Richard Roxburgh works as a cloud security engineer in an IT company. His organization was dissatisfied with the services of its previous cloud…

Amazon Inspector: It is an automated security assessment service that helps improve the security

and compliance of applications deployed on AWS1.

Automated Scans: Amazon Inspector automatically scans workloads, such as Amazon EC2 instances,

containers, and Lambda functions, for vulnerabilities and unintended network exposure1.

Security Best Practices: It checks for deviations from best practices and provides detailed findings

that include information about the nature of the threat, the affected resources, and

recommendations for remediation1.

Integration with AWS: As an AWS-native service, Amazon Inspector is well-integrated into the AWS

ecosystem, making it suitable for Richard’s requirements to secure applications before deployment

and while running1.

Exclusion of Other Options: AWS CloudFormation is used for infrastructure as code, AWS Control

Tower for governance, and Amazon CloudFront for content delivery, none of which are automated

security assessment services1.

Reference:

AWS’s official page on Amazon Inspector1.