A company has a continuous integration pipeline where the company creates container images by using AWS CodeBuild. The created images are stored in Amazon Elastic Container Registry (Amazon ECR)…

Question

Options

• AActivate Amazon Inspector enhanced scanning for Amazon ECR. Configure the enhanced
• BCreate an Amazon EventBridge rule for Amazon Inspector findings. Set an Amazon Simple
• CActivate AWS Lambda enhanced scanning for Amazon ECR. Configure the enhanced scanning
• DCreate a new AWS Lambda function. Invoke the new Lambda function when scan findings are
• EActivate default basic scanning for Amazon ECR for all container images. Configure the default

• A
  74% (17)
• C
  9% (2)
• D
  13% (3)
• E
  4% (1)

Explanation

Amazon Inspector provides enhanced scanning capabilities for container images stored in Amazon ECR. It automatically scans images for vulnerabilities and provides detailed findings. By configuring continuous scanning, vulnerabilities are identified as soon as new images are pushed to the registry, minimizing delays in detection. Setting up an SNS topic ensures that the security team is notified of any vulnerabilities automatically, reducing manual intervention and providing an efficient notification mechanism. Amazon EventBridge can trigger notifications or actions based on Amazon Inspector findings. By setting an EventBridge rule that triggers on specific findings, you can forward the notifications directly to the SNS topic, ensuring that the security team is immediately informed when vulnerabilities are detected. By using Amazon Inspector enhanced scanning and leveraging EventBridge and SNS for notifications, you achieve a solution that requires minimal manual effort while ensuring that vulnerabilities are detected and communicated efficiently.

No community discussion yet for this question.