Tools/AWS_Inspector
AWS Inspector
Automated vulnerability management — continuously scans EC2, ECR container images, and Lambda functions for known CVEs in installed software and package dependencies. Workload-focused, not a config or data scanner (see AWS_Config and Amazon_Macie for those). Closest open-source equivalent is Trivy, which covers the same CVE-scanning ground plus IaC misconfig and secret detection in one binary, runnable in cloud or on-prem pipelines.