AWS cli documentation change
Summary
Updated command description to clarify delegated administrator functionality, added --account-id parameter for member account targeting, and added --update-configuration-inheritance parameter to reset scan configurations to inherited values.
Security assessment
The changes enhance documentation for Amazon Inspector's configuration management capabilities, specifically adding options for delegated administrators to manage member account scan configurations. While this relates to security posture management, there's no evidence of addressing a specific vulnerability. The changes document security features for centralized scan configuration management.
Diff
diff --git a/cli/latest/reference/inspector2/update-configuration.md b/cli/latest/reference/inspector2/update-configuration.md index 64f9c0c33..6ec58f368 100644 --- a//cli/latest/reference/inspector2/update-configuration.md +++ b//cli/latest/reference/inspector2/update-configuration.md @@ -13 +13 @@ - * [next](update-ec2-deep-inspection-configuration.html "update-ec2-deep-inspection-configuration") | + * [next](update-connector.html "update-connector") | @@ -15 +15 @@ - * [AWS CLI 2.35.16 Command Reference](../../index.html) » + * [AWS CLI 2.35.19 Command Reference](../../index.html) » @@ -23 +23 @@ - * [update-ec2-deep-inspection-configuration →](update-ec2-deep-inspection-configuration.html "next chapter \(use the right arrow\)") + * [update-connector →](update-connector.html "next chapter \(use the right arrow\)") @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Updates setting configurations for your Amazon Inspector account. When you use this API as an Amazon Inspector delegated administrator this updates the setting for all accounts you manage. Member accounts in an organization cannot update this setting. +Updates the scan configuration for your Amazon Inspector account. If you don’t specify an `accountId` , this operation updates the delegated administrator’s configuration and propagates it to member accounts that have not been individually configured. If you specify an `accountId` , this operation updates that member account’s configuration. Only the delegated administrator can specify an `accountId` ; member accounts cannot call this operation. @@ -66,0 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec + [--account-id <value>] @@ -68,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec + [--update-configuration-inheritance <value>] @@ -93,0 +96,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/inspec +`--account-id` (string) + +> The 12-digit Amazon Web Services account ID of the member account whose scan configuration you want to update. When specified, you must be the delegated administrator for this member account. If not specified, the operation updates your own configuration and propagates changes to any member accounts that have not been individually configured. +> +> Constraints: +> +> * min: `12` +> * max: `12` +> * pattern: `\d{12}` +> + + @@ -187,0 +202,39 @@ JSON Syntax: +`--update-configuration-inheritance` (structure) + +> Specifies which scan-type configurations to reset to the delegated administrator’s inherited values for the targeted member account. Each member of this structure is independently optional. When specified, `ec2Configuration` and `ecrConfiguration` must be absent, and `accountId` must also be present. Only `INHERIT_FROM_ADMIN` is valid for each member. If not specified, the operation uses the `ec2Configuration` and `ecrConfiguration` parameters instead. +> +> ec2Configuration -> (string) +> +>> The inheritance mode for Amazon EC2 scan configuration. Set to `INHERIT_FROM_ADMIN` to reset the member account’s Amazon EC2 scan configuration to inherit from the delegated administrator. If omitted, the member account’s existing Amazon EC2 scan configuration is not changed. +>> +>> Possible values: +>> +>> * `INHERIT_FROM_ADMIN` +>> + +> +> ecrConfiguration -> (string) +> +>> The inheritance mode for Amazon ECR scan configuration. Set to `INHERIT_FROM_ADMIN` to reset the member account’s Amazon ECR scan configuration to inherit from the delegated administrator. If omitted, the member account’s existing Amazon ECR scan configuration is not changed. +>> +>> Possible values: +>> +>> * `INHERIT_FROM_ADMIN` +>> + + +Shorthand Syntax: + + + ec2Configuration=string,ecrConfiguration=string + + +JSON Syntax: + + + { + "ec2Configuration": "INHERIT_FROM_ADMIN", + "ecrConfiguration": "INHERIT_FROM_ADMIN" + } + + @@ -304 +357 @@ None - * [update-ec2-deep-inspection-configuration →](update-ec2-deep-inspection-configuration.html "next chapter \(use the right arrow\)") + * [update-connector →](update-connector.html "next chapter \(use the right arrow\)") @@ -311 +364 @@ None - * [next](update-ec2-deep-inspection-configuration.html "update-ec2-deep-inspection-configuration") | + * [next](update-connector.html "update-connector") | @@ -313 +366 @@ None - * [AWS CLI 2.35.16 Command Reference](../../index.html) » + * [AWS CLI 2.35.19 Command Reference](../../index.html) »