Amazon Inspector Classic

Amazon Inspector Classic configuration

1. To start using Amazon Inspector Classic, go to the AWS management console, search for "Amazon Inspector" and click it from the results. Once there, click on the left-side menu.

   

2. Click on Switch to Inspector Classic.

   

3. On the Amazon Inspector Classic page, click Get started.

   

4. Click on Advanced setup.

   

5. Configure the assessment target:

   1. Choose a name for the assessment target.

   2. Select if you are going to include all EC2 instances in the scans or if you prefer to filter them based on a tag by enabling or disabling the Include all EC2 instances in this AWS account and region checkbox.

   3. If you prefer to install the agents manually, disable the Install the Amazon Inspector Agent on all EC2 instances in this assessment target checkbox.

   4. Click on Next.

   

   Note

   If you prefer to install the Inspector Classic agents manually, follow the instructions on the installing Amazon Inspector Classic agents guide.

6. Configure the assessment template. Choose the name, duration, and frequency of the analysis and click on Next.

   

7. Finally, review the details of the configured target and template and click on Next.

   

Policy configuration

Follow the creating an AWS policy guide to create a policy using the Amazon Web Services console.

Take into account that the policies below follow the principle of least privilege to ensure that only the minimum permissions are provided to the AWS IAM user.

To allow an AWS user to use the Wazuh module for AWS with read-only permissions, it must have a policy like the following attached:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "inspector:ListFindings",
                "inspector:DescribeFindings"
            ],
            "Resource": "*"
        }
    ]
}

After creating a policy, you can attach it directly to a user or to a group to which the user belongs. In attaching a policy to an IAM user group, you see how to attach a policy to a group. More information on how to use other methods is available in the AWS documentation.