Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 520 discussion

A, B and E Inspector for Lamda std scanning and code scanning Lambda Function with monitor setting to code scan Tag for conditional function, not for all functions

A: Amazon Inspector can automatically scan your Lambda functions for known vulnerabilities (CVEs) in the dependencies of the functions. This action will initiate the security scanning of Lambda functions and Lambda layers to detect vulnerabilities. B: Amazon Inspector provides enhanced scanning features for Lambda functions. This includes both standard scanning (for CVEs in dependencies and layers) and code scanning (for potential vulnerabilities, like data leaks, directly in the code). E: https://docs.aws.amazon.com/lambda/latest/dg/governance-code-scanning.html#:~:text=To%20exclude%20a%20Lambda%20function,Value%3ALambdaStandardScanning. "To exclude a Lambda function from code scans, tag the function with the following key-value pair: Key:InspectorCodeExclusion Value:LambdaCodeScanning"

A: Need to Activate Amazon Inspector first B: For **CVE**, need to use **Lambda standard scanning** B: For **data leaks**, need to use Lambda code scanning E: Tag Lambda functions that do not need code scans

ABE, https://docs.aws.amazon.com/inspector/latest/user/scanning-lambda.html To exclude a Lambda function from Lambda standard scanning, tag the function with the following key-value pair: Key:InspectorExclusion Value:LambdaStandardScanning