Skip to content

Commit aa6e9a5

Browse files
author
AWS
committed
Inspector2 Update: This release adds support for Inspector V2 scan configurations through the get and update configuration APIs. Currently this allows configuring ECR automated re-scan duration to lifetime or 180 days or 30 days.
1 parent 20237d7 commit aa6e9a5

File tree

2 files changed

+147
-6
lines changed

2 files changed

+147
-6
lines changed

‎.changes/next-release/feature-Inspector2-e5a061d.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "Inspector2",
4+
"contributor": "",
5+
"description": "This release adds support for Inspector V2 scan configurations through the get and update configuration APIs. Currently this allows configuring ECR automated re-scan duration to lifetime or 180 days or 30 days."
6+
}

‎services/inspector2/src/main/resources/codegen-resources/service-2.json

Lines changed: 141 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -246,6 +246,22 @@
246246
],
247247
"documentation":"<p>Enables the Amazon Inspector delegated administrator for your Organizations organization.</p>"
248248
},
249+
"GetConfiguration":{
250+
"name":"GetConfiguration",
251+
"http":{
252+
"method":"POST",
253+
"requestUri":"/configuration/get",
254+
"responseCode":200
255+
},
256+
"input":{"shape":"GetConfigurationRequest"},
257+
"output":{"shape":"GetConfigurationResponse"},
258+
"errors":[
259+
{"shape":"ResourceNotFoundException"},
260+
{"shape":"ThrottlingException"},
261+
{"shape":"InternalServerException"}
262+
],
263+
"documentation":"<p>Retrieves setting configurations for Inspector scans.</p>"
264+
},
249265
"GetDelegatedAdminAccount":{
250266
"name":"GetDelegatedAdminAccount",
251267
"http":{
@@ -502,6 +518,23 @@
502518
],
503519
"documentation":"<p>Removes tags from a resource.</p>"
504520
},
521+
"UpdateConfiguration":{
522+
"name":"UpdateConfiguration",
523+
"http":{
524+
"method":"POST",
525+
"requestUri":"/configuration/update",
526+
"responseCode":200
527+
},
528+
"input":{"shape":"UpdateConfigurationRequest"},
529+
"output":{"shape":"UpdateConfigurationResponse"},
530+
"errors":[
531+
{"shape":"ValidationException"},
532+
{"shape":"AccessDeniedException"},
533+
{"shape":"ThrottlingException"},
534+
{"shape":"InternalServerException"}
535+
],
536+
"documentation":"<p>Updates setting configurations for your Amazon Inspector account. When you use this API as an Amazon Inspector delegated administrator this updates the setting for all accounts you manage. Member accounts in an organization cannot update this setting.</p>"
537+
},
505538
"UpdateFilter":{
506539
"name":"UpdateFilter",
507540
"http":{
@@ -1216,7 +1249,7 @@
12161249
},
12171250
"resourceType":{
12181251
"shape":"CoverageStringFilterList",
1219-
"documentation":"<p>An array of Amazon Web Services resource types to return coverage statistics for.</p>"
1252+
"documentation":"<p>An array of Amazon Web Services resource types to return coverage statistics for. The values can be <code>AWS_EC2_INSTANCE</code> or <code>AWS_ECR_REPOSITORY</code>.</p>"
12201253
},
12211254
"scanStatusCode":{
12221255
"shape":"CoverageStringFilterList",
@@ -1373,6 +1406,10 @@
13731406
"shape":"FilterName",
13741407
"documentation":"<p>The name of the filter. Minimum length of 3. Maximum length of 64. Valid characters include alphanumeric characters, dot (.), underscore (_), and dash (-). Spaces are not allowed.</p>"
13751408
},
1409+
"reason":{
1410+
"shape":"FilterReason",
1411+
"documentation":"<p>The reason for creating the filter.</p>"
1412+
},
13761413
"tags":{
13771414
"shape":"TagMap",
13781415
"documentation":"<p>A list of tags for the filter.</p>"
@@ -1812,6 +1849,27 @@
18121849
"UNKNOWN"
18131850
]
18141851
},
1852+
"EcrConfiguration":{
1853+
"type":"structure",
1854+
"required":["rescanDuration"],
1855+
"members":{
1856+
"rescanDuration":{
1857+
"shape":"EcrRescanDuration",
1858+
"documentation":"<p>The ECR automated re-scan duration defines how long an ECR image will be actively scanned by Amazon Inspector. When the number of days since an image was last pushed exceeds the automated re-scan duration the monitoring state of that image becomes <code>inactive</code> and all associated findings are scheduled for closure.</p>"
1859+
}
1860+
},
1861+
"documentation":"<p>Details about the ECR automated re-scan duration setting for your environment</p>"
1862+
},
1863+
"EcrConfigurationState":{
1864+
"type":"structure",
1865+
"members":{
1866+
"rescanDurationState":{
1867+
"shape":"EcrRescanDurationState",
