Class: AWS.Inspector2

var params = {
  accountIds: [
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.batchGetAccountStatus(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    The 12-digit Amazon Web Services account IDs of the accounts to retrieve Amazon Inspector status for.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      An array of objects that provide details on the status of Amazon Inspector for each of the requested accounts.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • resourceState — required — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (map)

          An object detailing the state of Amazon Inspector scanning for Amazon EC2 resources.

          • errorCode — required — (String)

            The error code explaining why the account failed to enable Amazon Inspector.

            Possible values include:
            • "ALREADY_ENABLED"
            • "ENABLE_IN_PROGRESS"
            • "DISABLE_IN_PROGRESS"
            • "SUSPEND_IN_PROGRESS"
            • "RESOURCE_NOT_FOUND"
            • "ACCESS_DENIED"
            • "INTERNAL_ERROR"
            • "SSM_UNAVAILABLE"
            • "SSM_THROTTLED"
            • "EVENTBRIDGE_UNAVAILABLE"
            • "EVENTBRIDGE_THROTTLED"
            • "RESOURCE_SCAN_NOT_DISABLED"
            • "DISASSOCIATE_ALL_MEMBERS"
            • "ACCOUNT_IS_ISOLATED"
          • errorMessage — required — (String)

            The error message received when the account failed to enable Amazon Inspector.

          • status — required — (String)

            The status of Amazon Inspector for the account.

            Possible values include:
            • "ENABLING"
            • "ENABLED"
            • "DISABLING"
            • "DISABLED"
            • "SUSPENDING"
            • "SUSPENDED"
        • ecr — required — (map)

          An object detailing the state of Amazon Inspector scanning for Amazon ECR resources.

          • errorCode — required — (String)

            The error code explaining why the account failed to enable Amazon Inspector.

            Possible values include:
            • "ALREADY_ENABLED"
            • "ENABLE_IN_PROGRESS"
            • "DISABLE_IN_PROGRESS"
            • "SUSPEND_IN_PROGRESS"
            • "RESOURCE_NOT_FOUND"
            • "ACCESS_DENIED"
            • "INTERNAL_ERROR"
            • "SSM_UNAVAILABLE"
            • "SSM_THROTTLED"
            • "EVENTBRIDGE_UNAVAILABLE"
            • "EVENTBRIDGE_THROTTLED"
            • "RESOURCE_SCAN_NOT_DISABLED"
            • "DISASSOCIATE_ALL_MEMBERS"
            • "ACCOUNT_IS_ISOLATED"
          • errorMessage — required — (String)

            The error message received when the account failed to enable Amazon Inspector.

          • status — required — (String)

            The status of Amazon Inspector for the account.

            Possible values include:
            • "ENABLING"
            • "ENABLED"
            • "DISABLING"
            • "DISABLED"
            • "SUSPENDING"
            • "SUSPENDED"
        • lambda — (map)

          An object that described the state of Amazon Inspector scans for an account.

          • errorCode — required — (String)

            The error code explaining why the account failed to enable Amazon Inspector.

            Possible values include:
            • "ALREADY_ENABLED"
            • "ENABLE_IN_PROGRESS"
            • "DISABLE_IN_PROGRESS"
            • "SUSPEND_IN_PROGRESS"
            • "RESOURCE_NOT_FOUND"
            • "ACCESS_DENIED"
            • "INTERNAL_ERROR"
            • "SSM_UNAVAILABLE"
            • "SSM_THROTTLED"
            • "EVENTBRIDGE_UNAVAILABLE"
            • "EVENTBRIDGE_THROTTLED"
            • "RESOURCE_SCAN_NOT_DISABLED"
            • "DISASSOCIATE_ALL_MEMBERS"
            • "ACCOUNT_IS_ISOLATED"
          • errorMessage — required — (String)

            The error message received when the account failed to enable Amazon Inspector.

          • status — required — (String)

            The status of Amazon Inspector for the account.

            Possible values include:
            • "ENABLING"
            • "ENABLED"
            • "DISABLING"
            • "DISABLED"
            • "SUSPENDING"
            • "SUSPENDED"
      • state — required — (map)

        An object detailing the status of Amazon Inspector for the account.

        • errorCode — required — (String)

          The error code explaining why the account failed to enable Amazon Inspector.

          Possible values include:
          • "ALREADY_ENABLED"
          • "ENABLE_IN_PROGRESS"
          • "DISABLE_IN_PROGRESS"
          • "SUSPEND_IN_PROGRESS"
          • "RESOURCE_NOT_FOUND"
          • "ACCESS_DENIED"
          • "INTERNAL_ERROR"
          • "SSM_UNAVAILABLE"
          • "SSM_THROTTLED"
          • "EVENTBRIDGE_UNAVAILABLE"
          • "EVENTBRIDGE_THROTTLED"
          • "RESOURCE_SCAN_NOT_DISABLED"
          • "DISASSOCIATE_ALL_MEMBERS"
          • "ACCOUNT_IS_ISOLATED"
        • errorMessage — required — (String)

          The error message received when the account failed to enable Amazon Inspector.

        • status — required — (String)

          The status of Amazon Inspector for the account.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
    • failedAccounts — (Array<map>)

      An array of objects detailing any accounts that failed to enable Amazon Inspector and why.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • errorCode — required — (String)

        The error code explaining why the account failed to enable Amazon Inspector.

