AWS cli medium security documentation change

Service: cli · 2025-08-01 · Security-related medium

File: cli/latest/reference/inspector2/get-encryption-key.md

Summary

Swapped parameters for --resource-type and --scan-type, updated valid values for encryption key configuration

Security assessment

The parameter swap between resource-type and scan-type could prevent misconfiguration of encryption keys for different resource types. Incorrectly mapping these parameters previously could have led to encryption being applied to unintended resources/scans, creating potential security gaps. The change clarifies security-critical configuration but doesn't introduce new security features.

Diff

diff --git a/cli/latest/reference/inspector2/get-encryption-key.md b/cli/latest/reference/inspector2/get-encryption-key.md
index 7b0c7831a..71f237efe 100644
--- a//cli/latest/reference/inspector2/get-encryption-key.md
+++ b//cli/latest/reference/inspector2/get-encryption-key.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -67 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-    --resource-type <value>
@@ -68,0 +68 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
+    --resource-type <value>
@@ -93 +93 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-`--resource-type` (string)
+`--scan-type` (string)
@@ -95 +95 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> The resource type the key encrypts.
+> The scan type the key encrypts.
@@ -99,5 +99,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->   * `AWS_EC2_INSTANCE`
->   * `AWS_ECR_CONTAINER_IMAGE`
->   * `AWS_ECR_REPOSITORY`
->   * `AWS_LAMBDA_FUNCTION`
->   * `CODE_REPOSITORY`
+>   * `NETWORK`
+>   * `PACKAGE`
+>   * `CODE`
@@ -107 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-`--scan-type` (string)
+`--resource-type` (string)
@@ -109 +107 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> The scan type the key encrypts.
+> The resource type the key encrypts.
@@ -113,3 +111,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->   * `NETWORK`
->   * `PACKAGE`
->   * `CODE`
+>   * `AWS_EC2_INSTANCE`
+>   * `AWS_ECR_CONTAINER_IMAGE`
+>   * `AWS_ECR_REPOSITORY`
+>   * `AWS_LAMBDA_FUNCTION`
+>   * `CODE_REPOSITORY`
@@ -232 +232 @@ kmsKeyId -> (string)
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »