An automated vulnerability assessment service that scans EC2 instances, container images, and Lambda functions for known CVEs and network reachability issues.
In SAP-C02 it's distinguished from GuardDuty: Inspector is vulnerability assessment (outdated software, CVEs); GuardDuty is active threat detection (behavior). Question: identify packages with known vulnerabilities on your EC2 instances → Inspector.
Amazon Inspector is a concept that can show up on the exam. Check the full guide to see it in context.