AWS cli documentation change
Summary
Updated AWS CLI command reference for Inspector2 list-coverage, including parameter renames, filter criteria changes, and expanded scan status documentation. Changes include replacing 'accountId' with 'scanStatusCode', adding scan mode filters, restructuring coverage filters for EC2/Lambda/ECR resources, and adding detailed scan status error explanations.
Security assessment
The changes improve documentation of security scanning capabilities (e.g., scan status codes, error reasons, and resource filtering) but do not address a specific disclosed vulnerability. Added details about scan failure reasons like 'ACCESS_DENIED' and 'UNMANAGED_EC2_INSTANCE' help users understand security configurations without indicating a patched issue.
Diff
diff --git a/cli/latest/reference/inspector2/list-coverage.md b/cli/latest/reference/inspector2/list-coverage.md index 37af7048a..7adc6f241 100644 --- a//cli/latest/reference/inspector2/list-coverage.md +++ b//cli/latest/reference/inspector2/list-coverage.md @@ -15 +15 @@ - * [AWS CLI 2.27.63 Command Reference](../../index.html) » + * [AWS CLI 2.28.0 Command Reference](../../index.html) » @@ -102 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> accountId -> (list) +> scanStatusCode -> (list) @@ -104 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> An array of Amazon Web Services account IDs to return coverage statistics for. +>> The scan status code to filter on. Valid values are: `ValidationException` , `InternalServerException` , `ResourceNotFoundException` , `BadRequestException` , and `ThrottlingException` . @@ -118 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeRepositoryProjectName -> (list) +> scanStatusReason -> (list) @@ -120 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for code repositories based on project name. +>> The scan status reason to filter on. @@ -134 +134 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeRepositoryProviderType -> (list) +> accountId -> (list) @@ -136 +136 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for code repositories based on provider type (such as GitHub, GitLab, etc.). +>> An array of Amazon Web Services account IDs to return coverage statistics for. @@ -150 +150 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeRepositoryProviderTypeVisibility -> (list) +> resourceId -> (list) @@ -152 +152 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for code repositories based on visibility setting (public or private). +>> An array of Amazon Web Services resource IDs to return coverage statistics for. @@ -166 +166 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ec2InstanceTags -> (list) +> resourceType -> (list) @@ -168 +168 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The Amazon EC2 instance tags to filter on. +>> An array of Amazon Web Services resource types to return coverage statistics for. The values can be `AWS_EC2_INSTANCE` , `AWS_LAMBDA_FUNCTION` , `AWS_ECR_CONTAINER_IMAGE` , `AWS_ECR_REPOSITORY` or `AWS_ACCOUNT` . @@ -172 +172 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> Contains details of a coverage map filter. +>>> Contains details of a coverage string filter. @@ -176,5 +176 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The operator to compare coverage on. ->>> ->>> key -> (string) ->>> ->>>> The tag key associated with the coverage map filter. +>>>> The operator to compare strings on. @@ -184,33 +180 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The tag value associated with the coverage map filter. -> -> ecrImageInUseCount -> (list) -> ->> The number of Amazon ECR images in use. ->> ->> (structure) ->> ->>> The coverage number to be used in the filter. ->>> ->>> lowerInclusive -> (long) ->>> ->>>> The lower inclusive for the coverage number. ->>> ->>> upperInclusive -> (long) ->>> ->>>> The upper inclusive for the coverage number.> -> -> ecrImageLastInUseAt -> (list) -> ->> The Amazon ECR image that was last in use. ->> ->> (structure) ->> ->>> Contains details of a coverage date filter. ->>> ->>> endInclusive -> (timestamp) ->>> ->>>> A timestamp representing the end of the time period to filter results by. ->>> ->>> startInclusive -> (timestamp) ->>> ->>>> A timestamp representing the start of the time period to filter results by. +>>>> The value to compare strings on. @@ -218 +182 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageTags -> (list) +> scanType -> (list) @@ -220 +184 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The Amazon ECR image tags to filter on. +>> An array of Amazon Inspector scan types to return coverage statistics for. @@ -250 +214 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> imagePulledAt -> (list) +> ecrImageTags -> (list) @@ -252 +216 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The date an image was last pulled at. +>> The Amazon ECR image tags to filter on. @@ -256 +220 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> Contains