Security & identity
Amazon Inspector
- Timebilled
- Bytesnot billed
- Callsbilled
In one line
EC2 and Lambda meter by the hour of coverage. Container images and code repos meter per scan.
What gets missed
ECR bills per assessment, so a CI pipeline pushing all day pays for every initial scan and every rescan of every image. EC2 and Lambda coverage prorates by instance-hour, so short-lived hosts cost little.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
EC2-ScanningLambda-Standard-Scanningcontainer-image-initial-scancontainer-image-re-scan
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.