AWS Inspector v2 should be enabled for EC2 and ECR vulnerability scanning

What it checks

AWS Inspector v2: EC2 or ECR scanning is not fully enabled.

Where it applies

Terraform: aws_inspector2_enabler

CloudFormation: no CloudFormation type maps to these resources yet.

How to fix it

1. Set resource_types to ["EC2", "ECR", "LAMBDA"] on the aws_inspector2_enabler resource. Inspector v2 continuously scans running instances and pushed images.

Frameworks

• AWS FSBP Inspector.1
• SOC 2 CC7.1
• NIST 800-53 rev5 SI-2

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules