Export a Software Bill of Materials using Amazon Inspector
Security Blog
This article explains how to export a Software Bill of Materials (SBOM) using Amazon Inspector, a vulnerability management service for AWS workloads. An SBOM provides visibility into the software supply chain, including the packages and dependencies used in your applications, and related vulnerabilities.
Specifically, the article covers:
- Overview of SBOM and its benefits
- Prerequisites for exporting SBOM using a CloudFormation template
- Steps to export SBOM reports in CycloneDX or SPDX format to an S3 bucket
- Using Amazon Athena to query and analyze SBOM data
- Example SQL queries to gain insights from SBOM reports
- Visualizing SBOM data using Amazon QuickSight
- Conclusion highlighting the benefits of SBOM for compliance and security
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Feb 28
2024
2024
Enhance container software supply chain visibility through SBOM export with Amazon Inspector and QuickSight
Feb 12
2024
2024
Identify Java nested dependencies with Amazon Inspector SBOM Generator
Sep 28
2024
2024
Securing Your Software Supply Chain with Amazon CodeCatalyst and Amazon Inspector
Jan 10
2024
2024
Automate the delivery of AWS Backup Audit Manager reports via email
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.