AWS inspector documentation change

Service: inspector · 2026-02-13 · Documentation low

File: inspector/latest/user/cyclonedx-namespace.md

Summary

Added new host metadata fields for SBOM reports including network interfaces, IMDS data, and open ports

Security assessment

Enhances vulnerability context by documenting new host/environment metadata collection capabilities

Diff

diff --git a/inspector/latest/user/cyclonedx-namespace.md b/inspector/latest/user/cyclonedx-namespace.md
index 7e5d033a4..0dd83c7fa 100644
--- a//inspector/latest/user/cyclonedx-namespace.md
+++ b//inspector/latest/user/cyclonedx-namespace.md
@@ -63,0 +64,23 @@ The Amazon Inspector SBOM Generator uses the `amazon:inspector:sbom_generator` n
+`amazon:inspector:sbom_generator:metadata:host:hostname` | The hostname of the scanned system.  
+`amazon:inspector:sbom_generator:metadata:host:kernel_name` | The kernel name of the operating system (e.g., Linux, Darwin, Windows_NT).  
+`amazon:inspector:sbom_generator:metadata:host:kernel_version` | The kernel version string of the operating system.  
+`amazon:inspector:sbom_generator:metadata:host:cpu_architecture` | The CPU architecture of the system (e.g., x86_64, arm64).  
+`amazon:inspector:sbom_generator:metadata:host:bootdisk_id` | Unique identifier of the boot disk.  
+`amazon:inspector:sbom_generator:metadata:host:boot_id` | Unique identifier for the current boot session.  
+`amazon:inspector:sbom_generator:metadata:host:boot_time` | System boot time in ISO 8601 format.  
+`amazon:inspector:sbom_generator:metadata:host:system_id` | Persistent system identifier (machine-id on Linux, MachineGuid on Windows).  
+`amazon:inspector:sbom_generator:metadata:host:system_serial` | Hardware serial number from system firmware.  
+`amazon:inspector:sbom_generator:metadata:host:network_interfaces:`name`:hardware` | MAC address of the network interface.  
+`amazon:inspector:sbom_generator:metadata:host:network_interfaces:`name`:ipv4` | IPv4 address(es) assigned to the interface.  
+`amazon:inspector:sbom_generator:metadata:host:network_interfaces:`name`:ipv6` | IPv6 address(es) assigned to the interface.  
+`amazon:inspector:sbom_generator:metadata:host:sbomgen_tag:`key`` | Custom user-defined tags passed via the --tag CLI argument.  
+`amazon:inspector:sbom_generator:metadata:imds:provider` | The cloud provider detected via IMDS (aws, azure).  
+`amazon:inspector:sbom_generator:metadata:imds:instance_id` | The Amazon EC2 instance ID or Azure VM name.  
+`amazon:inspector:sbom_generator:metadata:imds:instance_type` | The instance type (e.g., t3.micro, Standard_D2s_v3).  
+`amazon:inspector:sbom_generator:metadata:imds:instance_location` | The region/location of the instance.  
+`amazon:inspector:sbom_generator:metadata:imds:instance_partition` | The cloud partition (aws, aws-cn, aws-us-gov for AWS, or AzurePublicCloud for Azure).  
+`amazon:inspector:sbom_generator:metadata:imds:instance_managed_id` | Amazon EC2 Systems Manager managed instance ID (AWS only).  
+`amazon:inspector:sbom_generator:metadata:imds:tenant_id` | Azure tenant ID (Azure only).  
+`amazon:inspector:sbom_generator:metadata:imds:vm_id` | Azure VM unique identifier (Azure only).  
+`amazon:inspector:sbom_generator:metadata:host:open_port:`port`:`protocol`` | Indicates an open port of a runtime resource (i.e. EC2)  
+`amazon:inspector:sbom_generator:hardened_image:vendor` | The vendor of a hardened container image