AWS inspector documentation change
Summary
Expanded scope of findings to include code vulnerabilities in various sources and updated section title about code security
Security assessment
Adds documentation about security feature coverage (code scanning for first-party code, dependencies, and IaC) but doesn't address specific security issues
Diff
diff --git a/inspector/latest/user/findings-understanding.md b/inspector/latest/user/findings-understanding.md index c078bb171..04f0616c7 100644 --- a//inspector/latest/user/findings-understanding.md +++ b//inspector/latest/user/findings-understanding.md @@ -7 +7 @@ -Amazon Inspector generates a finding when it detects a vulnerability in an Amazon EC2 instance, a container image in Amazon ECR, or an AWS Lambda function. A finding is a detailed report about a vulnerability impacting one of your AWS resources. +Amazon Inspector generates a finding when it detects a vulnerability in Amazon EC2 instances, Amazon ECR containers images, and Lambda functions. It also generates findings for code vulnerabilities detected in first-party application source code, third-party application dependencies, and Infrastructure as Code. A finding is a detailed report about a vulnerability impacting one of your AWS resources. @@ -9 +9 @@ Amazon Inspector generates a finding when it detects a vulnerability in an Amazo -Findings are named after vulnerabilities and provide severity ratings, information about impacted AWS resources, and details that describe how to remediate detected vulnerabilities. Amazon Inspector stores all of your active findings until you remediate them. +Findings are named after vulnerabilities and provide severity ratings, information about impacted AWS resources and non AWS resources, and details that describe how to remediate detected vulnerabilities. Amazon Inspector stores all of your active findings until you remediate them. @@ -59 +59 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Downloading a CIS scan results +Deactivating Code Security