Which AWS service provides continuous scanning of Amazon EC2 instances for software vulnerabilities?

Amazon Inspector is the correct answer because it is a vulnerability management service that continuously scans AWS workloads, including Amazon EC2 instances and container images, for software vulnerabilities and unintended network exposure. It automatically discovers and scans instances, providing a prioritized list of findings. Amazon GuardDuty is an intelligent threat detection service that monitors for malicious activity and unauthorized behavior, but it doesn't perform vulnerability scanning. Amazon Detective helps investigate security findings and potential threats by analyzing and visualizing security data. Amazon Cognito provides authentication, authorization, and user management for web and mobile applications, unrelated to vulnerability scanning of EC2 instances.