AWS inspector: Note on on-demand machine image scan finding delivery
Summary
Adds a note that on-demand machine image scan findings are delivered only via EventBridge and are absent from the console, ListFindings, and Security Hub CSPM.
Security assessment
Documents a visibility gap in finding delivery (console/ListFindings/Security Hub), which is relevant to detection and monitoring coverage, but it describes expected behavior rather than fixing a vulnerability.
Evidence
+Findings from on-demand machine image scans are an exception. Amazon Inspector delivers them only through Amazon EventBridge, so they don't appear in the Amazon Inspector console, aren't returned by `ListFindings`, and aren't sent to Security Hub CSPM. For more information, see [Running on-demand machine image scans with Amazon Inspector](./machine-image-on-demand.html).
Diff
diff --git a/inspector/latest/user/findings-understanding-locating-analyzing.md b/inspector/latest/user/findings-understanding-locating-analyzing.md index 0a16cbd..b0bdc43 100644 --- a//inspector/latest/user/findings-understanding-locating-analyzing.md +++ b//inspector/latest/user/findings-understanding-locating-analyzing.md @@ -10,0 +11,4 @@ You can view findings in the Amazon Inspector console and with the Amazon Inspec +###### Note + +Findings from on-demand machine image scans are an exception. Amazon Inspector delivers them only through Amazon EventBridge, so they don't appear in the Amazon Inspector console, aren't returned by `ListFindings`, and aren't sent to Security Hub CSPM. For more information, see [Running on-demand machine image scans with Amazon Inspector](./machine-image-on-demand.html). +