AWS cli documentation change
Summary
Updated AWS CLI version reference from 2.27.63 to 2.28.0 and restructured filter parameters for findings reports. Changed filtering criteria from AWS account IDs to finding ARNs, added new filters for severity, observation timestamps, inspector scores, resource types/tags, and vulnerability metrics. Removed legacy code vulnerability filters and expanded package vulnerability filtering capabilities.
Security assessment
The changes enhance security documentation by adding more granular filtering capabilities for security findings (severity levels, first/last observed timestamps, inspector scores). While these improvements help users better analyze security findings, there is no evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/cli/latest/reference/inspector2/create-findings-report.md b/cli/latest/reference/inspector2/create-findings-report.md index 3cc545585..4f6f5bef0 100644 --- a//cli/latest/reference/inspector2/create-findings-report.md +++ b//cli/latest/reference/inspector2/create-findings-report.md @@ -15 +15 @@ - * [AWS CLI 2.27.63 Command Reference](../../index.html) » + * [AWS CLI 2.28.0 Command Reference](../../index.html) » @@ -99 +99 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> awsAccountId -> (list) +> findingArn -> (list) @@ -101 +101 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon Web Services account IDs used to filter findings. +>> Details on the finding ARNs used to filter findings. @@ -115 +115 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeRepositoryProjectName -> (list) +> awsAccountId -> (list) @@ -117 +117 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for findings based on the project name in a code repository. +>> Details of the Amazon Web Services account IDs used to filter findings. @@ -131 +131 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeRepositoryProviderType -> (list) +> findingType -> (list) @@ -133 +133 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for findings based on the repository provider type (such as GitHub, GitLab, etc.). +>> Details on the finding types used to filter findings. @@ -147 +147 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeVulnerabilityDetectorName -> (list) +> severity -> (list) @@ -149 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings. +>> Details on the severity used to filter findings. @@ -163 +163 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeVulnerabilityDetectorTags -> (list) +> firstObservedAt -> (list) @@ -165 +165 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see [Java tags](https://docs.aws.amazon.com/codeguru/detector-library/java/tags/) , or [Python tags](https://docs.aws.amazon.com/codeguru/detector-library/python/tags/) . +>> Details on the date and time a finding was first seen used to filter findings. @@ -169 +169 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a string filter. +>>> Contains details on the time range used to filter findings. @@ -171 +171 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> comparison -> (string) +>>> startInclusive -> (timestamp) @@ -173 +173 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The operator to use when comparing values in the filter. +>>>> A timestamp representing the start of the time period filtered on. @@ -175 +175 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> value -> (string) +>>> endInclusive -> (timestamp) @@ -177 +177 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to filter on. +>>>> A timestamp representing the end of the time period filtered on. @@ -179 +179 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeVulnerabilityFilePath -> (list) +> lastObservedAt -> (list) @@ -181 +181 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The file path to the file in a Lambda function that contains a code vulnerability used to filter findings. +>> Details on the date and time a finding was last seen used to filter findings. @@ -185 +185 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a string filter. +>>> Contains details on the time range used to filter findings. @@ -187 +187 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> comparison -> (string) +>>> startInclusive -> (timestamp) @@ -189 +189 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The operator to use when comparing values in the filter. +>>>> A timestamp representing the start of the time period filtered on. @@ -191 +191 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> value -> (string) +>>> endInclusive -> (timestamp) @@ -193 +193 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to filter on. +>>>> A timestamp representing the end of the time period filtered on. @@ -195 +195 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> componentId -> (list) +> updatedAt -> (list) @@ -197 +197,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the component IDs used to filter findings. +>> Details on the date and time a finding was last updated at used to filter findings. +>> +>> (structure) +>> +>>> Contains details on the time range used to filter findings. +>>> +>>> startInclusive -> (timestamp) +>>> +>>>> A timestamp representing the start of the time period filtered on. +>>> +>>> endInclusive -> (timestamp) +>>> +>>>> A timestamp representing the end of the time period filtered on. +> +> findingStatus -> (list) +> +>> Details on the finding status types used to filter findings. @@ -211 +227 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> componentType -> (list) +> title -> (list) @@ -213 +229 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the component types used to filter findings. +>> Details on the finding title used to filter findings. @@ -227 +243 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ec2InstanceImageId -> (list) +> inspectorScore -> (list) @@ -229 +245,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon EC2 instance image IDs used to filter findings. +>> The Amazon Inspector score to filter on. +>> +>> (structure) +>> +>>> An object that describes the details of a number filter. +>>> +>>> upperInclusive -> (double) +>>> +>>>> The highest number to be included in the filter. +>>> +>>> lowerInclusive -> (double) +>>> +>>>> The lowest number to be included in the filter. +> +> resourceType -> (list) +> +>> Details on the resource types used to filter findings. @@ -243 +275 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ec2InstanceSubnetId -> (list) +> resourceId -> (list) @@ -245 +277 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon EC2 instance subnet IDs used to filter findings. +>> Details on the resource IDs used to filter findings. @@ -259 +291 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ec2InstanceVpcId -> (list) +> resourceTags -> (list) @@ -261 +293 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon EC2 instance VPC IDs used to filter findings. +>> Details on the resource tags used to filter findings. @@ -265 +297 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a string filter. +>>> An object that describes details of a map filter. @@ -270,0 +303,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec +>>> key -> (string) +>>> +>>>> The tag key used in the filter. +>>> @@ -273 +309 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to filter on. +>>>> The tag value used in the filter. @@ -275 +311 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageArchitecture -> (list) +> ec2InstanceImageId -> (list) @@ -277 +313 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon ECR image architecture types used to filter findings. +>> Details of the Amazon EC2 instance image IDs used to filter findings. @@ -291 +327 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageHash -> (list) +> ec2InstanceVpcId -> (list) @@ -293 +329 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon ECR image hashes used to filter findings. +>> Details of the Amazon EC2 instance VPC IDs used to filter findings. @@ -307 +343 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageInUseCount -> (list) +> ec2InstanceSubnetId -> (list) @@ -309 +345 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria indicating when details for an Amazon ECR image include when an Amazon ECR image is in use. +>> Details of the Amazon EC2 instance subnet IDs used to filter findings. @@ -313 +349 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a number filter. +>>> An object that describes the details of a string filter. @@ -315 +351 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> lowerInclusive -> (double) +>>> comparison -> (string) @@ -317 +353 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The lowest number to be included in the filter. +>>>> The operator to use when comparing values in the filter. @@ -319 +355 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> upperInclusive -> (double) +>>> value -> (string) @@ -321 +357 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The highest number to be included in the filter. +>>>> The value to filter on. @@ -323 +359 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageLastInUseAt -> (list) +> ecrImagePushedAt -> (list) @@ -325 +361 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria indicating when an Amazon ECR image was last used in an Amazon ECS cluster task or Amazon EKS cluster pod. +>> Details on the Amazon ECR image push date and time used to filter findings. @@ -331,4 +366,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> endInclusive -> (timestamp) ->>> ->>>> A timestamp representing the end of the time period filtered on. ->>> @@ -337,0 +370,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec +>>> +>>> endInclusive -> (timestamp) +>>> +>>>> A timestamp representing the end of the time period filtered on. @@ -339 +375 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImagePushedAt -> (list) +> ecrImageArchitecture -> (list) @@ -341 +377 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details on the Amazon ECR image push date and time used to filter findings.