details of a coverage date filter. +>>> Contains details of a coverage string filter. @@ -258 +222 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> endInclusive -> (timestamp) +>>> comparison -> (string) @@ -260 +224 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> A timestamp representing the end of the time period to filter results by. +>>>> The operator to compare strings on. @@ -262 +226 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> startInclusive -> (timestamp) +>>> value -> (string) @@ -264 +228 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> A timestamp representing the start of the time period to filter results by. +>>>> The value to compare strings on. @@ -266 +230 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> lambdaFunctionName -> (list) +> ec2InstanceTags -> (list) @@ -268 +232 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Returns coverage statistics for Amazon Web Services Lambda functions filtered by function names. +>> The Amazon EC2 instance tags to filter on. @@ -272 +236 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> Contains details of a coverage string filter. +>>> Contains details of a coverage map filter. @@ -276 +240,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The operator to compare strings on. +>>>> The operator to compare coverage on. +>>> +>>> key -> (string) +>>> +>>>> The tag key associated with the coverage map filter. @@ -280 +248 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to compare strings on. +>>>> The tag value associated with the coverage map filter. @@ -282 +250 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> lambdaFunctionRuntime -> (list) +> lambdaFunctionName -> (list) @@ -284 +252 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Returns coverage statistics for Amazon Web Services Lambda functions filtered by runtime. +>> Returns coverage statistics for Amazon Web Services Lambda functions filtered by function names. @@ -317,0 +286,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec +> lambdaFunctionRuntime -> (list) +> +>> Returns coverage statistics for Amazon Web Services Lambda functions filtered by runtime. +>> +>> (structure) +>> +>>> Contains details of a coverage string filter. +>>> +>>> comparison -> (string) +>>> +>>>> The operator to compare strings on. +>>> +>>> value -> (string) +>>> +>>>> The value to compare strings on. +> @@ -326,4 +309,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> endInclusive -> (timestamp) ->>> ->>>> A timestamp representing the end of the time period to filter results by. ->>> @@ -332,0 +313,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec +>>> +>>> endInclusive -> (timestamp) +>>> +>>>> A timestamp representing the end of the time period to filter results by. @@ -334 +318 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> lastScannedCommitId -> (list) +> scanMode -> (list) @@ -336 +320 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for code repositories based on the ID of the last scanned commit. +>> The filter to search for Amazon EC2 instance coverage by scan mode. Valid values are `EC2_SSM_AGENT_BASED` and `EC2_AGENTLESS` . @@ -350 +334 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> resourceId -> (list) +> imagePulledAt -> (list) @@ -352 +336 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> An array of Amazon Web Services resource IDs to return coverage statistics for. +>> The date an image was last pulled at. @@ -356 +340 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> Contains details of a coverage string filter. +>>> Contains details of a coverage date filter. @@ -358 +342 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> comparison -> (string) +>>> startInclusive -> (timestamp) @@ -360 +344 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The operator to compare strings on. +>>>> A timestamp representing the start of the time period to filter results by. @@ -362 +346 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> value -> (string) +>>> endInclusive -> (timestamp) @@ -364 +348 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to compare strings on. +>>>> A timestamp representing the end of the time period to filter results by. @@ -366 +350 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> resourceType -> (list) +> ecrImageLastInUseAt -> (list) @@ -368 +352 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> An array of Amazon Web Services resource types to return coverage statistics for. The values can be `AWS_EC2_INSTANCE` , `AWS_LAMBDA_FUNCTION` , `AWS_ECR_CONTAINER_IMAGE` , `AWS_ECR_REPOSITORY` or `AWS_ACCOUNT` . +>> The Amazon ECR image that was last in use. @@ -372 +356 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> Contains details of a coverage string filter. +>>> Contains details of a coverage date filter. @@ -374 +358 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> comparison -> (string) +>>> startInclusive -> (timestamp)