Skip to main content

Remediation

Enable Amazon Inspector EC2 Scanning​

If you are the delegated administrator for an AWS Organization, you can enable Amazon Inspector scan types across multiple accounts and Regions using the AWS CLI and automation scripts. For additional guidance, refer to the inspector2-enablement-with-cli repository on GitHub.

From Console​

To activate Amazon Inspector EC2 scanning:

  1. Open the Amazon Inspector console: https://console.aws.amazon.com/inspector/v2/home

  2. Using the AWS Region selector in the upper-right corner, select the Region in which you want to enable EC2 scanning.

  3. In the navigation pane, choose Account management.

  4. Select the account(s) for which you want to enable a scan type.

  5. Choose Activate, then select EC2 scanning.

  6. Repeat these steps for each AWS Region where EC2 instances are deployed to ensure comprehensive coverage.