Which AWS service provides automated security assessments?

Amazon Inspector is a security assessment service designed to help developers and security teams identify vulnerabilities in their applications and deployed workloads. It automates the process of scanning and assessing the security of applications while running in AWS. The tool focuses on identifying security issues related to the application's network, operating system, and common vulnerabilities based on the latest best practices and industry benchmarks.

By performing automated assessments, Amazon Inspector provides actionable security findings that help users understand their security posture and address vulnerabilities proactively. This enables organizations to enhance their overall security and compliance efforts in AWS environments without requiring manual intervention for every assessment.

The other services mentioned have different functions; for instance, AWS Config tracks AWS resource configurations and assesses compliance, Amazon CloudWatch monitors application performance and operational health, while AWS Shield provides protection against distributed denial-of-service (DDoS) attacks. These services play vital roles in security and monitoring, but they do not specifically provide the automated security assessments that Amazon Inspector does.