What is the basic difference between AWS Inspector & AWS Config Rules

Question

i am looking for some basic difference between AWS Inspector & AWS Config Rules

Answer 1

The basic difference are:

• AWS Inspector - analyzes instances and ECR docker images from the inside (e.g. malware, virus) in terms of security. On the instances, a special Inspector agent is required to be running.
• AWS Config - can be applied to any resource, does not require any agent on the instances (thus does not check them from the inside), and you can write your own, fully custom security checks.