Enhance container software supply chain visibility through SBOM export with Amazon Inspector and QuickSight
Security Blog
This article explains how to enhance visibility into your software supply chain by exporting and visualizing software bills of materials (SBOMs) for container images using Amazon Inspector and Amazon QuickSight.
Specifically, the article covers:
- The importance of SBOMs for managing security risks in the software supply chain
- How to deploy a CloudFormation stack to set up the required resources (S3 buckets, Lambda functions, EventBridge rules, etc.)
- How to trigger SBOM generation using Amazon Inspector when a new container image is pushed to Amazon ECR
- How to process and transform the generated SBOMs into a format suitable for analysis using AWS Glue and Amazon Athena
- How to visualize the SBOM data in a QuickSight dashboard and use natural language queries (QuickSight Q) to identify vulnerable packages and CVEs
- Conclusion: Integrating SBOM workflows and visualizing SBOMs can improve software supply chain transparency and security posture
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jan 26
2024
2024
Export a Software Bill of Materials using Amazon Inspector
Mar 29
2024
2024
Enhance monitoring and debugging for AWS Glue jobs using new job observability metrics, Part 3: Visualization and trend analysis using Amazon QuickSight
Mar 21
2024
2024
Improve the security of your software supply chain with Amazon CodeArtifact package group configuration
Feb 14
2024
2024
Data insights from SAP with Amazon SageMaker AutoML and QuickSight
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.