AWS inspector documentation change
Summary
Updated documentation links and clarified language about viewing findings. Added details about viewing ECS tasks/EKS pods deployed and updated references to Amazon Inspector console/API filters.
Security assessment
The changes improve documentation clarity and provide more detailed instructions for accessing security findings, but there is no evidence of addressing a specific security vulnerability. The updates enhance existing security feature documentation.
Diff
diff --git a/inspector/latest/user/scanning-ecr.md b/inspector/latest/user/scanning-ecr.md index 5e06be6b1..03817180a 100644 --- a//inspector/latest/user/scanning-ecr.md +++ b//inspector/latest/user/scanning-ecr.md @@ -21 +21 @@ Basic scanning is provided and billed through Amazon ECR. For more information, -For information about how to activate Amazon ECR scanning, see [Activating a scan type](./activate-scans.html). For information about how to view your findings, see [Managing findings in Amazon Inspector](./findings-managing.html). For information about how to view your findings at the image level, see [Image scanning](https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html) in the _Amazon Elastic Container Registry User Guide_. You can also manage findings in AWS services not available for basic scanning, like [AWS Security Hub and Amazon EventBridge](https://docs.aws.amazon.com/inspector/latest/user/integrations.html). +For information about how to activate Amazon ECR scanning, see [Activating a scan type](https://docs.aws.amazon.com/inspector/latest/user/activate-scans.html). For information about how to view findings, see [Viewing Amazon Inspector findings](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-locating-analyzing.html). For information about how to view findings within Amazon ECR at the image level, see [Image scanning](https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html) in the _Amazon Elastic Container Registry User Guide_. You can manage findings using AWS services not available for basic scanning, like [AWS Security Hub and Amazon EventBridge](https://docs.aws.amazon.com/inspector/latest/user/integrations.html). @@ -57 +57 @@ The managed policy `AWSReadOnlyAccess` alone does not provide sufficient permiss -With this feature, you can prioritize remediation efforts based on operational risks and maintain security coverage across the entire container ecosystem. You can monitor container images currently in use and when container images were last used on an Amazon ECS or Amazon EKS cluster in the past 24 hours. For new images or accounts, it can take up to 36 hours for data to be available. Afterwards, this data is updated once every 24-hours. This information will be available in [your findings](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding.html) through the Amazon Inspector console on the details screen for your container image findings and with the [Amazon Inspector API](https://docs.aws.amazon.com/inspector/v2/APIReference/API_FilterCriteria.html) through the `ecrImageInUseCount` and `ecrImageLastInUseAt` filters. +You can prioritize remediation efforts based on operational risks and maintain security coverage across the entire container ecosystem. You can view how many container images are currently in use and which container images were last used on an Amazon ECS or Amazon EKS cluster in the past 24 hours. You can also view how many Amazon ECS tasks and Amazon EKS pods are deployed. This information can be found in the Amazon Inspector console on the details screen for container image findings and with the `ecrImageInUseCount` and `ecrImageLastInUseAt` filters for the [`FilterCriteria`](https://docs.aws.amazon.com/inspector/v2/APIReference/API_FilterCriteria.html) data type. For new container images or accounts, it can take up to 36 hours for data to be available. Afterwards, this data is updated once every 24-hours. For more information, see [Viewing Amazon Inspector findings](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-locating-analyzing.html) and [Viewing details for Amazon Inspector findings](https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-details.html).