All checks
High
Amazon Inspector EC2 scanning should be enabled
Confirms that Amazon Inspector EC2 scanning is enabled in each Region where the account has EC2 instances, so Inspector checks their installed packages against security advisories and their network reachability.
- service
- Inspector
- severity
- High
- scope
- evaluated in every region
How to fix it
In the console
Amazon Inspector → Account management → Activate
With the AWS CLI
aws inspector2 enable --resource-types EC2 --region <region>With Terraform
resource "aws_inspector2_enabler" "this" {
account_ids = [data.aws_caller_identity.current.account_id]
resource_types = ["EC2"]
}See which of your accounts this check is failing on.
Book a demo