# AWS Inspector

Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fintegrations%2Faws%2Faws-inspector.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fintegrations%2Faws%2Faws-inspector.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

[AWS Inspector](https://aws.amazon.com/inspector/) continually scans AWS workloads for software vulnerabilities and unintended network exposure, combining agent-based and agentless assessments across network, host, and application security. Routing its findings to Coralogix through [Amazon EventBridge](https://aws.amazon.com/eventbridge/) puts vulnerability data next to the rest of your AWS telemetry.

## What you need [​](#what-you-need- "Direct link to what-you-need-")

* An EventBridge API destination and connection pointing at Coralogix. Create them by following the [EventBridge integration](https://coralogix.com/docs/integrations/aws/aws-eventbridge.md).
* Permission to create EventBridge rules and IAM execution roles in the account Inspector runs in.

## Create the EventBridge rule [​](#create-the-eventbridge-rule- "Direct link to create-the-eventbridge-rule-")

1

<!-- -->

.

Define the rule

In EventBridge, create a rule. Enter a **Name**, select the **Event bus** the findings arrive on, and set **Rule type** to **Rule with an event pattern**. Select **Next**.

[![EventBridge Define rule detail page with name, event bus, and rule type set to a rule with an event pattern](/docs/assets/images/Screenshot-2023-03-07-at-12.33.46-1024x802-7ceef5904401962dc17f42e10b03ff04.webp)](https://coralogix.com/docs/assets/images/Screenshot-2023-03-07-at-12.33.46-1024x802-7ceef5904401962dc17f42e10b03ff04.webp)

Shows the rule detail step, where the event bus and rule type are chosen.

2

<!-- -->

.

Match Inspector findings

Under **Event pattern**, set **Event source** to **AWS services**, **AWS service** to **Inspector2**, and **Event type** to **Inspector2 Finding**. EventBridge builds the matching pattern for you.

[![EventBridge event pattern step with Inspector2 selected as the AWS service and Inspector2 Finding as the event type](/docs/assets/images/Screenshot-2023-03-07-at-12.35.57-1024x626-267018be5000fc751d52293f1c9b1bba.webp)](https://coralogix.com/docs/assets/images/Screenshot-2023-03-07-at-12.35.57-1024x626-267018be5000fc751d52293f1c9b1bba.webp)

Shows the generated pattern that matches on `aws.inspector2` and the `Inspector2 Finding` detail type.

3

<!-- -->

.

Point the rule at Coralogix

For the target, set **Target types** to **EventBridge API destination** and select the destination you created. Create a new **Execution role**, or select **Use existing role** and pick one. Select **Next**.

4

<!-- -->

.

Finish

Add **Tags** if you want them, select **Next**, then **Create rule**.

## Related resources[​](#related-resources "Direct link to Related resources")

[Amazon EventBridge integration](https://coralogix.com/docs/integrations/aws/aws-eventbridge.md)[Send-Your-Data API key](https://coralogix.com/docs/user-guides/account-management/api-keys/send-your-data-api-key.md)