        Possible values include:
        • "ALREADY_ENABLED"
        • "ENABLE_IN_PROGRESS"
        • "DISABLE_IN_PROGRESS"
        • "SUSPEND_IN_PROGRESS"
        • "RESOURCE_NOT_FOUND"
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
        • "SSM_UNAVAILABLE"
        • "SSM_THROTTLED"
        • "EVENTBRIDGE_UNAVAILABLE"
        • "EVENTBRIDGE_THROTTLED"
        • "RESOURCE_SCAN_NOT_DISABLED"
        • "DISASSOCIATE_ALL_MEMBERS"
        • "ACCOUNT_IS_ISOLATED"
      • errorMessage — required — (String)

        The error message received when the account failed to enable Amazon Inspector.

      • resourceStatus — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for AWS Lambda function resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountIds: [ /* required */
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.batchGetFreeTrialInfo(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    The account IDs to get free trial status for.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      An array of objects that provide Amazon Inspector free trial details for each of the requested accounts.

      • accountId — required — (String)

        The account associated with the Amazon Inspector free trial information.

      • freeTrialInfo — required — (Array<map>)

        Contains information about the Amazon Inspector free trial for an account.

        • end — required — (Date)

          The date and time that the Amazon Inspector free trail ends for a given account.

        • start — required — (Date)

          The date and time that the Amazon Inspector free trail started for a given account.

        • status — required — (String)

          The order to sort results by.

          Possible values include:
          • "ACTIVE"
          • "INACTIVE"
        • type — required — (String)

          The type of scan covered by the Amazon Inspector free trail.

          Possible values include:
          • "EC2"
          • "ECR"
          • "LAMBDA"
    • failedAccounts — (Array<map>)

      An array of objects detailing any accounts that free trial data could not be returned for.

      • accountId — required — (String)

        The account associated with the Amazon Inspector free trial information.

      • code — required — (String)

        The error code.

        Possible values include:
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
      • message — required — (String)

        The error message returned.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportId: 'STRING_VALUE' /* required */
};
inspector2.cancelFindingsReport(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • reportId — (String)

    The ID of the report to be canceled.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • reportId — (String)

      The ID of the canceled report.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  action: NONE | SUPPRESS, /* required */
  filterCriteria: { /* required */
    awsAccountId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceImageId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceSubnetId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceVpcId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageArchitecture: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageHash: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImagePushedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    ecrImageRegistry: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageRepositoryName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageTags: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    exploitAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingStatus: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    firstObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    fixAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    inspectorScore: [
      {
        lowerInclusive: 'NUMBER_VALUE',
        upperInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    lambdaFunctionExecutionRoleArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionLastModifiedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    lambdaFunctionLayers: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionRuntime: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lastObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    networkProtocol: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    portRange: [
      {
        beginInclusive: 'NUMBER_VALUE',
        endInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    relatedVulnerabilities: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    resourceType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    severity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    title: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    updatedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    vendorSeverity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilityId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilitySource: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerablePackages: [
      {
        architecture: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        epoch: {
          lowerInclusive: 'NUMBER_VALUE',
          upperInclusive: 'NUMBER_VALUE'
        },
        name: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        release: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLambdaLayerArn: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLayerHash: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        version: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        }
      },
      /* more items */
    ]
  },
  name: 'STRING_VALUE', /* required */
  description: 'STRING_VALUE',
  reason: 'STRING_VALUE',
  tags: {
    '<MapKey>': 'STRING_VALUE',
    /* '<MapKey>': ... */
  }
};
inspector2.createFilter(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • action — (String)

    Defines the action that is to be applied to the findings that match the filter.

    Possible values include:
    • "NONE"
    • "SUPPRESS"
  • description — (String)

    A description of the filter.

  • filterCriteria — (map)

    Defines the criteria to be used in the filter for querying findings.

    • awsAccountId — (Array<map>)

      Details of the Amazon Web Services account IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentId — (Array<map>)

      Details of the component IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentType — (Array<map>)

      Details of the component types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceImageId — (Array<map>)

      Details of the Amazon EC2 instance image IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceSubnetId — (Array<map>)

      Details of the Amazon EC2 instance subnet IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceVpcId — (Array<map>)

      Details of the Amazon EC2 instance VPC IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageArchitecture — (Array<map>)

      Details of the Amazon ECR image architecture types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageHash — (Array<map>)

      Details of the Amazon ECR image hashes used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImagePushedAt — (Array<map>)

      Details on the Amazon ECR image push date and time used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • ecrImageRegistry — (Array<map>)

      Details on the Amazon ECR registry used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageRepositoryName — (Array<map>)

      Details on the name of the Amazon ECR repository used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageTags — (Array<map>)

      The tags attached to the Amazon ECR container image.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • exploitAvailable — (Array<map>)

      Filters the list of AWS Lambda findings by the availability of exploits.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingArn — (Array<map>)

      Details on the finding ARNs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingStatus — (Array<map>)

      Details on the finding status types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingType — (Array<map>)

      Details on the finding types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • firstObservedAt — (Array<map>)

      Details on the date and time a finding was first seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • fixAvailable — (Array<map>)

      Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • inspectorScore — (Array<map>)

      The Amazon Inspector score to filter on.

      • lowerInclusive — (Float)

        The lowest number to be included in the filter.

      • upperInclusive — (Float)

        The highest number to be included in the filter.

