AMI bake pipelines for a public-health account ship images that later show critical CVEs in Amazon Inspector. Which vulnerability-response improvement should be prioritized?
Select an answer to reveal the explanation.
Short Explanation
Shipping an AMI full of critical CVEs is like opening a clinic with the fire exits chained. Let Inspector scan the golden image and fail the pipeline when the red findings are still hot. Fix first, promote second.
Full Explanation
Prioritizing automated vulnerability detection and response includes blocking promotion of AMIs with unresolved critical Inspector findings. Continuous improvement embeds scanning in the bake pipeline so remediation happens before fleet rollout. Disabling scans, promoting first, or sharing unscanned images org-wide widens exposure across municipal accounts. Professional practice treats critical CVE clearance as a release gate.