AWS inspector: Removed machine image scanning from scan deactivation docs
Summary
Deleted the "Machine image scanning" subsection describing deactivation behavior (coverage removal, scan configuration deletion, default config on reactivation) and removed `MACHINE_IMAGE` from the list of valid `resourceTypes` values for the Disable API operation.
Security assessment
The edit only removes documentation for a scanning resource type (MACHINE_IMAGE) and its deactivation semantics; it changes neither permissions, encryption, credentials, nor exposure defaults, so it carries no direct security implication beyond coverage/visibility being reduced if users stop scanning AMIs.
Evidence
+Run the [Disable](https://docs.aws.amazon.com/inspector/v2/APIReference/API_Disable.html) API operation. In the request, provide the account IDs you are deactivating scans for, and for `resourceTypes` provide one or more of `EC2`, `ECR`, `LAMBDA`, or `LAMBDA_CODE` to deactivate scans.
Diff
diff --git a/inspector/latest/user/deactivate-scans.md b/inspector/latest/user/deactivate-scans.md index d1ec180..af90ee5 100644 --- a//inspector/latest/user/deactivate-scans.md +++ b//inspector/latest/user/deactivate-scans.md @@ -32,4 +31,0 @@ Additionally, the Amazon Inspector SSM plugin is removed from all Windows hosts. -###### [Machine image scanning](https://docs.aws.amazon.com/inspector/latest/user/scanning-machine-images.html) - -When you deactivate machine image scanning for an account, Amazon Inspector stops monitoring the machine images in that account, removes them from your coverage, and deletes the machine image scan configuration for the account. If you reactivate machine image scanning later, Amazon Inspector applies the default scan configuration. - @@ -79 +75 @@ API -Run the [Disable](https://docs.aws.amazon.com/inspector/v2/APIReference/API_Disable.html) API operation. In the request, provide the account IDs you are deactivating scans for, and for `resourceTypes` provide one or more of `EC2`, `MACHINE_IMAGE`, `ECR`, `LAMBDA`, or `LAMBDA_CODE` to deactivate scans. +Run the [Disable](https://docs.aws.amazon.com/inspector/v2/APIReference/API_Disable.html) API operation. In the request, provide the account IDs you are deactivating scans for, and for `resourceTypes` provide one or more of `EC2`, `ECR`, `LAMBDA`, or `LAMBDA_CODE` to deactivate scans.