    • lambdaFunctionExecutionRoleArn — (Array<map>)

      Filters the list of AWS Lambda functions by execution role.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionLastModifiedAt — (Array<map>)

      Filters the list of AWS Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • lambdaFunctionLayers — (Array<map>)

      Filters the list of AWS Lambda functions by the function's layers. A Lambda function can have up to five layers.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionName — (Array<map>)

      Filters the list of AWS Lambda functions by the name of the function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionRuntime — (Array<map>)

      Filters the list of AWS Lambda functions by the runtime environment for the Lambda function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lastObservedAt — (Array<map>)

      Details on the date and time a finding was last seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • networkProtocol — (Array<map>)

      Details on the ingress source addresses used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • portRange — (Array<map>)

      Details on the port ranges used to filter findings.

      • beginInclusive — (Integer)

        The port number the port range begins at.

      • endInclusive — (Integer)

        The port number the port range ends at.

    • relatedVulnerabilities — (Array<map>)

      Details on the related vulnerabilities used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceId — (Array<map>)

      Details on the resource IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceTags — (Array<map>)

      Details on the resource tags used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key used in the filter.

      • value — (String)

        The tag value used in the filter.

    • resourceType — (Array<map>)

      Details on the resource types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • severity — (Array<map>)

      Details on the severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • title — (Array<map>)

      Details on the finding title used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • updatedAt — (Array<map>)

      Details on the date and time a finding was last updated at used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • vendorSeverity — (Array<map>)

      Details on the vendor severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilityId — (Array<map>)

      Details on the vulnerability ID used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilitySource — (Array<map>)

      Details on the vulnerability type used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerablePackages — (Array<map>)

      Details on the vulnerable packages used to filter findings.

      • architecture — (map)

        An object that contains details on the package architecture type to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • epoch — (map)

        An object that contains details on the package epoch to filter on.

        • lowerInclusive — (Float)

          The lowest number to be included in the filter.

        • upperInclusive — (Float)

          The highest number to be included in the filter.

      • name — (map)

        An object that contains details on the name of the package to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • release — (map)

        An object that contains details on the package release to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLambdaLayerArn — (map)

        An object that describes the details of a string filter.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLayerHash — (map)

        An object that contains details on the source layer hash to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • version — (map)

        The package version to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

  • name — (String)

    The name of the filter. Minimum length of 3. Maximum length of 64. Valid characters include alphanumeric characters, dot (.), underscore (_), and dash (-). Spaces are not allowed.

  • reason — (String)

    The reason for creating the filter.

  • tags — (map<String>)

    A list of tags for the filter.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • arn — (String)

      The Amazon Resource Number (ARN) of the successfully created filter.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportFormat: CSV | JSON, /* required */
  s3Destination: { /* required */
    bucketName: 'STRING_VALUE', /* required */
    kmsKeyArn: 'STRING_VALUE', /* required */
    keyPrefix: 'STRING_VALUE'
  },
  filterCriteria: {
    awsAccountId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceImageId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceSubnetId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceVpcId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageArchitecture: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageHash: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImagePushedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    ecrImageRegistry: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageRepositoryName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageTags: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    exploitAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingStatus: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    firstObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    fixAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    inspectorScore: [
      {
        lowerInclusive: 'NUMBER_VALUE',
        upperInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    lambdaFunctionExecutionRoleArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionLastModifiedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    lambdaFunctionLayers: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionRuntime: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lastObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    networkProtocol: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    portRange: [
      {
        beginInclusive: 'NUMBER_VALUE',
        endInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    relatedVulnerabilities: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    resourceType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    severity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    title: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    updatedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    vendorSeverity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilityId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilitySource: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerablePackages: [
      {
        architecture: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        epoch: {
          lowerInclusive: 'NUMBER_VALUE',
          upperInclusive: 'NUMBER_VALUE'
        },
        name: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        release: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLambdaLayerArn: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLayerHash: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        version: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        }
      },
      /* more items */
    ]
  }
};
inspector2.createFindingsReport(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • filterCriteria — (map)

    The filter criteria to apply to the results of the finding report.

    • awsAccountId — (Array<map>)

      Details of the Amazon Web Services account IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentId — (Array<map>)

      Details of the component IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentType — (Array<map>)

      Details of the component types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceImageId — (Array<map>)

      Details of the Amazon EC2 instance image IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceSubnetId — (Array<map>)

      Details of the Amazon EC2 instance subnet IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceVpcId — (Array<map>)

      Details of the Amazon EC2 instance VPC IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageArchitecture — (Array<map>)

      Details of the Amazon ECR image architecture types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageHash — (Array<map>)

      Details of the Amazon ECR image hashes used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImagePushedAt — (Array<map>)

      Details on the Amazon ECR image push date and time used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • ecrImageRegistry — (Array<map>)

      Details on the Amazon ECR registry used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageRepositoryName — (Array<map>)

      Details on the name of the Amazon ECR repository used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageTags — (Array<map>)

      The tags attached to the Amazon ECR container image.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • exploitAvailable — (Array<map>)

      Filters the list of AWS Lambda findings by the availability of exploits.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingArn — (Array<map>)

      Details on the finding ARNs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingStatus — (Array<map>)

      Details on the finding status types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingType — (Array<map>)

      Details on the finding types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • firstObservedAt — (Array<map>)

      Details on the date and time a finding was first seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • fixAvailable — (Array<map>)

      Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • inspectorScore — (Array<map>)

      The Amazon Inspector score to filter on.

