AWS inspector documentation change
Summary
Added GCP support to Amazon Inspector SBOM Generator metadata fields including project_id, numeric_project_id, and instance_name; updated Azure tenant_id description
Security assessment
The changes document new GCP-specific metadata fields for software bill of materials (SBOM) generation, which is a security feature. While this enhances security visibility for GCP environments, there's no evidence of a specific vulnerability being addressed. The updates expand documentation for an existing security feature.
Diff
diff --git a/inspector/latest/user/cyclonedx-namespace.md b/inspector/latest/user/cyclonedx-namespace.md index e61a0aaf0..68b788df1 100644 --- a//inspector/latest/user/cyclonedx-namespace.md +++ b//inspector/latest/user/cyclonedx-namespace.md @@ -85 +85 @@ The Amazon Inspector SBOM Generator uses the `amazon:inspector:sbom_generator` n -`amazon:inspector:sbom_generator:metadata:imds:provider` | The cloud provider detected via IMDS (aws, azure). +`amazon:inspector:sbom_generator:metadata:imds:provider` | The cloud provider detected via IMDS (aws, azure, gcp). @@ -93 +93 @@ The Amazon Inspector SBOM Generator uses the `amazon:inspector:sbom_generator` n -`amazon:inspector:sbom_generator:metadata:imds:tenant_id` | Azure tenant ID (Azure only). +`amazon:inspector:sbom_generator:metadata:imds:tenant_id` | The Microsoft Entra ID tenant the instance's subscription belongs to (Azure only, populated when a managed identity is assigned to the VM). @@ -96,0 +97,3 @@ The Amazon Inspector SBOM Generator uses the `amazon:inspector:sbom_generator` n +`amazon:inspector:sbom_generator:metadata:imds:project_id` | The Google Cloud project ID the instance belongs to (GCP only). +`amazon:inspector:sbom_generator:metadata:imds:numeric_project_id` | The numeric Google Cloud project ID the instance belongs to (GCP only). +`amazon:inspector:sbom_generator:metadata:imds:instance_name` | The instance name as reported by the GCP metadata service (GCP only). @@ -108 +111 @@ Version references -CI/CD integration +Plugin developer guide