php - 许多人试图访问日志中的/latest/dynamic/instance-identity/document？安全问题？

Question

我在 AWS EC2 上运行 PHP 应用程序。服务器崩溃了，日志中有数千条:
ErrorGET/latest/dynamic/instance-identity/document

我知道这描述了实例:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-identity-documents.html

但是这个 AWS 是在做什么，还是有人试图弄乱服务器？

谢谢，

Answer 1

这是针对部署在 Amazon EC2 上的应用程序的安全评估服务。

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API.

-- AWS Inspector

上下文:即使我有来自亚马逊 IP 的多个访问日志。我检查了这些访问日志的标题。

{
    "host": "[IP_Address]",
    "connection": "keep-alive",
    "accept": "*/*",
    "accept-encoding": "gzip, deflate",
    "user-agent": "AWS Security Scanner",
    "content-length": "",
    "content-type": ""
}