      • lowerInclusive — (Float)

        The lowest number to be included in the filter.

      • upperInclusive — (Float)

        The highest number to be included in the filter.

    • lambdaFunctionExecutionRoleArn — (Array<map>)

      Filters the list of AWS Lambda functions by execution role.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionLastModifiedAt — (Array<map>)

      Filters the list of AWS Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • lambdaFunctionLayers — (Array<map>)

      Filters the list of AWS Lambda functions by the function's layers. A Lambda function can have up to five layers.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionName — (Array<map>)

      Filters the list of AWS Lambda functions by the name of the function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionRuntime — (Array<map>)

      Filters the list of AWS Lambda functions by the runtime environment for the Lambda function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lastObservedAt — (Array<map>)

      Details on the date and time a finding was last seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • networkProtocol — (Array<map>)

      Details on the ingress source addresses used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • portRange — (Array<map>)

      Details on the port ranges used to filter findings.

      • beginInclusive — (Integer)

        The port number the port range begins at.

      • endInclusive — (Integer)

        The port number the port range ends at.

    • relatedVulnerabilities — (Array<map>)

      Details on the related vulnerabilities used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceId — (Array<map>)

      Details on the resource IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceTags — (Array<map>)

      Details on the resource tags used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key used in the filter.

      • value — (String)

        The tag value used in the filter.

    • resourceType — (Array<map>)

      Details on the resource types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • severity — (Array<map>)

      Details on the severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • title — (Array<map>)

      Details on the finding title used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • updatedAt — (Array<map>)

      Details on the date and time a finding was last updated at used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • vendorSeverity — (Array<map>)

      Details on the vendor severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilityId — (Array<map>)

      Details on the vulnerability ID used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilitySource — (Array<map>)

      Details on the vulnerability type used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerablePackages — (Array<map>)

      Details on the vulnerable packages used to filter findings.

      • architecture — (map)

        An object that contains details on the package architecture type to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • epoch — (map)

        An object that contains details on the package epoch to filter on.

        • lowerInclusive — (Float)

          The lowest number to be included in the filter.

        • upperInclusive — (Float)

          The highest number to be included in the filter.

      • name — (map)

        An object that contains details on the name of the package to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • release — (map)

        An object that contains details on the package release to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLambdaLayerArn — (map)

        An object that describes the details of a string filter.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLayerHash — (map)

        An object that contains details on the source layer hash to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • version — (map)

        The package version to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

  • reportFormat — (String)

    The format to generate the report in.

    Possible values include:
    • "CSV"
    • "JSON"
  • s3Destination — (map)

    The Amazon S3 export destination for the report.

    • bucketName — required — (String)

      The name of the Amazon S3 bucket to export findings to.

    • keyPrefix — (String)

      The prefix of the KMS key used to export findings.

    • kmsKeyArn — required — (String)

      The ARN of the KMS key used to encrypt data when exporting findings.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • reportId — (String)

      The ID of the report.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  arn: 'STRING_VALUE' /* required */
};
inspector2.deleteFilter(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • arn — (String)

    The Amazon Resource Number (ARN) of the filter to be deleted.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • arn — (String)

      The Amazon Resource Number (ARN) of the filter that has been deleted.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
};
inspector2.describeOrganizationConfiguration(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {})

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • autoEnable — (map)

      The scan types are automatically enabled for new members of your organization.

      • ec2 — required — (Boolean)

        Represents whether Amazon EC2 scans are automatically enabled for new members of your Amazon Inspector organization.

      • ecr — required — (Boolean)

        Represents whether Amazon ECR scans are automatically enabled for new members of your Amazon Inspector organization.

      • lambda — (Boolean)

        Represents whether AWS Lambda scans are automatically enabled for new members of your Amazon Inspector organization.

    • maxAccountLimitReached — (Boolean)

      Represents whether your organization has reached the maximum Amazon Web Services account limit for Amazon Inspector.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountIds: [
    'STRING_VALUE',
    /* more items */
  ],
  resourceTypes: [
    EC2 | ECR | LAMBDA,
    /* more items */
  ]
};
inspector2.disable(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    An array of account IDs you want to disable Amazon Inspector scans for.

  • resourceTypes — (Array<String>)

    The resource scan types you want to disable.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      Information on the accounts that have had Amazon Inspector scans successfully disabled. Details are provided for each account.

      • accountId — required — (String)

        The ID of the Amazon Web Services account.

      • resourceStatus — required — (map)

        Details of the status of Amazon Inspector scans by resource type.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for AWS Lambda function resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — required — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"
    • failedAccounts — (Array<map>)

      Information on any accounts for which Amazon Inspector scans could not be disabled. Details are provided for each account.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • errorCode — required — (String)

        The error code explaining why the account failed to enable Amazon Inspector.

        Possible values include:
        • "ALREADY_ENABLED"
        • "ENABLE_IN_PROGRESS"
        • "DISABLE_IN_PROGRESS"
        • "SUSPEND_IN_PROGRESS"
        • "RESOURCE_NOT_FOUND"
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
        • "SSM_UNAVAILABLE"
        • "SSM_THROTTLED"
        • "EVENTBRIDGE_UNAVAILABLE"
        • "EVENTBRIDGE_THROTTLED"
        • "RESOURCE_SCAN_NOT_DISABLED"
        • "DISASSOCIATE_ALL_MEMBERS"
        • "ACCOUNT_IS_ISOLATED"
      • errorMessage — required — (String)

        The error message received when the account failed to enable Amazon Inspector.

