Which AWS service can scan your AWS environment to identify security vulnerabilities on Amazon EC2 instances?

Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS. It automatically assesses applications for vulnerabilities and deviations from best practices, including scanning Amazon EC2 instances for software vulnerabilities and unintended network exposure. Amazon Macie is a data security and privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS. AWS Shield Standard is a managed threat protection service that safeguards applications running on AWS from Distributed Denial of Service (DDoS) attacks. Security groups act as virtual firewalls for EC2 instances to control inbound and outbound traffic, but they do not scan for vulnerabilities.