AWS Security ChangesHomeSearch

AWS inspector: Drop machine images from package vulnerability finding coverage

Service: inspector · 2026-10-10 · Documentation low

File: inspector/latest/user/findings-understanding-details.md

Summary

Updates the list of resource types that support package vulnerability findings, removing 'machine images' so it now reads EC2 instances, ECR container images, and Lambda functions.

Security assessment

A coverage/scope wording change for which resource types produce package vulnerability findings. It does not describe a vulnerability, mitigation, or security control, so it is non-security documentation maintenance.

Evidence

+Package vulnerability findings are available for EC2 instances, ECR container images, and Lambda functions. See [Package vulnerability](./findings-types.html#findings-types-package) for more info. 

Diff

diff --git a/inspector/latest/user/findings-understanding-details.md b/inspector/latest/user/findings-understanding-details.md
index 511e175..ba9ae23 100644
--- a//inspector/latest/user/findings-understanding-details.md
+++ b//inspector/latest/user/findings-understanding-details.md
@@ -37 +37 @@ The finding **Type** determines the remediation and vulnerability intelligence i
-Package vulnerability findings are available for EC2 instances, machine images, ECR container images, and Lambda functions. See [Package vulnerability](./findings-types.html#findings-types-package) for more info. 
+Package vulnerability findings are available for EC2 instances, ECR container images, and Lambda functions. See [Package vulnerability](./findings-types.html#findings-types-package) for more info.