      • resourceStatus — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for AWS Lambda function resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  delegatedAdminAccountId: 'STRING_VALUE' /* required */
};
inspector2.disableDelegatedAdminAccount(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • delegatedAdminAccountId — (String)

    The Amazon Web Services account ID of the current Amazon Inspector delegated administrator.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • delegatedAdminAccountId — (String)

      The Amazon Web Services account ID of the successfully disabled delegated administrator.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountId: 'STRING_VALUE' /* required */
};
inspector2.disassociateMember(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountId — (String)

    The Amazon Web Services account ID of the member account to disassociate.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accountId — (String)

      The Amazon Web Services account ID of the successfully disassociated member.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  resourceTypes: [ /* required */
    EC2 | ECR | LAMBDA,
    /* more items */
  ],
  accountIds: [
    'STRING_VALUE',
    /* more items */
  ],
  clientToken: 'STRING_VALUE'
};
inspector2.enable(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    A list of account IDs you want to enable Amazon Inspector scans for.

  • clientToken — (String)

    The idempotency token for the request.

    If a token is not provided, the SDK will use a version 4 UUID.
  • resourceTypes — (Array<String>)

    The resource scan types you want to enable.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      Information on the accounts that have had Amazon Inspector scans successfully enabled. Details are provided for each account.

      • accountId — required — (String)

        The ID of the Amazon Web Services account.

      • resourceStatus — required — (map)

        Details of the status of Amazon Inspector scans by resource type.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for AWS Lambda function resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — required — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"
    • failedAccounts — (Array<map>)

      Information on any accounts for which Amazon Inspector scans could not be enabled. Details are provided for each account.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • errorCode — required — (String)

        The error code explaining why the account failed to enable Amazon Inspector.

        Possible values include:
        • "ALREADY_ENABLED"
        • "ENABLE_IN_PROGRESS"
        • "DISABLE_IN_PROGRESS"
        • "SUSPEND_IN_PROGRESS"
        • "RESOURCE_NOT_FOUND"
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
        • "SSM_UNAVAILABLE"
        • "SSM_THROTTLED"
        • "EVENTBRIDGE_UNAVAILABLE"
        • "EVENTBRIDGE_THROTTLED"
        • "RESOURCE_SCAN_NOT_DISABLED"
        • "DISASSOCIATE_ALL_MEMBERS"
        • "ACCOUNT_IS_ISOLATED"
      • errorMessage — required — (String)

        The error message received when the account failed to enable Amazon Inspector.

      • resourceStatus — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for AWS Lambda function resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  delegatedAdminAccountId: 'STRING_VALUE', /* required */
  clientToken: 'STRING_VALUE'
};
inspector2.enableDelegatedAdminAccount(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • clientToken — (String)

    The idempotency token for the request.

    If a token is not provided, the SDK will use a version 4 UUID.
  • delegatedAdminAccountId — (String)

    The Amazon Web Services account ID of the Amazon Inspector delegated administrator.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • delegatedAdminAccountId — (String)

      The Amazon Web Services account ID of the successfully Amazon Inspector delegated administrator.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
};
inspector2.getConfiguration(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {})

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • ecrConfiguration — (map)

      Specifies how the ECR automated re-scan duration is currently configured for your environment.

      • rescanDurationState — (map)

        An object that contains details about the state of the ECR automated re-scan setting.

        • rescanDuration — (String)

          The ECR automated re-scan duration defines how long an ECR image will be actively scanned by Amazon Inspector. When the number of days since an image was last pushed exceeds the automated re-scan duration the monitoring state of that image becomes inactive and all associated findings are scheduled for closure.

          Possible values include:
          • "LIFETIME"
          • "DAYS_30"
          • "DAYS_180"
        • status — (String)

          The status of changes to the ECR automated re-scan duration.

          Possible values include:
          • "SUCCESS"
          • "PENDING"
          • "FAILED"
        • updatedAt — (Date)

          A timestamp representing when the last time the ECR scan duration setting was changed.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
};
inspector2.getDelegatedAdminAccount(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {})

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • delegatedAdmin — (map)

      The Amazon Web Services account ID of the Amazon Inspector delegated administrator.

      • accountId — (String)

        The Amazon Web Services account ID of the Amazon Inspector delegated administrator for your organization.

      • relationshipStatus — (String)

        The status of the Amazon Inspector delegated administrator.

        Possible values include:
        • "CREATED"
        • "INVITED"
        • "DISABLED"
        • "ENABLED"
        • "REMOVED"
        • "RESIGNED"
        • "DELETED"
        • "EMAIL_VERIFICATION_IN_PROGRESS"
        • "EMAIL_VERIFICATION_FAILED"
        • "REGION_DISABLED"
        • "ACCOUNT_SUSPENDED"
        • "CANNOT_CREATE_DETECTOR_IN_ORG_MASTER"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportId: 'STRING_VALUE'
};
inspector2.getFindingsReportStatus(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • reportId — (String)

    The ID of the report to retrieve the status of.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • destination — (map)

      The destination of the report.

