27 Working with Amazon inspector Agents on Windows-based Operating Systems .. 27To stop or start the Amazon inspector Agent or verify that the Amazon inspector Agent 27To modify Amazon inspector Agent settings .. 28To configure proxy support for Amazon inspector Agents .. 28To uninstall the Amazon inspector Agent .. 29(Optional) Verify the Signature of the Amazon inspector Agent Installation Script on Linux-basedOperating Systems.

8 29 Install the GPG Tools .. 29 Authenticate and Import the Public Key .. 30 Verify the Signature of the Package .. 31(Optional) Verify the Signature of the Amazon inspector Agent Installation Script on Windows-basedOperating Systems .. 32 Amazon inspector Assessment Targets .. 33 Tagging Resources to Create an Assessment Target .. 33 Amazon inspector Assessment Targets Limits .. 33 Creating an Assessment Target (Console) .. 34 Deleting an Assessment Target (Console) .. 35 Amazon inspector Assessment Templates and Assessment Runs.

9 36 Amazon inspector Assessment Templates .. 36 Amazon inspector Assessment Templates Limits .. 37 Creating an Assessment Template (Console) .. 37 Deleting an Assessment Template (Console) .. 38 Assessment 38 Deleting an Assessment Run (Console) .. 39 Amazon inspector Assessment Runs Limits .. 39 Setting Up Automatic Assessment Runs Through a Lambda Function .. 39 Setting Up an SNS Topic for Amazon inspector Notifications (Console) .. 40 Amazon inspector Findings .. 42 Working with Findings .. 42 Assessment Reports.

10 44 Exclusions in Amazon inspector .. 45 Exclusion Types .. 45 Previewing Exclusions .. 48 Viewing Post-Assessment Exclusions .. 49 Amazon inspector Rules Packages and Rules .. 50 Severity Levels for Rules in Amazon inspector .. 50 Rules Packages in Amazon inspector .. 50 Common Vulnerabilities and Exposures .. 51 Center for Internet Security (CIS) Benchmarks .. 51 Security Best Practices .. 53 Disable Root Login over SSH .. 53 Support SSH Version 2 Only .. 54 Disable Password Authentication Over SSH.