Implementation of AWS Inspector - Agent Install
Readings required.
- What Is Amazon Inspector?
- AWS Inspector CLI
- AWS Inspector Pricing
- Supported OS
- Supported kernel version
CVE, CIS, or Security Best Practices Rules Packages supports all kernel version.Runtime Behavior Analysis rules package only supports with supported kernel version.
- Installing Amazon Inspector Agent
ssh -i key ec2-user@xxxxx
mkdir inspector ; cd inspector
wget https://inspector-agent.amazonaws.com/linux/latest/install
wget https://d1wk0tztpsntt1.cloudfront.net/linux/latest/inspector.gpg -O inspector.key
gpg --import inspector.key
curl -O https://d1wk0tztpsntt1.cloudfront.net/linux/latest/install.sig
gpg --verify ./install.sig
sudo bash ./install
- Once the agent install is complete schedule the “run once” assesment from your inspector console.
- Wait for “Assessment Run” to complete. [ Took about an Hour for me]
- Download your Assessment Report from Assessment Run Link as shown in below picture.