AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/inspector2/list-cis-scans.md

Summary

Updated AWS CLI version reference from 2.27.63 to 2.28.0. Restructured parameter documentation for list-cis-scans command, including reordering parameters, renaming filters (e.g., scanAtFilters to targetResourceTagFilters), and modifying field descriptions for CIS scan filtering capabilities.

Security assessment

Changes involve documentation restructuring and parameter description improvements rather than addressing specific vulnerabilities. While related to CIS security scanning capabilities, there is no evidence of patching vulnerabilities or addressing security incidents in the diff.

Diff

diff --git a/cli/latest/reference/inspector2/list-cis-scans.md b/cli/latest/reference/inspector2/list-cis-scans.md
index ceceb3a88..12511dc9c 100644
--- a//cli/latest/reference/inspector2/list-cis-scans.md
+++ b//cli/latest/reference/inspector2/list-cis-scans.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-    [--detail-level <value>]
@@ -70,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
+    [--detail-level <value>]
@@ -100,11 +99,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-`--detail-level` (string)
-
-> The detail applied to the CIS scan.
-> 
-> Possible values:
-> 
->   * `ORGANIZATION`
->   * `MEMBER`
-> 
-
-
@@ -115,17 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> failedChecksFilters -> (list)
->
->> The list of failed checks filters.
->> 
->> (structure)
->>
->>> The CIS number filter.
->>> 
->>> lowerInclusive -> (integer)
->>>
->>>> The CIS number filter’s lower inclusive.
->>> 
->>> upperInclusive -> (integer)
->>>
->>>> The CIS number filter’s upper inclusive.
-> 
-> scanArnFilters -> (list)
+> scanNameFilters -> (list)
@@ -133 +106 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of scan ARN filters.
+>> The list of scan name filters.
@@ -147 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> scanAtFilters -> (list)
+> targetResourceTagFilters -> (list)
@@ -149 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of scan at filters.
+>> The list of target resource tag filters.
@@ -153 +126 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> The CIS date filter.
+>>> The tag filter.
@@ -155 +128 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> earliestScanStartTime -> (timestamp)
+>>> comparison -> (string)
@@ -157 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The CIS date filter’s earliest scan start time.
+>>>> The tag filter comparison value.
@@ -159 +132 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> latestScanStartTime -> (timestamp)
+>>> key -> (string)
@@ -161 +134,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The CIS date filter’s latest scan start time.
+>>>> The tag filter key.
+>>> 
+>>> value -> (string)
+>>>
+>>>> The tag filter value.
@@ -163 +140 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> scanConfigurationArnFilters -> (list)
+> targetResourceIdFilters -> (list)
@@ -165 +142 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of scan configuration ARN filters.
+>> The list of target resource ID filters.
@@ -179 +156 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> scanNameFilters -> (list)
+> scanStatusFilters -> (list)
@@ -181 +158 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of scan name filters.
+>> The list of scan status filters.
@@ -185 +162 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> The CIS string filter.
+>>> The CIS scan status filter.
@@ -189 +166 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The comparison value of the CIS string filter.
+>>>> The filter comparison value.
@@ -193 +170 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The value of the CIS string filter.
+>>>> The filter value.
@@ -195 +172 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> scanStatusFilters -> (list)
+> scanAtFilters -> (list)
@@ -197 +174 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of scan status filters.
+>> The list of scan at filters.
@@ -201 +178 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> The CIS scan status filter.
+>>> The CIS date filter.
@@ -203 +180 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> comparison -> (string)
+>>> earliestScanStartTime -> (timestamp)
@@ -205 +182 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The filter comparison value.
+>>>> The CIS date filter’s earliest scan start time.
@@ -207 +184 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> value -> (string)
+>>> latestScanStartTime -> (timestamp)
@@ -209 +186 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The filter value.
+>>>> The CIS date filter’s latest scan start time.
@@ -211 +188 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> scheduledByFilters -> (list)
+> scanConfigurationArnFilters -> (list)