      • bucketName — required — (String)

        The name of the Amazon S3 bucket to export findings to.

      • keyPrefix — (String)

        The prefix of the KMS key used to export findings.

      • kmsKeyArn — required — (String)

        The ARN of the KMS key used to encrypt data when exporting findings.

    • errorCode — (String)

      The error code of the report.

      Possible values include:
      • "INTERNAL_ERROR"
      • "INVALID_PERMISSIONS"
      • "NO_FINDINGS_FOUND"
      • "BUCKET_NOT_FOUND"
      • "INCOMPATIBLE_BUCKET_REGION"
      • "MALFORMED_KMS_KEY"
    • errorMessage — (String)

      The error message of the report.

    • filterCriteria — (map)

      The filter criteria associated with the report.

      • awsAccountId — (Array<map>)

        Details of the Amazon Web Services account IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • componentId — (Array<map>)

        Details of the component IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • componentType — (Array<map>)

        Details of the component types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ec2InstanceImageId — (Array<map>)

        Details of the Amazon EC2 instance image IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ec2InstanceSubnetId — (Array<map>)

        Details of the Amazon EC2 instance subnet IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ec2InstanceVpcId — (Array<map>)

        Details of the Amazon EC2 instance VPC IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageArchitecture — (Array<map>)

        Details of the Amazon ECR image architecture types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageHash — (Array<map>)

        Details of the Amazon ECR image hashes used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImagePushedAt — (Array<map>)

        Details on the Amazon ECR image push date and time used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • ecrImageRegistry — (Array<map>)

        Details on the Amazon ECR registry used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageRepositoryName — (Array<map>)

        Details on the name of the Amazon ECR repository used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageTags — (Array<map>)

        The tags attached to the Amazon ECR container image.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • exploitAvailable — (Array<map>)

        Filters the list of AWS Lambda findings by the availability of exploits.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • findingArn — (Array<map>)

        Details on the finding ARNs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • findingStatus — (Array<map>)

        Details on the finding status types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • findingType — (Array<map>)

        Details on the finding types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • firstObservedAt — (Array<map>)

        Details on the date and time a finding was first seen used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • fixAvailable — (Array<map>)

        Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • inspectorScore — (Array<map>)

        The Amazon Inspector score to filter on.

        • lowerInclusive — (Float)

          The lowest number to be included in the filter.

        • upperInclusive — (Float)

          The highest number to be included in the filter.

      • lambdaFunctionExecutionRoleArn — (Array<map>)

        Filters the list of AWS Lambda functions by execution role.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lambdaFunctionLastModifiedAt — (Array<map>)

        Filters the list of AWS Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • lambdaFunctionLayers — (Array<map>)

        Filters the list of AWS Lambda functions by the function's layers. A Lambda function can have up to five layers.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lambdaFunctionName — (Array<map>)

        Filters the list of AWS Lambda functions by the name of the function.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lambdaFunctionRuntime — (Array<map>)

        Filters the list of AWS Lambda functions by the runtime environment for the Lambda function.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lastObservedAt — (Array<map>)

        Details on the date and time a finding was last seen used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • networkProtocol — (Array<map>)

        Details on the ingress source addresses used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • portRange — (Array<map>)

        Details on the port ranges used to filter findings.

        • beginInclusive — (Integer)

          The port number the port range begins at.

        • endInclusive — (Integer)

          The port number the port range ends at.

      • relatedVulnerabilities — (Array<map>)

        Details on the related vulnerabilities used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • resourceId — (Array<map>)

        Details on the resource IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • resourceTags — (Array<map>)

        Details on the resource tags used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
        • key — required — (String)

          The tag key used in the filter.

        • value — (String)

          The tag value used in the filter.

      • resourceType — (Array<map>)

        Details on the resource types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • severity — (Array<map>)

        Details on the severity used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • title — (Array<map>)

        Details on the finding title used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • updatedAt — (Array<map>)

        Details on the date and time a finding was last updated at used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • vendorSeverity — (Array<map>)

        Details on the vendor severity used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • vulnerabilityId — (Array<map>)

        Details on the vulnerability ID used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • vulnerabilitySource — (Array<map>)

        Details on the vulnerability type used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • vulnerablePackages — (Array<map>)

        Details on the vulnerable packages used to filter findings.

        • architecture — (map)

          An object that contains details on the package architecture type to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • epoch — (map)

          An object that contains details on the package epoch to filter on.

          • lowerInclusive — (Float)

            The lowest number to be included in the filter.

          • upperInclusive — (Float)

            The highest number to be included in the filter.

        • name — (map)

          An object that contains details on the name of the package to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • release — (map)

          An object that contains details on the package release to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • sourceLambdaLayerArn — (map)

          An object that describes the details of a string filter.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • sourceLayerHash — (map)

          An object that contains details on the source layer hash to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • version — (map)

          The package version to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

    • reportId — (String)

      The ID of the report.

    • status — (String)

      The status of the report.

      Possible values include:
      • "SUCCEEDED"
      • "IN_PROGRESS"
      • "CANCELLED"
      • "FAILED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountId: 'STRING_VALUE' /* required */
};
inspector2.getMember(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountId — (String)

    The Amazon Web Services account ID of the member account to retrieve information on.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • member — (map)

      Details of the retrieved member account.

      • accountId — (String)

        The Amazon Web Services account ID of the member account.

