AWS Security ChangesHomeSearch

AWS inspector: Remove machine image scanning from Inspector activation docs

Service: inspector · 2026-10-10 · Documentation low

File: inspector/latest/user/activate-scans.md

Summary

Deleted the 'Machine image scanning' section (including the note about reviewing scan configuration) and removed `MACHINE_IMAGE` from the list of valid `resourceTypes` values for the Enable API operation, leaving only EC2, ECR, LAMBDA, and LAMBDA_CODE.

Security assessment

The change only removes documentation for a scan type (machine image/AMI scanning) and its API enum value; it documents no vulnerability, credential, encryption, or authorization behavior, so it is a product/feature documentation change with no direct security implication.

Evidence

Run the [Enable](https://docs.aws.amazon.com/inspector/v2/APIReference/API_Enable.html) API operation. In the request, provide the account IDs you are activating scans for, and idempotency token, and one or more of `EC2`, `ECR`, `LAMBDA`, or `LAMBDA_CODE` for `resourceTypes` to activate scans of that type.

Diff

diff --git a/inspector/latest/user/activate-scans.md b/inspector/latest/user/activate-scans.md
index d6e563c..ae8bda2 100644
--- a//inspector/latest/user/activate-scans.md
+++ b//inspector/latest/user/activate-scans.md
@@ -17,8 +16,0 @@ This scan type extracts metadata from an Amazon EC2 instance before comparing th
-###### [Machine image scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning-machine-images.html)
-
-This scan type extracts a software inventory from the Amazon EBS snapshots that back a machine image (AMI) before comparing that inventory against rules collected from security advisories. When you activate this scan type, Amazon Inspector scans all eligible machine images that your account owns for package vulnerabilities and continues to monitor them. After you activate this scan type, you can view how many machine images are being scanned in the **Machine images** tab. 
-
-###### Note
-
-After you activate machine image scanning, review your scan configuration to control which machine images are in scope. For more information, see [Configuring machine image scanning](./machine-image-scan-configuration.html). 
-
@@ -74 +66 @@ API
-Run the [Enable](https://docs.aws.amazon.com/inspector/v2/APIReference/API_Enable.html) API operation. In the request, provide the account IDs you are activating scans for, and idempotency token, and one or more of `EC2`, `MACHINE_IMAGE`, `ECR`, `LAMBDA`, or `LAMBDA_CODE` for `resourceTypes` to activate scans of that type.
+Run the [Enable](https://docs.aws.amazon.com/inspector/v2/APIReference/API_Enable.html) API operation. In the request, provide the account IDs you are activating scans for, and idempotency token, and one or more of `EC2`, `ECR`, `LAMBDA`, or `LAMBDA_CODE` for `resourceTypes` to activate scans of that type.