AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/inspector2/list-coverage-statistics.md

Summary

Updated AWS CLI version reference, reorganized filter parameters, added scan status code/reason filters, introduced scanMode parameter for EC2 instance coverage, and adjusted filter structures/types

Security assessment

The change introduces 'scanMode' parameter documentation with values including EC2_AGENTLESS, which represents a security-related scanning method. While this adds documentation about security features, there's no explicit evidence of addressing a specific vulnerability or security incident.

Diff

diff --git a/cli/latest/reference/inspector2/list-coverage-statistics.md b/cli/latest/reference/inspector2/list-coverage-statistics.md
index b101100f0..77085c4d4 100644
--- a//cli/latest/reference/inspector2/list-coverage-statistics.md
+++ b//cli/latest/reference/inspector2/list-coverage-statistics.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -102 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> accountId -> (list)
+> scanStatusCode -> (list)
@@ -104 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> An array of Amazon Web Services account IDs to return coverage statistics for.
+>> The scan status code to filter on. Valid values are: `ValidationException` , `InternalServerException` , `ResourceNotFoundException` , `BadRequestException` , and `ThrottlingException` .
@@ -118 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeRepositoryProjectName -> (list)
+> scanStatusReason -> (list)
@@ -120 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria for code repositories based on project name.
+>> The scan status reason to filter on.
@@ -134 +134 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeRepositoryProviderType -> (list)
+> accountId -> (list)
@@ -136 +136 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria for code repositories based on provider type (such as GitHub, GitLab, etc.).
+>> An array of Amazon Web Services account IDs to return coverage statistics for.
@@ -150 +150 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeRepositoryProviderTypeVisibility -> (list)
+> resourceId -> (list)
@@ -152 +152 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria for code repositories based on visibility setting (public or private).
+>> An array of Amazon Web Services resource IDs to return coverage statistics for.
@@ -166 +166 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ec2InstanceTags -> (list)
+> resourceType -> (list)
@@ -168 +168 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The Amazon EC2 instance tags to filter on.
+>> An array of Amazon Web Services resource types to return coverage statistics for. The values can be `AWS_EC2_INSTANCE` , `AWS_LAMBDA_FUNCTION` , `AWS_ECR_CONTAINER_IMAGE` , `AWS_ECR_REPOSITORY` or `AWS_ACCOUNT` .
@@ -172 +172 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> Contains details of a coverage map filter.
+>>> Contains details of a coverage string filter.
@@ -176,5 +176 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The operator to compare coverage on.
->>> 
->>> key -> (string)
->>>
->>>> The tag key associated with the coverage map filter.
+>>>> The operator to compare strings on.
@@ -184,33 +180 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The tag value associated with the coverage map filter.
-> 
-> ecrImageInUseCount -> (list)
->
->> The number of Amazon ECR images in use.
->> 
->> (structure)
->>
->>> The coverage number to be used in the filter.
->>> 
->>> lowerInclusive -> (long)
->>>
->>>> The lower inclusive for the coverage number.
->>> 
->>> upperInclusive -> (long)
->>>
->>>> The upper inclusive for the coverage number.>
-> 
-> ecrImageLastInUseAt -> (list)
->
->> The Amazon ECR image that was last in use.
->> 
->> (structure)
->>
->>> Contains details of a coverage date filter.
->>> 
->>> endInclusive -> (timestamp)
->>>
->>>> A timestamp representing the end of the time period to filter results by.
->>> 
->>> startInclusive -> (timestamp)
->>>
->>>> A timestamp representing the start of the time period to filter results by.
+>>>> The value to compare strings on.
@@ -218 +182 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ecrImageTags -> (list)
+> scanType -> (list)
@@ -220 +184 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The Amazon ECR image tags to filter on.
+>> An array of Amazon Inspector scan types to return coverage statistics for.
@@ -250 +214 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> imagePulledAt -> (list)
+> ecrImageTags -> (list)
@@ -252 +216 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The date an image was last pulled at.
+>> The Amazon ECR image tags to filter on.
@@ -256 +220 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> Contains details of a coverage date filter.
+>>> Contains details of a coverage string filter.
@@ -258 +222 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> endInclusive -> (timestamp)
+>>> comparison -> (string)
@@ -260 +224 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> A timestamp representing the end of the time period to filter results by.
+>>>> The operator to compare strings on.
@@ -262 +226 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> startInclusive -> (timestamp)
+>>> value -> (string)
@@ -264 +228 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> A timestamp representing the start of the time period to filter results by.
+>>>> The value to compare strings on.
@@ -266 +230 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> lambdaFunctionName -> (list)
+> ec2InstanceTags -> (list)
@@ -268 +232 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Returns coverage statistics for Amazon Web Services Lambda functions filtered by function names.
+>> The Amazon EC2 instance tags to filter on.
@@ -272 +236 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> Contains details of a coverage string filter.
+>>> Contains details of a coverage map filter.
@@ -276 +240,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The operator to compare strings on.
+>>>> The operator to compare coverage on.
+>>> 
+>>> key -> (string)
+>>>
+>>>> The tag key associated with the coverage map filter.
@@ -280 +248 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The value to compare strings on.
+>>>> The tag value associated with the coverage map filter.
@@ -282 +250 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> lambdaFunctionRuntime -> (list)
+> lambdaFunctionName -> (list)
@@ -284 +252 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Returns coverage statistics for Amazon Web Services Lambda functions filtered by runtime.
+>> Returns coverage statistics for Amazon Web Services Lambda functions filtered by function names.
@@ -317,0 +286,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
+> lambdaFunctionRuntime -> (list)
+>
+>> Returns coverage statistics for Amazon Web Services Lambda functions filtered by runtime.
+>> 
+>> (structure)
+>>
+>>> Contains details of a coverage string filter.
+>>> 
+>>> comparison -> (string)
+>>>
+>>>> The operator to compare strings on.
+>>> 
+>>> value -> (string)
+>>>
+>>>> The value to compare strings on.
+> 
@@ -326,4 +309,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> endInclusive -> (timestamp)
->>>
->>>> A timestamp representing the end of the time period to filter results by.
->>> 
@@ -332,0 +313,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
+>>> 
+>>> endInclusive -> (timestamp)
+>>>
+>>>> A timestamp representing the end of the time period to filter results by.
@@ -334 +318 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> lastScannedCommitId -> (list)
+> scanMode -> (list)
@@ -336 +320 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria for code repositories based on the ID of the last scanned commit.
+>> The filter to search for Amazon EC2 instance coverage by scan mode. Valid values are `EC2_SSM_AGENT_BASED` and `EC2_AGENTLESS` .
@@ -350 +334 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> resourceId -> (list)
+> imagePulledAt -> (list)
@@ -352 +336 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> An array of Amazon Web Services resource IDs to return coverage statistics for.
+>> The date an image was last pulled at.
@@ -356 +340 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> Contains details of a coverage string filter.
+>>> Contains details of a coverage date filter.
@@ -358 +342 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> comparison -> (string)
+>>> startInclusive -> (timestamp)
@@ -360 +344 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The operator to compare strings on.
+>>>> A timestamp representing the start of the time period to filter results by.
@@ -362 +346 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> value -> (string)
+>>> endInclusive -> (timestamp)
@@ -364 +348 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The value to compare strings on.
+>>>> A timestamp representing the end of the time period to filter results by.
@@ -366 +350 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> resourceType -> (list)
+> ecrImageLastInUseAt -> (list)
@@ -368 +352 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> An array of Amazon Web Services resource types to return coverage statistics for. The values can be `AWS_EC2_INSTANCE` , `AWS_LAMBDA_FUNCTION` , `AWS_ECR_CONTAINER_IMAGE` , `AWS_ECR_REPOSITORY` or `AWS_ACCOUNT` .
+>> The Amazon ECR image that was last in use.
@@ -372 +356 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> Contains details of a coverage string filter.
+>>> Contains details of a coverage date filter.
@@ -374 +358 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> comparison -> (string)
+>>> startInclusive -> (timestamp)