From code to insight: Amazon Inspector & AWS Lambda in action
summary
Demo shows Amazon Inspector scanning Lambda apps for real vulnerabilities, not just topics: it runs one-click enablement and detects runtime package CVEs and code flaws (now GA for code scanning), reports exact file and line, and offers copy‑paste remediation snippets with generative AI planned by year end. Scans are agentless, event-driven findings delivered to EventBridge for Jira/ServiceNow automation, tag Lambda layers, export SBOMs (CycloneDX/SPDX), and surface EPSS/Inspector scores and exploit intelligence in near real time.
AI-written summary · about
chapters (5)
- 0:00Introduction to AWS Lambda
- 0:55Shared responsibility model
- 2:47Amazon Inspector features
- 6:49Standard and code scanning
- 13:37Demo and intelligence tools
related talks
21mAWS On Air ft. Amazon Inspector
14mDeveloping and deploying secure AWS Lambda applications
50mAutomated Serverless Security Testing: Delivering secure apps continuously
33mServerless Security: New Risks Require New Approaches
51mInnovations in AWS detection and response services
54mKeeping your code secure
31mAmazon CodeGuru and CodeWhisperer for Java Developers on AWS
41mLive Coding on Observability for Serverless