After a breach of on‑premises applications, a company is migrating those applications to Amazon EC2. The company needs an active vulnerability scanning solution for the EC2 instances that produces a detailed report of findings. Which solution meets these requirements?

Amazon Inspector is a vulnerability management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure. It is the correct choice because it is specifically designed for active vulnerability scanning of EC2 instances and can produce detailed reports. Deploying the Amazon Inspector agent to the EC2 instances allows for in-depth analysis. An AWS Lambda function can then automate the generation and distribution of these detailed reports. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service, not a vulnerability scanner. Amazon Macie is a data security and privacy service that discovers and protects sensitive data, primarily in Amazon S3, not for EC2 instance vulnerability scanning. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, but it focuses on detecting threats rather than active vulnerability scanning of instances for software vulnerabilities.