AWS inspector: Recommendation to upgrade from SSM plugin to Enhanced EC2 Scanning
Summary
Explicitly recommends migrating to VM Scanner to avoid Windows scan timeouts and improve consistency
Security assessment
Addresses potential security visibility gaps by recommending more reliable scanning methodology
Evidence
+###### We recommend Enhanced EC2 Scanning + +The Amazon Inspector SSM plugin is the legacy scanner. We recommend that you upgrade to [Enhanced EC2 Scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning-ec2.html#agent-based-upgraded) with the [Amazon Inspector VM Scanner](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner.html).
Diff
diff --git a/inspector/latest/user/inspector-ssm-plugin.md b/inspector/latest/user/inspector-ssm-plugin.md index 47f564851..c536cfe1d 100644 --- a//inspector/latest/user/inspector-ssm-plugin.md +++ b//inspector/latest/user/inspector-ssm-plugin.md @@ -12,0 +13,4 @@ This topic describes the Amazon Inspector SSM plugin for Linux and Windows insta +###### We recommend Enhanced EC2 Scanning + +The Amazon Inspector SSM plugin is the legacy scanner. We recommend that you upgrade to [Enhanced EC2 Scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning-ec2.html#agent-based-upgraded) with the [Amazon Inspector VM Scanner](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner.html). The VM Scanner uses the same scan mechanism across all supported operating systems and produces more consistent findings. On Windows in particular, it avoids the per‐query timeouts that can cause the Amazon Inspector SSM plugin to report findings inconsistently. +