An automated security assessment service that scans AWS workloads for vulnerabilities and unintended network exposure. It continuously analyzes EC2 instances and container images in Amazon ECR against CVEs and security best practices, integrating with AWS Organizations and Security Hub for centralized visibility.