AWS inspector documentation change
Summary
Clarified ECR scanning activation process and continuous monitoring conditions. Removed reference to 'last-in-use images on a running container' and simplified activation flow description.
Security assessment
The changes refine operational details of ECR scanning but do not address security vulnerabilities or introduce new security features. The modifications appear to improve documentation clarity rather than respond to security issues.
Diff
diff --git a/inspector/latest/user/scanning-ecr.md b/inspector/latest/user/scanning-ecr.md index 49434b6d2..76c0fcf27 100644 --- a//inspector/latest/user/scanning-ecr.md +++ b//inspector/latest/user/scanning-ecr.md @@ -27 +27 @@ This section provides information about Amazon ECR scanning and describes how to -When you first activate Amazon ECR scanning, and your repository is configured for continuous scanning, Amazon Inspector detects all eligible last-in-use images on a running container or images that were pushed within the last 14 days. Amazon Inspector then scans the detected images and sets their scan status to `active`. Amazon Inspector continues to monitor images as long as they were pushed within 14 days (by default) or the last-in-use date is within 14 days (by default), or within the Amazon ECR rescan duration you configure. For Amazon Inspector accounts that were created prior to May 16th, 2025, the default configuration is for re-scan to monitor images if they were pushed or pulled within the last 90 days. For more information, see [Configuring the Amazon ECR re-scan duration](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_configure_duration_setting_ecr.html). +When you first activate Amazon ECR scanning, Amazon Inspector detects images pushed within the last 14 days. Amazon Inspector then scans the images and sets the scan statuses to `active`. If continuous scanning is enabled, Amazon Inspector monitors images as long as they were pushed within 14 days (by default), the last-in-use date is within 14 days (by default), or the images are scanned within the configured re-scan duration. For Amazon Inspector accounts that were created prior to May 16th, 2025, the default configuration is for re-scan to monitor images if they were pushed or pulled within the last 90 days. For more information, see [Configuring the Amazon ECR re-scan duration](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_configure_duration_setting_ecr.html).