A company runs workloads on Amazon EC2. The company must continuously scan the EC2 instances for software vulnerabilities and unintended network exposure. Which solution will meet these requirements?

Amazon Inspector is designed for automated vulnerability management and continuously scans EC2 instances for software vulnerabilities and unintended network exposure, directly addressing the requirements. Enabling hybrid scanning ensures comprehensive coverage across different environments. GuardDuty, while a security service, focuses on threat detection and monitoring for malicious activity and unauthorized behavior, not vulnerability scanning. Malware Protection and Runtime Monitoring are features of GuardDuty that detect malware and suspicious runtime activity, respectively, which are different from scanning for software vulnerabilities and network exposure.