AWS inspector medium security documentation change
Summary
Removed Fedora 40 and 41 from supported OS list, updated section headers, consolidated discontinued OS documentation, and added Fedora 41 to discontinued list with 2025 date
Security assessment
The changes emphasize that discontinued OS versions may stop receiving security advisories and CVE detections, directly impacting vulnerability visibility. The explicit warning that 'Findings... should be used for informational purposes only' and removal of specific Fedora versions from supported lists highlight security risks of using outdated systems.
Diff
diff --git a/inspector/latest/user/supported.md b/inspector/latest/user/supported.md index 93cd23c8b..486340009 100644 --- a//inspector/latest/user/supported.md +++ b//inspector/latest/user/supported.md @@ -76,2 +75,0 @@ Debian Server (Trixie) | 13 | DSA CVE | Yes | Yes -Fedora | 40 | Errata CVE | Yes | Yes -Fedora | 41 | Errata CVE | Yes | Yes @@ -130 +127,0 @@ Debian Server (Trixie) | 13 | DSA CVE -Fedora | 41 | Errata CVE @@ -180 +177 @@ Windows Server | 2022 | 4.0.0 -### Supported operating systems: Amazon Inspector Scans +### Supported operating systems: Amazon Inspector Scan API @@ -203 +199,0 @@ Debian Sid | – -Fedora | 41 @@ -231 +227 @@ Wolfi Linux | – -The following tables list which operating systems have been discontinued and when they were discontinued. +The following table lists operating systems that have been discontinued and when they were discontinued. @@ -233 +229 @@ The following tables list which operating systems have been discontinued and whe -Even though Amazon Inspector doesn't provide full support for the following discontinued operating systems, Amazon Inspector continues to scan the Amazon EC2 instances and Amazon ECR container images running them. As a security best practice, we recommend moving to the supported version of a discontinued operating system. Findings that Amazon Inspector generates for a discontinued operating system should be used for informational purposes only. +Even though Amazon Inspector doesn't provide full support for discontinued operating systems, Amazon Inspector continues to scan Amazon EC2 instances and Amazon ECR container images running them. As a security best practice, we recommend moving to a supported version. Findings that Amazon Inspector generates for discontinued operating systems should be used for informational purposes only. @@ -235,53 +231 @@ Even though Amazon Inspector doesn't provide full support for the following disc -In accordance with vendor policy, the following operating systems no longer receive patch updates. New security advisories might not be released for discontinued operating systems. Vendors can remove existing security advisories and detections from their feeds for operating systems that reach the end of standard support. As a result, Amazon Inspector can stop generating findings for known CVEs. - -**Discontinued operating systems: Amazon EC2 scanning** - -Operating system | Version | Discontinued ----|---|--- -Amazon Linux (AL1) | 2012 | December 31, 2021 -CentOS Linux (CentOS) | 7 | June 30, 2024 -CentOS Linux (CentOS) | 8 | December 31, 2021 -Debian Server (Jessie) | 8 | June 30, 2020 -Debian Server (Stretch) | 9 | June 30, 2022 -Debian Server (Buster) | 10 | June 30, 2024 -Fedora | 33 | November 30, 2021 -Fedora | 34 | June 7, 2022 -Fedora | 35 | December 13, 2022 -Fedora | 36 | May 16, 2023 -Fedora | 37 | December 15, 2023 -Fedora | 38 | May 21, 2024 -Fedora | 39 | November 26, 2024 -Fedora | 40 | May 13, 2025 -OpenSUSE Leap | 15.2 | December 1, 2021 -OpenSUSE Leap | 15.3 | December 1, 2022 -OpenSUSE Leap | 15.4 | December 7, 2023 -OpenSUSE Leap | 15.5 | December 31, 2024 -Oracle Linux (Oracle) | 6 | March 1, 2021 -Oracle Linux (Oracle) | 7 | December 31, 2024 -Red Hat Enterprise Linux (RHEL) | 6 | November 30, 2020 -Red Hat Enterprise Linux (RHEL) | 7 | June 30, 2024 -SUSE Linux Enterprise Server (SLES) | 12 | June 30, 2016 -SUSE Linux Enterprise Server (SLES) | 12.1 | May 31, 2017 -SUSE Linux Enterprise Server (SLES) | 12.2 | March 31, 2018 -SUSE Linux Enterprise Server (SLES) | 12.3 | June 30, 2019 -SUSE Linux Enterprise Server (SLES) | 12.4 | June 30, 2020 -SUSE Linux Enterprise Server (SLES) | 12.5 | October 31, 2024 -SUSE Linux Enterprise Server (SLES) | 15 | December 31, 2019 -SUSE Linux Enterprise Server (SLES) | 15.1 | January 31, 2021 -SUSE Linux Enterprise Server (SLES) | 15.2 | December 31, 2021 -SUSE Linux Enterprise Server (SLES) | 15.3 | December 31, 2022 -SUSE Linux Enterprise Server (SLES) | 15.4 | December 31, 2023 -SUSE Linux Enterprise Server (SLES) | 15.5 | December 31, 2024 -Ubuntu (Trusty) | 12.04 | April 28, 2017 -Ubuntu (Trusty) | 14.04 | April 1, 2024 -Ubuntu (Groovy) | 20.10 | July 22, 2021 -Ubuntu (Hirsute) | 21.04 | January 20, 2022 -Ubuntu (Impish) | 21.10 | July 31, 2022 -Ubuntu (Kinetic) | 22.10 | July 20, 2023 -Ubuntu (Lunar Lobster) | 23.04 | January 25, 2024 -Ubuntu (Mantic Minotaur) | 23.10 | July 11, 2024 -Ubuntu (Oracular Oriole) | 24.10 | July 10, 2025 -Windows Server | 2012 | October 10, 2023 -Windows Server | 2012 R2 | October 10, 2023 - -**Discontinued operating systems: Amazon ECR scanning** +In accordance with vendor policy, discontinued operating systems no longer receive patch updates. New security advisories might not be released for discontinued operating systems. Vendors can remove existing security advisories and detections from their feeds for operating systems that reach the end of standard support. As a result, Amazon Inspector can stop generating findings for known CVEs. @@ -321,0 +266 @@ Fedora | 40 | May 13, 2025 +Fedora | 41 | November 19, 2025 @@ -352,0 +298,2 @@ Ubuntu (Oracular Oriole) | 24.10 | July 10, 2025 +Windows Server | 2012 | October 10, 2023 +Windows Server | 2012 R2 | October 10, 2023 @@ -581 +528 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Security Hub integration +Security Hub CSPM integration