AWS cli documentation change
Summary
Updated filter parameters and documentation structure for AWS Inspector findings filters. Added new filter criteria including inspectorScore, resourceTags, vulnerabilityId, and time-based observation fields. Removed deprecated code vulnerability-related filters and restructured parameter documentation.
Security assessment
Changes enhance documentation for security-focused filtering capabilities but do not address a specific disclosed vulnerability. Added parameters like 'inspectorScore' and 'vulnerabilityId' improve security posture awareness but are feature enhancements rather than vulnerability fixes.
Diff
diff --git a/cli/latest/reference/inspector2/update-filter.md b/cli/latest/reference/inspector2/update-filter.md index d4276a2ea..a4120866e 100644 --- a//cli/latest/reference/inspector2/update-filter.md +++ b//cli/latest/reference/inspector2/update-filter.md @@ -15 +15 @@ - * [AWS CLI 2.27.63 Command Reference](../../index.html) » + * [AWS CLI 2.28.0 Command Reference](../../index.html) » @@ -70 +69,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec - --filter-arn <value> @@ -72,0 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec + --filter-arn <value> @@ -113,4 +112,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -`--filter-arn` (string) - -> The Amazon Resource Number (ARN) of the filter to update. - @@ -121 +117 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> awsAccountId -> (list) +> findingArn -> (list) @@ -123 +119 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon Web Services account IDs used to filter findings. +>> Details on the finding ARNs used to filter findings. @@ -137 +133 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeRepositoryProjectName -> (list) +> awsAccountId -> (list) @@ -139 +135 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for findings based on the project name in a code repository. +>> Details of the Amazon Web Services account IDs used to filter findings. @@ -153 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeRepositoryProviderType -> (list) +> findingType -> (list) @@ -155 +151 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria for findings based on the repository provider type (such as GitHub, GitLab, etc.). +>> Details on the finding types used to filter findings. @@ -169 +165 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeVulnerabilityDetectorName -> (list) +> severity -> (list) @@ -171 +167 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings. +>> Details on the severity used to filter findings. @@ -185 +181 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeVulnerabilityDetectorTags -> (list) +> firstObservedAt -> (list) @@ -187 +183 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see [Java tags](https://docs.aws.amazon.com/codeguru/detector-library/java/tags/) , or [Python tags](https://docs.aws.amazon.com/codeguru/detector-library/python/tags/) . +>> Details on the date and time a finding was first seen used to filter findings. @@ -191 +187 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a string filter. +>>> Contains details on the time range used to filter findings. @@ -193 +189 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> comparison -> (string) +>>> startInclusive -> (timestamp) @@ -195 +191 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The operator to use when comparing values in the filter. +>>>> A timestamp representing the start of the time period filtered on. @@ -197 +193 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> value -> (string) +>>> endInclusive -> (timestamp) @@ -199 +195 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to filter on. +>>>> A timestamp representing the end of the time period filtered on. @@ -201 +197 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> codeVulnerabilityFilePath -> (list) +> lastObservedAt -> (list) @@ -203 +199 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> The file path to the file in a Lambda function that contains a code vulnerability used to filter findings. +>> Details on the date and time a finding was last seen used to filter findings. @@ -207 +203 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a string filter. +>>> Contains details on the time range used to filter findings. @@ -209 +205 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> comparison -> (string) +>>> startInclusive -> (timestamp) @@ -211 +207 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The operator to use when comparing values in the filter. +>>>> A timestamp representing the start of the time period filtered on. @@ -213 +209 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> value -> (string) +>>> endInclusive -> (timestamp) @@ -215 +211 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to filter on. +>>>> A timestamp representing the end of the time period filtered on. @@ -217 +213 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> componentId -> (list) +> updatedAt -> (list) @@ -219 +215,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the component IDs used to filter findings. +>> Details on the date and time a finding was last updated at used to filter findings. +>> +>> (structure) +>> +>>> Contains details on the time range used to filter findings. +>>> +>>> startInclusive -> (timestamp) +>>> +>>>> A timestamp representing the start of the time period filtered on. +>>> +>>> endInclusive -> (timestamp) +>>> +>>>> A timestamp representing the end of the time period filtered on. +> +> findingStatus -> (list) +> +>> Details on the finding status types used to filter findings. @@ -233 +245 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> componentType -> (list) +> title -> (list) @@ -235 +247 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the component types used to filter findings. +>> Details on the finding title used to filter findings. @@ -249 +261 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ec2InstanceImageId -> (list) +> inspectorScore -> (list) @@ -251 +263,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon EC2 instance image IDs used to filter findings. +>> The Amazon Inspector score to filter on. +>> +>> (structure) +>> +>>> An object that describes the details of a number filter. +>>> +>>> upperInclusive -> (double) +>>> +>>>> The highest number to be included in the filter. +>>> +>>> lowerInclusive -> (double) +>>> +>>>> The lowest number to be included in the filter. +> +> resourceType -> (list) +> +>> Details on the resource types used to filter findings. @@ -265 +293 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ec2InstanceSubnetId -> (list) +> resourceId -> (list) @@ -267 +295 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon EC2 instance subnet IDs used to filter findings. +>> Details on the resource IDs used to filter findings. @@ -281 +309 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ec2InstanceVpcId -> (list) +> resourceTags -> (list) @@ -283 +311 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon EC2 instance VPC IDs used to filter findings. +>> Details on the resource tags used to filter findings. @@ -287 +315 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a string filter. +>>> An object that describes details of a map filter. @@ -292,0 +321,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec +>>> key -> (string) +>>> +>>>> The tag key used in the filter. +>>> @@ -295 +327 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The value to filter on. +>>>> The tag value used in the filter. @@ -297 +329 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageArchitecture -> (list) +> ec2InstanceImageId -> (list) @@ -299 +331 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon ECR image architecture types used to filter findings. +>> Details of the Amazon EC2 instance image IDs used to filter findings. @@ -313 +345 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageHash -> (list) +> ec2InstanceVpcId -> (list) @@ -315 +347 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Details of the Amazon ECR image hashes used to filter findings. +>> Details of the Amazon EC2 instance VPC IDs used to filter findings. @@ -329 +361 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageInUseCount -> (list) +> ec2InstanceSubnetId -> (list) @@ -331 +363 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria indicating when details for an Amazon ECR image include when an Amazon ECR image is in use. +>> Details of the Amazon EC2 instance subnet IDs used to filter findings. @@ -335 +367 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> An object that describes the details of a number filter. +>>> An object that describes the details of a string filter. @@ -337 +369 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> lowerInclusive -> (double) +>>> comparison -> (string) @@ -339 +371 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The lowest number to be included in the filter. +>>>> The operator to use when comparing values in the filter. @@ -341 +373 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> upperInclusive -> (double) +>>> value -> (string) @@ -343 +375 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>>> The highest number to be included in the filter. +>>>> The value to filter on. @@ -345 +377 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec -> ecrImageLastInUseAt -> (list) +> ecrImagePushedAt -> (list) @@ -347 +379 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->> Filter criteria indicating when an Amazon ECR image was last used in an Amazon ECS cluster task or Amazon EKS cluster pod. +>> Details on the Amazon ECR image push date and time used to filter findings. @@ -353,4 +384,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec ->>> endInclusive -> (timestamp) ->>> ->>>> A timestamp representing the end of the time period filtered on. ->>> @@ -359,0 +388,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec