Amazon Web Services, (AWS) Announces Automated Security Assessment Service: Amazon Inspector

[engine]

Amazon Web Services, AWS, has announced a preview of "Amazon Inspector," devised to make it easy for users to check security and compliance of their systems on AWS. If you're not a security expert, or don't have the staff to check this, Amazon Inspector should be a great benefit to help avoid vulnerabilities being introduced through error or accident.

The initial launch of Inspector will include the following sets of rules:

Common Vulnerabilities and Exposures

Network Security Best Practices

Authentication Best Practices

Operating System Security Best Practices

Application Security Best Practices

PCI DSS 3.0 Assessment

Issues identified by Inspector (we call them “findings”) are gathered together and grouped by severity in a comprehensive report. Amazon Web Services, (AWS) Announces Automated Security Assessment Service: Amazon Inspector [aws.amazon.com]

[bill]

It's surprising how many neglect to follow a lot of these best practices but understandable in a lot of cases. This is a welcome addition.