Scheduled CIS Linux scans on AWS Inspector

[dsotirho-ucsc]

https://docs.aws.amazon.com/inspector/latest/user/scanning-cis.html

• [x] Redo manual permission change on Monday
• [ ] Add IAM infrastructure code to attach CIS policy to GitLab role
• [ ] Add Inspector2 infrastructure code to create scheduled scan (not directly supported as of 7/3/2024, but we can use CloudFormation stack instead)

[dsotirho-ucsc]

Assignee to file PR for 2nd checklist item.

[hannes-ucsc]

We can use a CloudFormation stack to achieve the 3rd CL item.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-cisscanconfiguration.html

The scan should occur weekly on Friday at 7:30pm PST/PDT. It should be a level 2 scan.

Assignee to file PR for all remaining CL items.