      • delegatedAdminAccountId — (String)

        The Amazon Web Services account ID of the Amazon Inspector delegated administrator for this member account.

      • relationshipStatus — (String)

        The status of the member account.

        Possible values include:
        • "CREATED"
        • "INVITED"
        • "DISABLED"
        • "ENABLED"
        • "REMOVED"
        • "RESIGNED"
        • "DELETED"
        • "EMAIL_VERIFICATION_IN_PROGRESS"
        • "EMAIL_VERIFICATION_FAILED"
        • "REGION_DISABLED"
        • "ACCOUNT_SUSPENDED"
        • "CANNOT_CREATE_DETECTOR_IN_ORG_MASTER"
      • updatedAt — (Date)

        A timestamp showing when the status of this member was last updated.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  maxResults: 'NUMBER_VALUE',
  nextToken: 'STRING_VALUE',
  service: EC2 | ECR | LAMBDA
};
inspector2.listAccountPermissions(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • maxResults — (Integer)

    The maximum number of results to return in the response.

  • nextToken — (String)

    A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

  • service — (String)

    The service scan type to check permissions for.

    Possible values include:
    • "EC2"
    • "ECR"
    • "LAMBDA"

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • nextToken — (String)

      A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

    • permissions — (Array<map>)

      Contains details on the permissions an account has to configure Amazon Inspector.

      • operation — required — (String)

        The operations that can be performed with the given permissions.

        Possible values include:
        • "ENABLE_SCANNING"
        • "DISABLE_SCANNING"
        • "ENABLE_REPOSITORY"
        • "DISABLE_REPOSITORY"
      • service — required — (String)

        The services that the permissions allow an account to perform the given operations for.

        Possible values include:
        • "EC2"
        • "ECR"
        • "LAMBDA"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  filterCriteria: {
    accountId: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    ecrImageTags: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrRepositoryName: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionName: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionRuntime: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    resourceId: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceType: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    scanStatusCode: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    scanStatusReason: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    scanType: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ]
  },
  maxResults: 'NUMBER_VALUE',
  nextToken: 'STRING_VALUE'
};
inspector2.listCoverage(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • filterCriteria — (map)

    An object that contains details on the filters to apply to the coverage data for your environment.

    • accountId — (Array<map>)

      An array of Amazon Web Services account IDs to return coverage statistics for.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • ec2InstanceTags — (Array<map>)

      The Amazon EC2 instance tags to filter on.

      • comparison — required — (String)

        The operator to compare coverage on.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key associated with the coverage map filter.

      • value — (String)

        The tag value associated with the coverage map filter.

    • ecrImageTags — (Array<map>)

      The Amazon ECR image tags to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • ecrRepositoryName — (Array<map>)

      The Amazon ECR repository name to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • lambdaFunctionName — (Array<map>)

      Returns coverage statistics for AWS Lambda functions filtered by function names.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • lambdaFunctionRuntime — (Array<map>)

      Returns coverage statistics for AWS Lambda functions filtered by runtime.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • lambdaFunctionTags — (Array<map>)

      Returns coverage statistics for AWS Lambda functions filtered by tag.

      • comparison — required — (String)

        The operator to compare coverage on.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key associated with the coverage map filter.

      • value — (String)

        The tag value associated with the coverage map filter.

    • resourceId — (Array<map>)

      An array of Amazon Web Services resource IDs to return coverage statistics for.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • resourceType — (Array<map>)

      An array of Amazon Web Services resource types to return coverage statistics for. The values can be AWS_EC2_INSTANCE or AWS_ECR_REPOSITORY.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • scanStatusCode — (Array<map>)

      The scan status code to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • scanStatusReason — (Array<map>)

      The scan status reason to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • scanType — (Array<map>)

      An array of Amazon Inspector scan types to return coverage statistics for.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

  • maxResults — (Integer)

    The maximum number of results to return in the response.

  • nextToken — (String)

    A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • coveredResources — (Array<map>)

      An object that contains details on the covered resources in your environment.

      • accountId — required — (String)

        The Amazon Web Services account ID of the covered resource.

      • resourceId — required — (String)

        The ID of the covered resource.

      • resourceMetadata — (map)

        An object that contains details about the metadata.

        • ec2 — (map)

          An object that contains metadata details for an Amazon EC2 instance.

          • amiId — (String)

            The ID of the Amazon Machine Image (AMI) used to launch the instance.

          • platform — (String)

            The platform of the instance.

            Possible values include:
            • "WINDOWS"
            • "LINUX"
            • "UNKNOWN"
          • tags — (map<String>)

            The tags attached to the instance.

        • ecrImage — (map)

          An object that contains details about the container metadata for an Amazon ECR image.

          • tags — (Array<String>)

            Tags associated with the Amazon ECR image metadata.

        • ecrRepository — (map)

          An object that contains details about the repository an Amazon ECR image resides in.

          • name — (String)

            The name of the Amazon ECR repository.

          • scanFrequency — (String)

            The frequency of scans.

            Possible values include:
            • "MANUAL"
            • "SCAN_ON_PUSH"
            • "CONTINUOUS_SCAN"
        • lambdaFunction — (map)

          An object that contains metadata details for an AWS Lambda function.

          • functionName — (String)

            The name of a function.

          • functionTags — (map<String>)

            The resource tags on an AWS Lambda function.

          • layers — (Array<String>)

            The layers for an AWS Lambda function. A Lambda function can have up to five layers.

