AWS cli documentation change
Summary
Added support for Azure resource aggregations (VM instances, container images, serverless functions) and expanded cloud provider filtering options. Updated aggregation parameters to include Azure-specific fields like cloudProviders, cloudAccountIds, cloudOrgIds, cloudRegions, and cloudPartitions. Enhanced output documentation with Azure resource types and new aggregation structures.
Security assessment
The changes expand Inspector2's aggregation capabilities to include Azure resources and cloud provider filters, enhancing security visibility across multi-cloud environments. While this improves security documentation by adding new resource types (VM_INSTANCE, CONTAINER_IMAGE, SERVERLESS_FUNCTION) and cloud provider parameters, there is no evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/cli/latest/reference/inspector2/list-finding-aggregations.md b/cli/latest/reference/inspector2/list-finding-aggregations.md index 82e588673..08e6bef3f 100644 --- a//cli/latest/reference/inspector2/list-finding-aggregations.md +++ b//cli/latest/reference/inspector2/list-finding-aggregations.md @@ -15 +15 @@ - * [AWS CLI 2.35.16 Command Reference](../../index.html) » + * [AWS CLI 2.35.19 Command Reference](../../index.html) » @@ -117,0 +118,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec +> * `VM_INSTANCE` +> * `CONTAINER_IMAGE` +> * `SERVERLESS_FUNCTION` @@ -183 +186 @@ JSON Syntax: -> This is a Tagged Union structure. Only one of the following top level keys can be set: `accountAggregation`, `amiAggregation`, `awsEcrContainerAggregation`, `ec2InstanceAggregation`, `findingTypeAggregation`, `imageLayerAggregation`, `packageAggregation`, `repositoryAggregation`, `titleAggregation`, `lambdaLayerAggregation`, `lambdaFunctionAggregation`, `codeRepositoryAggregation`. +> This is a Tagged Union structure. Only one of the following top level keys can be set: `accountAggregation`, `amiAggregation`, `awsEcrContainerAggregation`, `ec2InstanceAggregation`, `findingTypeAggregation`, `imageLayerAggregation`, `packageAggregation`, `repositoryAggregation`, `titleAggregation`, `lambdaLayerAggregation`, `lambdaFunctionAggregation`, `codeRepositoryAggregation`, `vmInstanceAggregation`, `containerImageAggregation`, `serverlessFunctionAggregation`. @@ -210,0 +214,3 @@ JSON Syntax: +>>> * `Microsoft.Compute/virtualMachines` +>>> * `Microsoft.ContainerRegistry/registry/containerImage` +>>> * `Microsoft.Web/sites` @@ -780,0 +787,3 @@ JSON Syntax: +>>> * `Microsoft.Compute/virtualMachines` +>>> * `Microsoft.ContainerRegistry/registry/containerImage` +>>> * `Microsoft.Web/sites` @@ -923,0 +933,207 @@ JSON Syntax: +>> +>> cloudProviders -> (list) +>> +>>> The cloud providers to aggregate findings for. Valid values: +>>> +>>> * `AWS` – Findings from Amazon Web Services resources. +>>> * `AZURE` – Findings from Microsoft Azure resources. +>>> + +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `10` +>>> + +>>> +>>> (structure) +>>> +>>>> An object that describes the details of a string filter. +>>>> +>>>> comparison -> (string) [required] +>>>> +>>>>> The operator to use when comparing values in the filter. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `EQUALS` +>>>>> * `PREFIX` +>>>>> * `NOT_EQUALS` +>>>>> + +>>>> +>>>> value -> (string) [required] +>>>> +>>>>> The value to filter on. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `1024` +>>>>> + +>> +>> cloudAccountIds -> (list) +>> +>>> The cloud account IDs to aggregate findings for. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `10` +>>> + +>>> +>>> (structure) +>>> +>>>> An object that describes the details of a string filter. +>>>> +>>>> comparison -> (string) [required] +>>>> +>>>>> The operator to use when comparing values in the filter. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `EQUALS` +>>>>> * `PREFIX` +>>>>> * `NOT_EQUALS` +>>>>> + +>>>> +>>>> value -> (string) [required] +>>>> +>>>>> The value to filter on. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `1024` +>>>>> + +>> +>> cloudOrgIds -> (list) +>> +>>> The cloud organization IDs to aggregate findings for. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `10` +>>> + +>>> +>>> (structure) +>>> +>>>> An object that describes the details of a string filter. +>>>> +>>>> comparison -> (string) [required] +>>>> +>>>>> The operator to use when comparing values in the filter. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `EQUALS` +>>>>> * `PREFIX` +>>>>> * `NOT_EQUALS` +>>>>> + +>>>> +>>>> value -> (string) [required] +>>>> +>>>>> The value to filter on. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `1024` +>>>>> + +>> +>> cloudRegions -> (list) +>> +>>> The cloud regions to aggregate findings for. The value format depends on the cloud provider: +>>> +>>> * An Amazon Web Services Region, such as `us-east-1` . +>>> * An Azure region, such as `eastus` . +>>> + +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `10` +>>> + +>>> +>>> (structure) +>>> +>>>> An object that describes the details of a string filter. +>>>> +>>>> comparison -> (string) [required] +>>>> +>>>>> The operator to use when comparing values in the filter. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `EQUALS` +>>>>> * `PREFIX` +>>>>> * `NOT_EQUALS` +>>>>> + +>>>> +>>>> value -> (string) [required] +>>>> +>>>>> The value to filter on. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `1024` +>>>>> + +>> +>> cloudPartitions -> (list) +>> +>>> The cloud partitions to aggregate findings for. Valid values: +>>> +>>> * `aws` – Amazon Web Services commercial Regions. +>>> * `aws-cn` – Amazon Web Services China Regions. +>>> * `aws-us-gov` – Amazon Web Services GovCloud (US) Regions. +>>> * `AzureCloud` – Azure commercial Regions. +>>> + +>>> +>>> Constraints: +>>> +>>> * min: `1`