AWS inspector medium security documentation change
Summary
Added two new entries: Amazon Inspector VM Scanner feature and false positive resolution for SBOM Generator vulnerabilities.
Security assessment
The change documents false positive vulnerability findings (CVE-2026-39821, CVE-2026-39827, CVE-2026-39824) and their upcoming resolution. This directly addresses vulnerability reporting accuracy in Amazon Inspector, a security tool. The VM Scanner addition is a security feature enhancement.
Diff
diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md index d2a9f0075..487fb07f0 100644 --- a//inspector/latest/user/doc-history.md +++ b//inspector/latest/user/doc-history.md @@ -16,0 +17,2 @@ Change| Description| Date +[New feature](./doc-history.html)| To perform enhanced vulnerability assessments of Amazon Elastic Compute Cloud instances, you can now use the Amazon Inspector VM Scanner instead of the Amazon Inspector SSM plugin. The Inspector VM Scanner provides several advantages, such as more granular package collection, and it uses fewer compute resources. For more information, see [Amazon Inspector VM Scanner](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner.html). | May 29, 2026 +[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate vulnerability findings for CVE-2026-39821, CVE-2026-39827, and CVE-2026-39824. It was confirmed that Amazon Inspector is not impacted by these vulnerabilities. These findings will be resolved in the next release of the Amazon Inspector SBOM Generator. | May 28, 2026