aws inspector2
Amazon Inspector is a vulnerability discovery service that automates continuous scanning for security vulnerabilities within your Amazon EC2, Amazon ECR, and Amazon Web Services Lambda environments. AWS CLI reference
84 commands Its page in the AWS CLI reference
Commands
associate-memberAssociates an Amazon Web Services account with an Amazon Inspector delegated administrator.batch-associate-code-security-scan-configurationAssociates multiple code repositories with an Amazon Inspector code security scan configuration.batch-disassociate-code-security-scan-configurationDisassociates multiple code repositories from an Amazon Inspector code security scan configuration.batch-get-account-statusRetrieves the Amazon Inspector status of multiple Amazon Web Services accounts within your environment.batch-get-code-snippetRetrieves code snippets from findings that Amazon Inspector detected code vulnerabilities in.batch-get-finding-detailsGets vulnerability details for findings.batch-get-free-trial-infoGets free trial status for multiple Amazon Web Services accounts.batch-get-member-ec2-deep-inspection-statusRetrieves Amazon Inspector deep inspection activation status of multiple member accounts within your organization.batch-update-member-ec2-deep-inspection-statusActivates or deactivates Amazon Inspector deep inspection for the provided member accounts in your organization.cancel-findings-reportCancels the given findings report.cancel-sbom-exportCancels a software bill of materials (SBOM) report.create-cis-scan-configurationCreates a CIS scan configuration.create-code-security-integrationCreates a code security integration with a source code repository provider.create-code-security-scan-configurationCreates a scan configuration for code security scanning.create-connectorCreates a connector that links an external cloud provider to Amazon Inspector for vulnerability scanning.create-filterCreates a filter resource using specified filter criteria.create-findings-reportCreates a finding report.create-sbom-exportCreates a software bill of materials (SBOM) report.delete-cis-scan-configurationDeletes a CIS scan configuration.delete-code-security-integrationDeletes a code security integration.delete-code-security-scan-configurationDeletes a code security scan configuration.delete-connectorDeletes a connector from your account.delete-filterDeletes a filter resource.describe-organization-configurationDescribe Amazon Inspector configuration settings for an Amazon Web Services organization.disableDisables Amazon Inspector scans for one or more Amazon Web Services accounts.disable-delegated-admin-accountDisables the Amazon Inspector delegated administrator for your organization.disassociate-memberDisassociates a member account from an Amazon Inspector delegated administrator.enableEnables Amazon Inspector scans for one or more Amazon Web Services accounts.enable-delegated-admin-accountEnables the Amazon Inspector delegated administrator for your Organizations organization.get-cis-scan-reportRetrieves a CIS scan report.get-cis-scan-result-detailsRetrieves CIS scan result details.get-clusters-for-imageReturns a list of clusters and metadata associated with an image.get-code-security-integrationRetrieves information about a code security integration.get-code-security-scanRetrieves information about a specific code security scan.get-code-security-scan-configurationRetrieves information about a code security scan configuration.get-configurationRetrieves setting configurations for Amazon Inspector scans.get-delegated-admin-accountRetrieves information about the Amazon Inspector delegated administrator for your organization.get-ec2-deep-inspection-configurationRetrieves the activation status of Amazon Inspector deep inspection and custom paths associated with your account.get-encryption-keyGets an encryption key.get-findings-report-statusGets the status of a findings report.get-memberGets member information for your organization.get-on-demand-scan-statusRetrieves the status of a specific on-demand scan for a resource.get-sbom-exportGets details of a software bill of materials (SBOM) report.list-account-permissionsLists the permissions an account has to configure Amazon Inspector.list-cis-scan-configurationsLists CIS scan configurations.list-cis-scan-results-aggregated-by-checksLists scan results aggregated by checks.list-cis-scan-results-aggregated-by-target-resourceLists scan results aggregated by a target resource.list-cis-scansReturns a CIS scan list.list-code-security-integrationsLists all code security integrations in your account.list-code-security-scan-configuration-associationsLists the associations between code repositories and Amazon Inspector code security scan configurations.list-code-security-scan-configurationsLists all code security scan configurations in your account.list-connector-scan-configurationsLists scan configurations for Amazon Web Services Config connectors.list-connectorsLists connectors in your account.list-coverageLists coverage details for your environment.list-coverage-statisticsLists Amazon Inspector coverage statistics for your environment.list-delegated-admin-accountsLists information about the Amazon Inspector delegated administrator of your organization.list-filtersLists the filters associated with your account.list-finding-aggregationsLists aggregated finding data for your environment based on specific criteria.list-findingsLists findings for your environment.list-membersList members associated with the Amazon Inspector delegated administrator for your organization.list-on-demand-scansLists the on-demand scans for a resource.list-tags-for-resourceLists all tags attached to a given resource.list-usage-totalsLists the Amazon Inspector usage totals over the last 30 days.reset-encryption-keyResets an encryption key.search-vulnerabilitiesLists Amazon Inspector coverage details for a specific vulnerability.send-cis-session-healthSends a CIS session health.send-cis-session-telemetrySends a CIS session telemetry.start-cis-sessionStarts a CIS session.start-code-security-scanInitiates a code security scan on a specified repository.start-on-demand-scanStarts an on-demand scan of the specified resource, such as an Amazon Machine Image (AMI).stop-cis-sessionStops a CIS session.tag-resourceAdds tags to a resource.untag-resourceRemoves tags from a resource.update-cis-scan-configurationUpdates a CIS scan configuration.update-code-security-integrationUpdates an existing code security integration.update-code-security-scan-configurationUpdates an existing code security scan configuration.update-configurationUpdates the scan configuration for your Amazon Inspector account.update-connectorUpdates the description or provider-specific configuration details of an existing connector.update-connector-scan-configurationUpdates scan configuration settings for resources associated with an Amazon Web Services Config connector.update-ec2-deep-inspection-configurationActivates, deactivates Amazon Inspector deep inspection, or updates custom paths for your account.update-encryption-keyUpdates an encryption key.update-filterSpecifies the action that is to be applied to the findings that match the filter.update-org-ec2-deep-inspection-configurationUpdates the Amazon Inspector deep inspection custom paths for your organization.update-organization-configurationUpdates the configurations for your Amazon Inspector organization.