Configuring the Inspector agent both manually and automatically

The Amazon Inspector agent can be installed on your target in one of three ways. The first way is to install the agent manually, which includes logging on to the target instance. The second way is to use SSM and take advantage of the run command feature to automatically install the Inspector agent on the instances in which we want the Inspector service to look for vulnerabilities. The third way is to incorporate a simple script into the user data so that the agent will be installed during the launch of the instance. These three methods are depicted in the following diagram:

Figure 21.3 – Three ways to install the Inspector agent

Now that we have seen how to install the agent, let's go through the exercise of spinning up some instances and using Systems Manager to install the agent.

Using Amazon Inspector hands-on

In the following hands-on exercise, we are going to launch two...