AWS inspector: Warn that Enhanced EC2 Scanning disables Inspector SSM plugin
Summary
Adds two warning notes stating that enabling Enhanced EC2 Scanning with the Inspector VM Scanner permanently disables the Inspector SSM plugin for both accounts and organizations, that the change cannot be reverted, and recommending testing in a non-production account first.
Security assessment
The note is an operational irreversibility warning about a vulnerability-scanning agent migration (SSM plugin to VM Scanner); it does not describe a vulnerability, CVE, or a new security control, though it affects the deployment of security scanning coverage.
Evidence
+Warning: Enabling Enhanced EC2 Scanning with the Inspector VM Scanner permanently disables the Inspector SSM plugin. This applies to both individual AWS accounts and organizations that the delegated administrator enables. After you enable this feature, you cannot revert to the Inspector SSM plugin.
Diff
diff --git a/inspector/latest/user/inspector-vm-scanner-enabling.md b/inspector/latest/user/inspector-vm-scanner-enabling.md index bc7f865..b621618 100644 --- a//inspector/latest/user/inspector-vm-scanner-enabling.md +++ b//inspector/latest/user/inspector-vm-scanner-enabling.md @@ -46,0 +47,8 @@ After you enable Enhanced EC2 Scanning, Amazon Inspector creates an SSM associat +###### Note + +Warning: Enabling Enhanced EC2 Scanning with the Inspector VM Scanner permanently disables the Inspector SSM plugin. This applies to both individual AWS accounts and organizations that the delegated administrator enables. After you enable this feature, you cannot revert to the Inspector SSM plugin. + +###### Note + +Before you enable Enhanced EC2 Scanning, consider testing in a non-production account first. If you do not test first, you cannot revert to the Inspector SSM plugin if issues arise. For more information, see [Manual installation and configuration](https://docs.aws.amazon.com/inspector/latest/user/inspector-vm-scanner-using.html). +