AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/inspector2/get-sbom-export.md

Summary

Added documentation for SBOM export parameters including S3 encryption, restructured filter criteria, and updated field descriptions

Security assessment

Added documentation for KMS key encryption (kmsKeyArn) in S3 exports and clarified security-related resource filtering. While these document security features, there's no evidence of addressing a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/inspector2/get-sbom-export.md b/cli/latest/reference/inspector2/get-sbom-export.md
index af8f22704..150ac5719 100644
--- a//cli/latest/reference/inspector2/get-sbom-export.md
+++ b//cli/latest/reference/inspector2/get-sbom-export.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -194,0 +195,12 @@ Disable automatically prompt for CLI input parameters.
+reportId -> (string)
+
+> The report ID of the software bill of materials (SBOM) report.
+
+format -> (string)
+
+> The format of the software bill of materials (SBOM) report.
+
+status -> (string)
+
+> The status of the software bill of materials (SBOM) report.
+
@@ -202,0 +215,16 @@ errorMessage -> (string)
+s3Destination -> (structure)
+
+> Contains details of the Amazon S3 bucket and KMS key used to export findings
+> 
+> bucketName -> (string)
+>
+>> The name of the Amazon S3 bucket to export findings to.
+> 
+> keyPrefix -> (string)
+>
+>> The prefix that the findings will be written under.
+> 
+> kmsKeyArn -> (string)
+>
+>> The ARN of the KMS key used to encrypt data when exporting findings.
+
@@ -223 +251 @@ filterCriteria -> (structure)
-> ec2InstanceTags -> (list)
+> resourceId -> (list)
@@ -225 +253 @@ filterCriteria -> (structure)
->> The EC2 instance tags used as resource filter criteria.
+>> The resource IDs used as resource filter criteria.
@@ -229 +257 @@ filterCriteria -> (structure)
->>> A resource map filter for a software bill of material report.
+>>> A resource string filter for a software bill of materials report.
@@ -235,4 +262,0 @@ filterCriteria -> (structure)
->>> key -> (string)
->>>
->>>> The filter’s key.
->>> 
@@ -243 +267 @@ filterCriteria -> (structure)
-> ecrImageTags -> (list)
+> resourceType -> (list)
@@ -245 +269 @@ filterCriteria -> (structure)
->> The ECR image tags used as resource filter criteria.
+>> The resource types used as resource filter criteria.
@@ -291 +315 @@ filterCriteria -> (structure)
-> lambdaFunctionTags -> (list)
+> ecrImageTags -> (list)
@@ -293 +317 @@ filterCriteria -> (structure)
->> The Amazon Web Services Lambda function tags used as resource filter criteria.
+>> The ECR image tags used as resource filter criteria.
@@ -297 +321 @@ filterCriteria -> (structure)
->>> A resource map filter for a software bill of material report.
+>>> A resource string filter for a software bill of materials report.
@@ -303,4 +326,0 @@ filterCriteria -> (structure)
->>> key -> (string)
->>>
->>>> The filter’s key.
->>> 
@@ -311 +331 @@ filterCriteria -> (structure)
-> resourceId -> (list)
+> ec2InstanceTags -> (list)
@@ -313 +333 @@ filterCriteria -> (structure)
->> The resource IDs used as resource filter criteria.
+>> The EC2 instance tags used as resource filter criteria.
@@ -317 +337 @@ filterCriteria -> (structure)
->>> A resource string filter for a software bill of materials report.
+>>> A resource map filter for a software bill of material report.
@@ -322,0 +343,4 @@ filterCriteria -> (structure)
+>>> key -> (string)
+>>>
+>>>> The filter’s key.
+>>> 
@@ -327 +351 @@ filterCriteria -> (structure)
-> resourceType -> (list)
+> lambdaFunctionTags -> (list)
@@ -329 +353 @@ filterCriteria -> (structure)
->> The resource types used as resource filter criteria.
+>> The Amazon Web Services Lambda function tags used as resource filter criteria.
@@ -333 +357 @@ filterCriteria -> (structure)
->>> A resource string filter for a software bill of materials report.
+>>> A resource map filter for a software bill of material report.
@@ -338,0 +363,4 @@ filterCriteria -> (structure)
+>>> key -> (string)
+>>>
+>>>> The filter’s key.
+>>> 
@@ -343,28 +370,0 @@ filterCriteria -> (structure)
-format -> (string)
-
-> The format of the software bill of materials (SBOM) report.
-
-reportId -> (string)
-
-> The report ID of the software bill of materials (SBOM) report.
-
-s3Destination -> (structure)
-
-> Contains details of the Amazon S3 bucket and KMS key used to export findings
-> 
-> bucketName -> (string)
->
->> The name of the Amazon S3 bucket to export findings to.
-> 
-> keyPrefix -> (string)
->
->> The prefix that the findings will be written under.
-> 
-> kmsKeyArn -> (string)
->
->> The ARN of the KMS key used to encrypt data when exporting findings.
-
-status -> (string)
-
-> The status of the software bill of materials (SBOM) report.
-
@@ -381 +381 @@ status -> (string)
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »