Find vulnerable Lambda Functions with Amazon Inspector

In this lab, you'll enable Amazon Inspector and use it to detect a real-world code vulnerability in a pre-deployed AWS Lambda function. The lab environment includes two Lambda functions: one containing a hardcoded AWS secret access key (CWE-798) and one clean function for comparison. You'll activate Inspector, enable Lambda Standard and Code scanning, and observe how Inspector automatically discovers and scans the functions. Once scanning completes, you'll explore the resulting Critical severity finding, examine the exact line of vulnerable code, and review the remediation guidance provided.