AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/inspector2/list-filters.md

Summary

Updated AWS CLI version reference from 2.27.63 to 2.28.0 and restructured filter parameters with modified descriptions, field reordering, and added documentation for security-related filtering capabilities

Security assessment

Changes include enhanced documentation for security findings filters (e.g., vulnerability detection, severity levels, exploit availability) but no explicit mention of patching vulnerabilities or addressing security incidents. The 'SUPPRESS' action documentation improves security controls but was already present.

Diff

diff --git a/cli/latest/reference/inspector2/list-filters.md b/cli/latest/reference/inspector2/list-filters.md
index 611b2540c..6d52c0f1e 100644
--- a//cli/latest/reference/inspector2/list-filters.md
+++ b//cli/latest/reference/inspector2/list-filters.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -70 +69,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-    [--action <value>]
@@ -71,0 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
+    [--action <value>]
@@ -99,11 +98,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-`--action` (string)
-
-> The action the filter applies to matched findings.
-> 
-> Possible values:
-> 
->   * `NONE`
->   * `SUPPRESS`
-> 
-
-
@@ -121,0 +111,11 @@ Syntax:
+`--action` (string)
+
+> The action the filter applies to matched findings.
+> 
+> Possible values:
+> 
+>   * `NONE`
+>   * `SUPPRESS`
+> 
+
+
@@ -310,4 +309,0 @@ filters -> (list)
->> action -> (string)
->>
->>> The action that is to be applied to the findings that match the filter.
->> 
@@ -318 +314 @@ filters -> (list)
->> createdAt -> (timestamp)
+>> ownerId -> (string)
@@ -320 +316,5 @@ filters -> (list)
->>> The date and time this filter was created at.
+>>> The Amazon Web Services account ID of the account that created the filter.
+>> 
+>> name -> (string)
+>>
+>>> The name of the filter.
@@ -326 +326 @@ filters -> (list)
->>> awsAccountId -> (list)
+>>> findingArn -> (list)
@@ -328 +328 @@ filters -> (list)
->>>> Details of the Amazon Web Services account IDs used to filter findings.
+>>>> Details on the finding ARNs used to filter findings.
@@ -342 +342 @@ filters -> (list)
->>> codeRepositoryProjectName -> (list)
+>>> awsAccountId -> (list)
@@ -344 +344 @@ filters -> (list)
->>>> Filter criteria for findings based on the project name in a code repository.
+>>>> Details of the Amazon Web Services account IDs used to filter findings.
@@ -358 +358 @@ filters -> (list)
->>> codeRepositoryProviderType -> (list)
+>>> findingType -> (list)
@@ -360 +360 @@ filters -> (list)
->>>> Filter criteria for findings based on the repository provider type (such as GitHub, GitLab, etc.).
+>>>> Details on the finding types used to filter findings.
@@ -374 +374 @@ filters -> (list)
->>> codeVulnerabilityDetectorName -> (list)
+>>> severity -> (list)
@@ -376 +376 @@ filters -> (list)
->>>> The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.
+>>>> Details on the severity used to filter findings.
@@ -390 +390 @@ filters -> (list)
->>> codeVulnerabilityDetectorTags -> (list)
+>>> firstObservedAt -> (list)
@@ -392 +392 @@ filters -> (list)
->>>> The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see [Java tags](https://docs.aws.amazon.com/codeguru/detector-library/java/tags/) , or [Python tags](https://docs.aws.amazon.com/codeguru/detector-library/python/tags/) .
+>>>> Details on the date and time a finding was first seen used to filter findings.
@@ -396 +396 @@ filters -> (list)
->>>>> An object that describes the details of a string filter.
+>>>>> Contains details on the time range used to filter findings.
@@ -398 +398 @@ filters -> (list)
->>>>> comparison -> (string)
+>>>>> startInclusive -> (timestamp)
@@ -400 +400 @@ filters -> (list)
->>>>>> The operator to use when comparing values in the filter.
+>>>>>> A timestamp representing the start of the time period filtered on.
@@ -402 +402 @@ filters -> (list)
->>>>> value -> (string)
+>>>>> endInclusive -> (timestamp)
@@ -404 +404 @@ filters -> (list)
