DevSecOps helps customers create an environment where "everyone is responsible for security." Adopting DevSecOps can be challenging using traditional security tools that are designed for on-premises infrastructure. Amazon Inspector is an automated security assessment service that helps you adopt DevSecOps by integrating security assessments directly into the development process of applications running on Amazon Elastic Compute Cloud (Amazon EC2). In this session, we will deep dive into Amazon Inspector and show how you can automate host security assessments to make them a seamless part of your DevSecOps lifecycle. We will run through a demo of installing the AWS agent, setting up assessment targets and templates, scheduling and running assessments. We will then explore the findings generated by assessments and discuss how you can automate the management and remediation of findings.

1. Eric Fitzgerald, Principal Engineer, Amazon Inspector
November 09, 2017
Session TitleAmazon Inspector
automating security assessments & managing findings

2. What to Expect from the Session
Amazon Confidential
• Brief overview of Amazon Inspector
• Lab 1: Methods for automating Amazon Inspector agent installations
• Lab 2: Automatic security assessment triggers
• Lab 3: Automated findings remediation
• Q&A
What are we going to do?

3. Amazon Confidential
What is Amazon Inspector?
• Security & vulnerability assessment
• Host-based analysis
• OS and Applications
• Findings contain remediation suggestion
• Security best practice

4. Amazon Confidential
Why launch Amazon Inspector?
Our customers asked us to:
• Complement shared security model
• Automatable
• DevSecOps

5. Amazon Confidential
Key Concepts for Inspector
Inspector Agent Assessment Targets Assessment Template
Rules Packages Triggers & Runs Findings & Reports

6. Amazon Confidential
Installing & Running
Assessments
Hands on Lab #1

7. Amazon Confidential
Inspector 101
https://docs.aws.amazon.com/inspector/latest/userguide/
inspector_quickstart.html

8. Amazon Confidential
Automated Assessment
Hands on Lab #2

9. Amazon Confidential
Scheduling Assessments
https://docs.aws.amazon.com/inspector/latest/userguide/
inspector_assessments.html#assessment_runs-
schedule

10. Amazon Confidential
Automating Remediation
Hands on Lab #3

11. Amazon Confidential
Automated Remediation
https://aws.amazon.com/blogs/security/how-to-remediate-
amazon-inspector-security-findings-automatically/

12. Thank You!