AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/inspector2/list-findings.md

Summary

Updated filter parameters and descriptions for findings, including renaming parameters (e.g., awsAccountId → findingArn), adding new filters (findingStatus, severity, exploitAvailable), and restructuring time range filters.

Security assessment

Changes improve documentation of security-related filtering capabilities but do not address a specific vulnerability. Added parameters like 'exploitAvailable' and 'severity' enhance security feature documentation for vulnerability management.

Diff

diff --git a/cli/latest/reference/inspector2/list-findings.md b/cli/latest/reference/inspector2/list-findings.md
index 5e954ef9a..d05c405de 100644
--- a//cli/latest/reference/inspector2/list-findings.md
+++ b//cli/latest/reference/inspector2/list-findings.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -102 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> awsAccountId -> (list)
+> findingArn -> (list)
@@ -104 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the Amazon Web Services account IDs used to filter findings.
+>> Details on the finding ARNs used to filter findings.
@@ -118 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeRepositoryProjectName -> (list)
+> awsAccountId -> (list)
@@ -120 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria for findings based on the project name in a code repository.
+>> Details of the Amazon Web Services account IDs used to filter findings.
@@ -134 +134 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeRepositoryProviderType -> (list)
+> findingType -> (list)
@@ -136 +136 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria for findings based on the repository provider type (such as GitHub, GitLab, etc.).
+>> Details on the finding types used to filter findings.
@@ -150 +150 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeVulnerabilityDetectorName -> (list)
+> severity -> (list)
@@ -152 +152 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.
+>> Details on the severity used to filter findings.
@@ -166 +166 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeVulnerabilityDetectorTags -> (list)
+> firstObservedAt -> (list)
@@ -168 +168 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see [Java tags](https://docs.aws.amazon.com/codeguru/detector-library/java/tags/) , or [Python tags](https://docs.aws.amazon.com/codeguru/detector-library/python/tags/) .
+>> Details on the date and time a finding was first seen used to filter findings.
@@ -172 +172 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> An object that describes the details of a string filter.
+>>> Contains details on the time range used to filter findings.
@@ -174 +174 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> comparison -> (string)
+>>> startInclusive -> (timestamp)
@@ -176 +176 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The operator to use when comparing values in the filter.
+>>>> A timestamp representing the start of the time period filtered on.
@@ -178 +178 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> value -> (string)
+>>> endInclusive -> (timestamp)
@@ -180 +180 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The value to filter on.
+>>>> A timestamp representing the end of the time period filtered on.
@@ -182 +182 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> codeVulnerabilityFilePath -> (list)
+> lastObservedAt -> (list)
@@ -184 +184 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.
+>> Details on the date and time a finding was last seen used to filter findings.
@@ -188 +188 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> An object that describes the details of a string filter.
+>>> Contains details on the time range used to filter findings.
@@ -190 +190 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> comparison -> (string)
+>>> startInclusive -> (timestamp)
@@ -192 +192 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The operator to use when comparing values in the filter.
+>>>> A timestamp representing the start of the time period filtered on.
@@ -194 +194 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> value -> (string)
+>>> endInclusive -> (timestamp)
@@ -196 +196 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The value to filter on.
+>>>> A timestamp representing the end of the time period filtered on.
@@ -198 +198 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> componentId -> (list)
+> updatedAt -> (list)
@@ -200 +200,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the component IDs used to filter findings.
+>> Details on the date and time a finding was last updated at used to filter findings.
+>> 
+>> (structure)
+>>
+>>> Contains details on the time range used to filter findings.
+>>> 
+>>> startInclusive -> (timestamp)
+>>>
+>>>> A timestamp representing the start of the time period filtered on.
+>>> 
+>>> endInclusive -> (timestamp)
+>>>
+>>>> A timestamp representing the end of the time period filtered on.
+> 
+> findingStatus -> (list)
+>
+>> Details on the finding status types used to filter findings.
@@ -214 +230 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> componentType -> (list)
+> title -> (list)
@@ -216 +232 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the component types used to filter findings.
+>> Details on the finding title used to filter findings.
@@ -230 +246 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ec2InstanceImageId -> (list)
+> inspectorScore -> (list)
@@ -232 +248,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the Amazon EC2 instance image IDs used to filter findings.
+>> The Amazon Inspector score to filter on.
+>> 
+>> (structure)
+>>
+>>> An object that describes the details of a number filter.
+>>> 
+>>> upperInclusive -> (double)
+>>>
+>>>> The highest number to be included in the filter.
+>>> 
+>>> lowerInclusive -> (double)
+>>>
+>>>> The lowest number to be included in the filter.
+> 
+> resourceType -> (list)
+>
+>> Details on the resource types used to filter findings.
@@ -246 +278 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ec2InstanceSubnetId -> (list)
+> resourceId -> (list)
@@ -248 +280 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the Amazon EC2 instance subnet IDs used to filter findings.
+>> Details on the resource IDs used to filter findings.
@@ -262 +294 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ec2InstanceVpcId -> (list)
+> resourceTags -> (list)
@@ -264 +296 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the Amazon EC2 instance VPC IDs used to filter findings.
+>> Details on the resource tags used to filter findings.
@@ -268 +300 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> An object that describes the details of a string filter.
+>>> An object that describes details of a map filter.
@@ -273,0 +306,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
+>>> key -> (string)
+>>>
+>>>> The tag key used in the filter.
+>>> 
@@ -276 +312 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The value to filter on.
+>>>> The tag value used in the filter.
@@ -278 +314 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ecrImageArchitecture -> (list)
+> ec2InstanceImageId -> (list)
@@ -280 +316 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the Amazon ECR image architecture types used to filter findings.
+>> Details of the Amazon EC2 instance image IDs used to filter findings.
@@ -294 +330 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ecrImageHash -> (list)
+> ec2InstanceVpcId -> (list)
@@ -296 +332 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details of the Amazon ECR image hashes used to filter findings.
+>> Details of the Amazon EC2 instance VPC IDs used to filter findings.
@@ -310 +346 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ecrImageInUseCount -> (list)
+> ec2InstanceSubnetId -> (list)
@@ -312 +348 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria indicating when details for an Amazon ECR image include when an Amazon ECR image is in use.
+>> Details of the Amazon EC2 instance subnet IDs used to filter findings.
@@ -316 +352 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> An object that describes the details of a number filter.
+>>> An object that describes the details of a string filter.
@@ -318 +354 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> lowerInclusive -> (double)
+>>> comparison -> (string)
@@ -320 +356 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The lowest number to be included in the filter.
+>>>> The operator to use when comparing values in the filter.
@@ -322 +358 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> upperInclusive -> (double)
+>>> value -> (string)
@@ -324 +360 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>>> The highest number to be included in the filter.
+>>>> The value to filter on.
@@ -326 +362 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ecrImageLastInUseAt -> (list)
+> ecrImagePushedAt -> (list)
@@ -328 +364 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Filter criteria indicating when an Amazon ECR image was last used in an Amazon ECS cluster task or Amazon EKS cluster pod.
+>> Details on the Amazon ECR image push date and time used to filter findings.
@@ -334,4 +369,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->>> endInclusive -> (timestamp)
->>>
->>>> A timestamp representing the end of the time period filtered on.
->>> 
@@ -340,0 +373,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
+>>> 
+>>> endInclusive -> (timestamp)
+>>>
+>>>> A timestamp representing the end of the time period filtered on.
@@ -342 +378 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
-> ecrImagePushedAt -> (list)
+> ecrImageArchitecture -> (list)
@@ -344 +380 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec
->> Details on the Amazon ECR image push date and time used to filter findings.