Excluding functions from Lambda standard scanning - Amazon Inspector
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Excluding functions from Lambda standard scanning

You can add tags to Lambda functions, so you can exclude them from Amazon Inspector Lambda standard scans. Excluding functions from scans can prevent unactionable alerts. When you tag a function for exclusion, the tag must have the following key-value pair.

  • Key:InspectorExclusion

  • Value:LambdaStandardScanning

This topic describes how to tag a function for exclusion from scans. For more information about adding tags in Lambda, see Using tags on Lambda functions.

To exclude a function from scans

  1. Sign in using your credentials, and then open the Lambda console at https://console.amazonaws.cn/lambda/.

  2. From the navigation pane, choose Functions.

  3. Choose the name of the function you would want to exclude from Amazon Inspector Lambda standard scans.

  4. Choose Configuration, and then choose Tags.

  5. Choose Manage tags, and then Add new tag.

    1. For Key, enter InspectorExclusion.

    2. For Value, enter LambdaStandardScanning

  6. Choose Save.