->>>>>> The value to filter on.
+>>>>>> A timestamp representing the end of the time period filtered on.
@@ -406 +406 @@ filters -> (list)
->>> codeVulnerabilityFilePath -> (list)
+>>> lastObservedAt -> (list)
@@ -408 +408 @@ filters -> (list)
->>>> The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.
+>>>> Details on the date and time a finding was last seen used to filter findings.
@@ -412 +412 @@ filters -> (list)
->>>>> An object that describes the details of a string filter.
+>>>>> Contains details on the time range used to filter findings.
@@ -414 +414 @@ filters -> (list)
->>>>> comparison -> (string)
+>>>>> startInclusive -> (timestamp)
@@ -416 +416 @@ filters -> (list)
->>>>>> The operator to use when comparing values in the filter.
+>>>>>> A timestamp representing the start of the time period filtered on.
@@ -418 +418 @@ filters -> (list)
->>>>> value -> (string)
+>>>>> endInclusive -> (timestamp)
@@ -420 +420 @@ filters -> (list)
->>>>>> The value to filter on.
+>>>>>> A timestamp representing the end of the time period filtered on.
@@ -422 +422 @@ filters -> (list)
->>> componentId -> (list)
+>>> updatedAt -> (list)
@@ -424 +424,17 @@ filters -> (list)
->>>> Details of the component IDs used to filter findings.
+>>>> Details on the date and time a finding was last updated at used to filter findings.
+>>>> 
+>>>> (structure)
+>>>>
+>>>>> Contains details on the time range used to filter findings.
+>>>>> 
+>>>>> startInclusive -> (timestamp)
+>>>>>
+>>>>>> A timestamp representing the start of the time period filtered on.
+>>>>> 
+>>>>> endInclusive -> (timestamp)
+>>>>>
+>>>>>> A timestamp representing the end of the time period filtered on.
+>>> 
+>>> findingStatus -> (list)
+>>>
+>>>> Details on the finding status types used to filter findings.
@@ -438 +454 @@ filters -> (list)
->>> componentType -> (list)
+>>> title -> (list)
@@ -440 +456 @@ filters -> (list)
->>>> Details of the component types used to filter findings.
+>>>> Details on the finding title used to filter findings.
@@ -454 +470 @@ filters -> (list)
->>> ec2InstanceImageId -> (list)
+>>> inspectorScore -> (list)
@@ -456 +472,17 @@ filters -> (list)
->>>> Details of the Amazon EC2 instance image IDs used to filter findings.
+>>>> The Amazon Inspector score to filter on.
+>>>> 
+>>>> (structure)
+>>>>
+>>>>> An object that describes the details of a number filter.
+>>>>> 
+>>>>> upperInclusive -> (double)
+>>>>>
+>>>>>> The highest number to be included in the filter.
+>>>>> 
+>>>>> lowerInclusive -> (double)
+>>>>>
+>>>>>> The lowest number to be included in the filter.
+>>> 
+>>> resourceType -> (list)
+>>>
+>>>> Details on the resource types used to filter findings.
@@ -470 +502 @@ filters -> (list)
->>> ec2InstanceSubnetId -> (list)
+>>> resourceId -> (list)
@@ -472 +504 @@ filters -> (list)
->>>> Details of the Amazon EC2 instance subnet IDs used to filter findings.
+>>>> Details on the resource IDs used to filter findings.
@@ -486 +518 @@ filters -> (list)
->>> ec2InstanceVpcId -> (list)
+>>> resourceTags -> (list)
@@ -488 +520 @@ filters -> (list)
->>>> Details of the Amazon EC2 instance VPC IDs used to filter findings.
+>>>> Details on the resource tags used to filter findings.
@@ -492 +524 @@ filters -> (list)
->>>>> An object that describes the details of a string filter.
+>>>>> An object that describes details of a map filter.
@@ -497,0 +530,4 @@ filters -> (list)
+>>>>> key -> (string)
+>>>>>
+>>>>>> The tag key used in the filter.
+>>>>> 
@@ -500 +536 @@ filters -> (list)
->>>>>> The value to filter on.
+>>>>>> The tag value used in the filter.
@@ -502 +538 @@ filters -> (list)
->>> ecrImageArchitecture -> (list)
+>>> ec2InstanceImageId -> (list)
@@ -504 +540 @@ filters -> (list)
->>>> Details of the Amazon ECR image architecture types used to filter findings.
+>>>> Details of the Amazon EC2 instance image IDs used to filter findings.
@@ -518 +554 @@ filters -> (list)
->>> ecrImageHash -> (list)
+>>> ec2InstanceVpcId -> (list)
@@ -520 +556 @@ filters -> (list)
->>>> Details of the Amazon ECR image hashes used to filter findings.