Core concept
Automatic on enable. Scans new instances/images/functions. Continuous re-scan as CVEs published.
Advertisement
How it works
Charged per resource scanned. Reasonable for small/medium orgs. Integrate with Security Hub.
Advertisement
Trade-offs + gotchas
Every account. Compliance requires vulnerability scanning. First-line defense against known vulns.