All checks
High
Amazon Inspector Lambda standard scanning should be enabled
Confirms that Amazon Inspector Lambda standard scanning is enabled in each Region where the account has Lambda functions, so the packages in each function and its layers are checked for known vulnerabilities. Inspector scans only functions invoked or updated in the last 90 days.
- service
- Inspector
- severity
- High
- scope
- evaluated in every region
How to fix it
In the console
Amazon Inspector → Account management → Activate
With the AWS CLI
aws inspector2 enable --resource-types LAMBDA --region <region>With Terraform
resource "aws_inspector2_enabler" "this" {
account_ids = [data.aws_caller_identity.current.account_id]
resource_types = ["LAMBDA"]
}See which of your accounts this check is failing on.
Book a demo