1868+
"documentation":"<p>An object that contains details about the state of the ECR automated re-scan setting.</p>"
1869+
}
1870+
},
1871+
"documentation":"<p>Details about the state of the ECR scans for your environment.</p>"
1872+
},
18151873
"EcrContainerImageMetadata":{
18161874
"type":"structure",
18171875
"members":{
@@ -1836,6 +1894,40 @@
18361894
},
18371895
"documentation":"<p>Information on the Amazon ECR repository metadata associated with a finding.</p>"
18381896
},
1897+
"EcrRescanDuration":{
1898+
"type":"string",
1899+
"enum":[
1900+
"LIFETIME",
1901+
"DAYS_30",
1902+
"DAYS_180"
1903+
]
1904+
},
1905+
"EcrRescanDurationState":{
1906+
"type":"structure",
1907+
"members":{
1908+
"rescanDuration":{
1909+
"shape":"EcrRescanDuration",
1910+
"documentation":"<p>The ECR automated re-scan duration defines how long an ECR image will be actively scanned by Amazon Inspector. When the number of days since an image was last pushed exceeds the automated re-scan duration the monitoring state of that image becomes <code>inactive</code> and all associated findings are scheduled for closure.</p>"
1911+
},
1912+
"status":{
1913+
"shape":"EcrRescanDurationStatus",
1914+
"documentation":"<p>The status of changes to the ECR automated re-scan duration.</p>"
1915+
},
1916+
"updatedAt":{
1917+
"shape":"DateTimeTimestamp",
1918+
"documentation":"<p>A timestamp representing when the last time the ECR scan duration setting was changed.</p>"
1919+
}
1920+
},
1921+
"documentation":"<p>Details about the state of any changes to the ECR automated re-scan duration setting.</p>"
1922+
},
1923+
"EcrRescanDurationStatus":{
1924+
"type":"string",
1925+
"enum":[
1926+
"SUCCESS",
1927+
"PENDING",
1928+
"FAILED"
1929+
]
1930+
},
18391931
"EcrScanFrequency":{
18401932
"type":"string",
18411933
"enum":[
@@ -1923,7 +2015,8 @@
19232015
"EVENTBRIDGE_UNAVAILABLE",
19242016
"EVENTBRIDGE_THROTTLED",
19252017
"RESOURCE_SCAN_NOT_DISABLED",
1926-
"DISASSOCIATE_ALL_MEMBERS"
2018+
"DISASSOCIATE_ALL_MEMBERS",
2019+
"ACCOUNT_IS_ISOLATED"
19272020
]
19282021
},
19292022
"ErrorMessage":{"type":"string"},
@@ -2462,6 +2555,20 @@
24622555
"ECR"
24632556
]
24642557
},
2558+
"GetConfigurationRequest":{
2559+
"type":"structure",
2560+
"members":{
2561+
}
2562+
},
2563+
"GetConfigurationResponse":{
2564+
"type":"structure",
2565+
"members":{
2566+
"ecrConfiguration":{
2567+
"shape":"EcrConfigurationState",
2568+
"documentation":"<p>Specifies how the ECR automated re-scan duration is currently configured for your environment.</p>"
2569+
}
2570+
}
2571+
},
24652572
"GetDelegatedAdminAccountRequest":{
24662573
"type":"structure",
24672574
"members":{
@@ -3301,7 +3408,11 @@
33013408
"GOBINARY",
33023409
"GOMOD",
33033410
"JAR",
3304-
"OS"
3411+
"OS",
3412+
"PIP",
3413+
"PYTHONPKG",
3414+
"NODEPKG",
3415+
"POM"
33053416
]
33063417
},
33073418
"PackageName":{
@@ -3507,7 +3618,11 @@
35073618
"type":"string",
35083619
"enum":[
35093620
"INTERNAL_ERROR",
3510-
"INVALID_PERMISSIONS"
3621+
"INVALID_PERMISSIONS",
3622+
"NO_FINDINGS_FOUND",
3623+
"BUCKET_NOT_FOUND",
3624+
"INCOMPATIBLE_BUCKET_REGION",
3625+
"MALFORMED_KMS_KEY"
35113626
]
35123627
},
35133628
"RepositoryAggregation":{
@@ -3742,7 +3857,8 @@
37423857
"IMAGE_SIZE_EXCEEDED",
37433858
"SCAN_FREQUENCY_MANUAL",
37443859
"SCAN_FREQUENCY_SCAN_ON_PUSH",
3745-
"EC2_INSTANCE_STOPPED"
3860+
"EC2_INSTANCE_STOPPED",
3861+
"PENDING_DISABLE"
37463862
]
37473863
},
37483864
"ScanType":{
@@ -4106,6 +4222,21 @@
41064222
"members":{
41074223
}
41084224
},
4225+
"UpdateConfigurationRequest":{
4226+
"type":"structure",
4227+
"required":["ecrConfiguration"],
4228+
"members":{
4229+
"ecrConfiguration":{
4230+
"shape":"EcrConfiguration",
4231+
"documentation":"<p>Specifies how the ECR automated re-scan will be updated for your environment.</p>"
4232+
}
4233+
}
4234+
},
4235+
"UpdateConfigurationResponse":{
4236+
"type":"structure",
4237+
"members":{
4238+
}
4239+
},
41094240
"UpdateFilterRequest":{
41104241
"type":"structure",
41114242
"required":["filterArn"],
@@ -4129,6 +4260,10 @@
41294260
"name":{
41304261
"shape":"FilterName",
41314262
"documentation":"<p>The name of the filter.</p>"
4263+
},
4264+
"reason":{
4265+
"shape":"FilterReason",
4266+
"documentation":"<p>The reason the filter was updated.</p>"
41324267
}
41334268
}
41344269
},
@@ -4284,7 +4419,7 @@
42844419
},
42854420
"VulnerabilityId":{
42864421
"type":"string",
4287-
"max":64,
4422+
"max":128,
42884423
"min":1
42894424
},
42904425
"VulnerabilityIdList":{

0 commit comments

Comments
 (0)