A security team wants to continuously and automatically scan their Amazon EC2 instances and container images in Amazon ECR for software vulnerabilities and unintended network exposure. They need a service that maintains an up-to-date inventory and prioritizes findings based on risk. Which AWS service should they use?