AWS inspector documentation change
Summary
Removed section 'About the Amazon Inspector SSM plugin for Linux' including details about plugin installation directories, data storage paths, logs, and uninstallation procedures.
Security assessment
The removed section contained operational details about the SSM plugin but did not address any specific security vulnerabilities or weaknesses. The changes appear to be documentation cleanup or reorganization without security implications.
Diff
diff --git a/inspector/latest/user/deep-inspection.md b/inspector/latest/user/deep-inspection.md index 1cf58ea15..b331404de 100644 --- a//inspector/latest/user/deep-inspection.md +++ b//inspector/latest/user/deep-inspection.md @@ -5 +5 @@ -Accessing or deactivating deep inspectionAbout the Amazon Inspector SSM plugin for LinuxCustom paths for Amazon Inspector deep inspectionCustom schedules for Amazon Inspector deep inspectionSupported programming languages +Accessing or deactivating deep inspectionCustom paths for Amazon Inspector deep inspectionCustom schedules for Amazon Inspector deep inspectionSupported programming languages @@ -27,2 +26,0 @@ This section describes how to manage Amazon Inspector deep inspection for Amazon - * About the Amazon Inspector SSM plugin for Linux - @@ -61,23 +58,0 @@ You can deactivate deep inspection through the [UpdateEc2DeepInspectionConfigura -## About the Amazon Inspector SSM plugin for Linux - -Amazon Inspector uses the Amazon Inspector SSM plugin to perform deep inspection on your Linux instances. The Amazon Inspector SSM plugin is automatically installed on your Linux instances in the `/opt/aws/inspector/bin` directory. The name of the executable is `inspectorssmplugin`. - -Amazon Inspector uses Systems Manager Distributor to deploy the plugin on your instance. To perform deep inspection scans, Systems Manager Distributor and Amazon Inspector must support your Amazon EC2 instance operating system. For information about operating systems that Systems Manager Distributor supports, see [Supported package platforms and architectures](https://docs.aws.amazon.com/systems-manager/latest/userguide/distributor.html#what-is-a-package-platforms) in the _AWS Systems Manager User Guide_. - -Amazon Inspector creates the following file directories to manage data collected for deep inspection by the Amazon Inspector SSM plugin: - - * `/opt/aws/inspector/var/input` - - * `/opt/aws/inspector/var/output` – The `packages.txt` file in this directory stores the full paths to packages that deep inspection discovers. If Amazon Inspector detects the same package multiple times on your instance, the `packages.txt` file lists each location where the package was found. - - - - -Amazon Inspector stores logs for the plugin in the `/var/log/amazon/inspector` directory. - -### Uninstalling the Amazon Inspector SSM plugin - -If the `inspectorssmplugin` file is inadvertently deleted, the SSM association `InspectorLinuxDistributor-do-not-delete` will try to reinstall the `inspectorssmplugin` file at the next scan interval. - -If you deactivate Amazon EC2 scanning, the plugin will be automatically uninstalled from all Linux hosts. -