A township wants continuous vulnerability assessment of EC2 instances and container images in Amazon ECR as part of its secure workload posture. Which AWS service should the architect select for that scanning use case?
Select an answer to reveal the explanation.
Short Explanation
Inspector is the township’s scheduled building inspection for servers and images—finding cracked pipes (CVEs) on EC2 and ECR. Macie hunts sensitive data, Artifact is paperwork, and QuickSight is charts—not the vulnerability scanner.
Full Explanation
Amazon Inspector provides vulnerability assessment for compute resources and container images, including EC2 and ECR use cases commonly tested at Associate level. Macie focuses on sensitive-data discovery in object storage, Artifact provides compliance reports, and QuickSight is analytics—not a substitute for CVE scanning. Selecting Inspector aligns Task 1.2 secure-workload posture with the right purpose-built service.