AWS inspector documentation change
Summary
Changed default ECR scan duration from 30/90 days to 14 days for pushed/pulled images
Security assessment
Updates scanning configuration documentation to reflect tighter default monitoring windows, promoting more frequent security assessments without evidence of addressing a specific vulnerability.
Diff
diff --git a/inspector/latest/user/scanning-resources.md b/inspector/latest/user/scanning-resources.md index 0f285da2d..beb1deadd 100644 --- a//inspector/latest/user/scanning-resources.md +++ b//inspector/latest/user/scanning-resources.md @@ -61 +61 @@ By default, when you activate Amazon EC2 scanning, you automatically enable hybr -When you activate Amazon ECR scanning, Amazon Inspector converts all **Basic scanning** container repositories in your private registry to **Enhanced scanning** with continual scanning. You can also optionally configure this setting to scan on-push only or to scan select repositories through scan filters. All images pushed within the last 30 days, or pulled within the last 90 days are initially scanned. Amazon Inspector continues to monitor images for a 90 day duration by default, this setting can be changed at any time. For more information about scans for Amazon ECR, see [Scanning Amazon Elastic Container Registry container images with Amazon Inspector](./scanning-ecr.html). +When you activate Amazon ECR scanning, Amazon Inspector converts all **Basic scanning** container repositories in your private registry to **Enhanced scanning** with continual scanning. You can also optionally configure this setting to scan on-push only or to scan select repositories through scan filters. All images pushed within the last 14 days, or pulled within the last 14 days are initially scanned. Amazon Inspector continues to monitor images for a 14 day duration by default, this setting can be changed at any time. For more information about scans for Amazon ECR, see [Scanning Amazon Elastic Container Registry container images with Amazon Inspector](./scanning-ecr.html).