AWS re:Post을(를) 사용하면 다음에 동의하게 됩니다. AWS re:Post 이용 약관
AWS re:Postre:Post

Amazon Inspector Agent over Amazon Linux 2023

0

Hi,

We have an Amazon Linux 2023 EC2 instance which we want to scan with Amazon Inspector. We got the following message(vulnerabilities report isn't available due that) -

'The Inspector agent was not found on this instance. You can run agentless Network Reachability assessments on this instance but cannot run any assessments that need the agent.'

There is any way to overcome this issue? I saw Amazon Inspector Agent is not compatible with Amazon Linux 2023.

Thanks in advance.

주제
컴퓨팅보안, 신원 및 규정 준수
태그
아마존 EC2아마존 인스펙터아마존 리눅스
언어
English
mr
질문됨 5달 전609회 조회
1개 답변
0

Hello.

I don't think you need to install the Inspector agent if you use Amzon Inspector v2.
I think Amzon Inspector v2 can be used if SSM Agent is installed on EC2 and registered as a managed instance.

https://docs.aws.amazon.com/inspector/latest/user/getting_started_tutorial.html

Amazon Inspector can provide Common Vulnerabilities and Exposures (CVE) data for your EC2 instances only if the Amazon EC2 Systems Manager (SSM) agent is installed and activated. This agent is preinstalled on many EC2 instances, but you might need to activate it manually. Regardless of SSM agent status, all of your EC2 instances are scanned for network exposure issues. For more information about configuring scans for Amazon EC2, see Scanning Amazon EC2 instances. Amazon ECR and AWS Lambda function scanning do not require the use of an agent.

We assume that you are probably using Amazon Inspector Classic, in which case the Amazon Inspector agent is not available on Amazon Linux 2023.
https://docs.aws.amazon.com/inspector/v1/userguide/inspector_supported_os_regions.html

profile picture
전문가
Riku_Kobayashi
답변함 5달 전
profile pictureAWS
전문가
Didier_Durand
검토됨 5달 전
  • mr
    5달 전

    Thank you very much for your response. SSM agent is running, but I got 2 question -

    1. There is a way in Amazon Inspector to export a report in PDF like in Amazon Inspector Classic?
    2. I updated some of the libraries on the machine, but there is no change in the finding tab(show vulnerability found 4 days ago), how may I run it again? doesn't it need to be monitored automatically?

    Thanks!

  • Riku_Kobayashi 전문가
    5달 전

    There is a way in Amazon Inspector to export a report in PDF like in Amazon Inspector Classic?

    Reports can be output as JSON or CSV. As far as I know, I don't think it's possible to output directly to PDF. Therefore, I think you will need to output it as CSV and convert it to PDF yourself. https://docs.aws.amazon.com/inspector/latest/user/findings-managing-exporting-reports.html

    I updated some of the libraries on the machine, but there is no change in the finding tab(show vulnerability found 4 days ago), how may I run it again? doesn't it need to be monitored automatically?

    EC2 scans are performed at the timings described in the document below. For example, a scan is performed when you start a new EC2 or install new software. https://docs.aws.amazon.com/inspector/latest/user/scanning-ec2.html#ec2-scan-behavior

  • mr
    5달 전

    Thanks! I did install new package with yum and replace some files on the machine, but looks like nothing is being updated, how may I see the last run of Amazon Inspector or run it manually like in Amazon Inspector Classic?

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