Skip to main content

Connect AWS Inspector

Use this guide to import Amazon Inspector vulnerability data into Cracken.

Prerequisites​

  • Amazon Inspector enabled in every AWS region you want Cracken to read
  • Permission to create an IAM user and access key
  • A Cracken realm where you can configure data integrations

Prepare the credentials​

Create a dedicated IAM user without console access. Attach:

  • AmazonInspector2ReadOnlyAccess
  • AmazonEC2ReadOnlyAccess

Create an access key for that user and record its Access Key ID and Secret Access Key. Choose the AWS Region that contains the Inspector data you want to import. Cracken's current form uses direct-access credentials; it does not accept a role ARN.

Connect AWS Inspector​

  1. Open Integration Center → Data Integrations.
  2. On the AWS Inspector card, click Install.
  3. Enter the AWS Access Key ID, AWS Secret Access Key, and AWS Region Name.
  4. Click Test Connection, then Save & Connect.

Cracken can list Inspector vulnerabilities and request an on-demand synchronization of the latest results available to the IAM principal.

Sources​

Next steps​

  • Data Integrations — Review how connected security data flows into Cracken.
  • Cybergraph — See how Cracken uses imported vulnerability data.