@@ -213 +190 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of scheduled by filters.
+>> The list of scan configuration ARN filters.
@@ -227 +204 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> targetAccountIdFilters -> (list)
+> scanArnFilters -> (list)
@@ -229 +206 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of target account ID filters.
+>> The list of scan ARN filters.
@@ -243 +220 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> targetResourceIdFilters -> (list)
+> scheduledByFilters -> (list)
@@ -245 +222 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of target resource ID filters.
+>> The list of scheduled by filters.
@@ -259 +236 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> targetResourceTagFilters -> (list)
+> failedChecksFilters -> (list)
@@ -261 +238 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The list of target resource tag filters.
+>> The list of failed checks filters.
@@ -265 +242 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> The tag filter.
+>>> The CIS number filter.
@@ -267 +244 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> comparison -> (string)
+>>> upperInclusive -> (integer)
@@ -269 +246 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The tag filter comparison value.
+>>>> The CIS number filter’s upper inclusive.
@@ -271 +248 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> key -> (string)
+>>> lowerInclusive -> (integer)
@@ -273 +250,13 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The tag filter key.
+>>>> The CIS number filter’s lower inclusive.
+> 
+> targetAccountIdFilters -> (list)
+>
+>> The list of target account ID filters.
+>> 
+>> (structure)
+>>
+>>> The CIS string filter.
+>>> 
+>>> comparison -> (string)
+>>>
+>>>> The comparison value of the CIS string filter.
@@ -277 +266 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The tag filter value.
+>>>> The value of the CIS string filter.
@@ -282 +271 @@ Shorthand Syntax:
-    failedChecksFilters=[{lowerInclusive=integer,upperInclusive=integer},{lowerInclusive=integer,upperInclusive=integer}],scanArnFilters=[{comparison=string,value=string},{comparison=string,value=string}],scanAtFilters=[{earliestScanStartTime=timestamp,latestScanStartTime=timestamp},{earliestScanStartTime=timestamp,latestScanStartTime=timestamp}],scanConfigurationArnFilters=[{comparison=string,value=string},{comparison=string,value=string}],scanNameFilters=[{comparison=string,value=string},{comparison=string,value=string}],scanStatusFilters=[{comparison=string,value=string},{comparison=string,value=string}],scheduledByFilters=[{comparison=string,value=string},{comparison=string,value=string}],targetAccountIdFilters=[{comparison=string,value=string},{comparison=string,value=string}],targetResourceIdFilters=[{comparison=string,value=string},{comparison=string,value=string}],targetResourceTagFilters=[{comparison=string,key=string,value=string},{comparison=string,key=string,value=string}]
+    scanNameFilters=[{comparison=string,value=string},{comparison=string,value=string}],targetResourceTagFilters=[{comparison=string,key=string,value=string},{comparison=string,key=string,value=string}],targetResourceIdFilters=[{comparison=string,value=string},{comparison=string,value=string}],scanStatusFilters=[{comparison=string,value=string},{comparison=string,value=string}],scanAtFilters=[{earliestScanStartTime=timestamp,latestScanStartTime=timestamp},{earliestScanStartTime=timestamp,latestScanStartTime=timestamp}],scanConfigurationArnFilters=[{comparison=string,value=string},{comparison=string,value=string}],scanArnFilters=[{comparison=string,value=string},{comparison=string,value=string}],scheduledByFilters=[{comparison=string,value=string},{comparison=string,value=string}],failedChecksFilters=[{upperInclusive=integer,lowerInclusive=integer},{upperInclusive=integer,lowerInclusive=integer}],targetAccountIdFilters=[{comparison=string,value=string},{comparison=string,value=string}]
@@ -289,8 +278 @@ JSON Syntax:
-      "failedChecksFilters": [
-        {
-          "lowerInclusive": integer,
-          "upperInclusive": integer
-        }
-        ...
-      ],
-      "scanArnFilters": [
+      "scanNameFilters": [
@@ -303,8 +285 @@ JSON Syntax:
-      "scanAtFilters": [
-        {
-          "earliestScanStartTime": timestamp,
-          "latestScanStartTime": timestamp
-        }
-        ...
-      ],
-      "scanConfigurationArnFilters": [
+      "targetResourceTagFilters": [
@@ -312 +287,2 @@ JSON Syntax:
-          "comparison": "EQUALS"|"PREFIX"|"NOT_EQUALS",
+          "comparison": "EQUALS",
+          "key": "string",
@@ -317 +293 @@ JSON Syntax:
-      "scanNameFilters": [
+      "targetResourceIdFilters": [
@@ -331 +307,8 @@ JSON Syntax:
-      "scheduledByFilters": [
+      "scanAtFilters": [
+        {