Before jumping in we recommend these resources
Get an overview and steps to sync inventory and metadata from an AWS account, deploy Qualys sensors, scan, and view the security and compliance of your AWS EC2 instances.
What you'll need
EC2 Scanning feature must be enabled for your subscription. Contact your Technical Account Manager or Support to get this feature. (Not available to Express Lite.)
Your account must have a Manager or Unit Manager role.
Scan using Pre-Authorized Virtual Scanner Appliance
Using the pre-authorized virtual scanner appliance, you can scan your EC2 instances.
Perimeter Scan using External Scanners
Qualys External Scanners (Internet Remote Scanners), located at the Qualys Cloud Platform, may be used for perimeter scanning of EC2 instances.
Internal Scan using Cloud Agents
Using our revolutionary Qualys Cloud Agent platform you can deploy lightweight cloud agents to continuously assess your AWS infrastructure for security and compliance.