Please refer to the guide provided by Qualys for your scanner setup, and ensure the virtual private cloud (VPC) for your golden AMI creation is accessible by your Qualys Scanner. This post does not provide guidance on setting up a Qualys Scanner.Please read the original blog post for golden AMI pipeline creation for additional context around this implementation.In this post, I will be focusing on using the Qualys Scanner for performing vulnerability assessments in your golden AMI pipeline. There are two ways to set up continuous assessments for your golden AMIs using Qualys-use the Qualys Scanner or the Qualys Cloud Agent. The repository contains a README guide that includes step-by-step instructions and AWS CloudFormation templates required to set up a golden AMI pipeline that allows you to create, distribute across accounts, regularly assess, and decommission golden AMIs.
#COLLABORA CODE AMI AWS SOFTWARE#
Qualys Virtual Scanner is available on AWS Marketplace, while the golden AMI pipeline sample configuration is available on GitHub via the Amazon Software License. I have also provided a sample implementation for integration with a Qualys Scanner.
#COLLABORA CODE AMI AWS HOW TO#
In this post, I have provided an alternative to the previous sample implementation on how to create a golden AMI pipeline with Amazon Inspector. Qualys is an AWS Security Competency Partner. Our customers loved the idea of automating the process to scan their approved AMIs in a consistent manner, and using Amazon Inspector to perform vulnerability assessments on their golden AMIs.Īfter several customer interactions, I realized that many of you prefer to use existing scanning tools provided by AWS Partner Network (APN) Partners such as Qualys to perform vulnerability assessments on golden AMIs. Last year, Amazon Web Services (AWS) released a blog post on how to create a golden Amazon Machine Images (AMI) pipeline and set up vulnerability assessments using Amazon Inspector. By Sagar Khasnis, Partner Solutions Architect at AWS
0 kommentar(er)