          • runtime — (String)

            An AWS Lambda function's runtime.

            Possible values include:
            • "NODEJS"
            • "NODEJS_12_X"
            • "NODEJS_14_X"
            • "NODEJS_16_X"
            • "JAVA_8"
            • "JAVA_8_AL2"
            • "JAVA_11"
            • "PYTHON_3_7"
            • "PYTHON_3_8"
            • "PYTHON_3_9"
            • "UNSUPPORTED"
            • "NODEJS_18_X"
            • "GO_1_X"
      • resourceType — required — (String)

        The type of the covered resource.

        Possible values include:
        • "AWS_EC2_INSTANCE"
        • "AWS_ECR_CONTAINER_IMAGE"
        • "AWS_ECR_REPOSITORY"
        • "AWS_LAMBDA_FUNCTION"
      • scanStatus — (map)

        The status of the scan covering the resource.

        • reason — required — (String)

          The reason for the scan.

          Possible values include:
          • "PENDING_INITIAL_SCAN"
          • "ACCESS_DENIED"
          • "INTERNAL_ERROR"
          • "UNMANAGED_EC2_INSTANCE"
          • "UNSUPPORTED_OS"
          • "SCAN_ELIGIBILITY_EXPIRED"
          • "RESOURCE_TERMINATED"
          • "SUCCESSFUL"
          • "NO_RESOURCES_FOUND"
          • "IMAGE_SIZE_EXCEEDED"
          • "SCAN_FREQUENCY_MANUAL"
          • "SCAN_FREQUENCY_SCAN_ON_PUSH"
          • "EC2_INSTANCE_STOPPED"
          • "PENDING_DISABLE"
          • "NO_INVENTORY"
          • "STALE_INVENTORY"
          • "EXCLUDED_BY_TAG"
          • "UNSUPPORTED_RUNTIME"
        • statusCode — required — (String)

          The status code of the scan.

          Possible values include:
          • "ACTIVE"
          • "INACTIVE"
      • scanType — required — (String)

        The Amazon Inspector scan type covering the resource.

        Possible values include:
        • "NETWORK"
        • "PACKAGE"
    • nextToken — (String)

      A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  filterCriteria: {
    accountId: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    ecrImageTags: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrRepositoryName: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionName: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionRuntime: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    resourceId: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceType: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    scanStatusCode: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    scanStatusReason: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    scanType: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ]
  },
  groupBy: SCAN_STATUS_CODE | SCAN_STATUS_REASON | ACCOUNT_ID | RESOURCE_TYPE | ECR_REPOSITORY_NAME,
  nextToken: 'STRING_VALUE'
};
inspector2.listCoverageStatistics(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • filterCriteria — (map)

    An object that contains details on the filters to apply to the coverage data for your environment.

    • accountId — (Array<map>)

      An array of Amazon Web Services account IDs to return coverage statistics for.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • ec2InstanceTags — (Array<map>)

      The Amazon EC2 instance tags to filter on.

      • comparison — required — (String)

        The operator to compare coverage on.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key associated with the coverage map filter.

      • value — (String)

        The tag value associated with the coverage map filter.

    • ecrImageTags — (Array<map>)

      The Amazon ECR image tags to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • ecrRepositoryName — (Array<map>)

      The Amazon ECR repository name to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • lambdaFunctionName — (Array<map>)

      Returns coverage statistics for AWS Lambda functions filtered by function names.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • lambdaFunctionRuntime — (Array<map>)

      Returns coverage statistics for AWS Lambda functions filtered by runtime.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • lambdaFunctionTags — (Array<map>)

      Returns coverage statistics for AWS Lambda functions filtered by tag.

      • comparison — required — (String)

        The operator to compare coverage on.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key associated with the coverage map filter.

      • value — (String)

        The tag value associated with the coverage map filter.

    • resourceId — (Array<map>)

      An array of Amazon Web Services resource IDs to return coverage statistics for.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • resourceType — (Array<map>)

      An array of Amazon Web Services resource types to return coverage statistics for. The values can be AWS_EC2_INSTANCE or AWS_ECR_REPOSITORY.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • scanStatusCode — (Array<map>)

      The scan status code to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • scanStatusReason — (Array<map>)

      The scan status reason to filter on.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

    • scanType — (Array<map>)

      An array of Amazon Inspector scan types to return coverage statistics for.

      • comparison — required — (String)

        The operator to compare strings on.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to compare strings on.

  • groupBy — (String)

    The value to group the results by.

    Possible values include:
    • "SCAN_STATUS_CODE"
    • "SCAN_STATUS_REASON"
    • "ACCOUNT_ID"
    • "RESOURCE_TYPE"
    • "ECR_REPOSITORY_NAME"
  • nextToken — (String)

    A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • countsByGroup — (Array<map>)

      An array with the number for each group.

      • count — (Integer)

        The number of resources.

      • groupKey — (String)

        The key associated with this group

        Possible values include:
        • "SCAN_STATUS_CODE"
        • "SCAN_STATUS_REASON"
        • "ACCOUNT_ID"
        • "RESOURCE_TYPE"
        • "ECR_REPOSITORY_NAME"
    • nextToken — (String)

      A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

    • totalCounts — (Integer)

      The total number for all groups.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  maxResults: 'NUMBER_VALUE',
  nextToken: 'STRING_VALUE'
};
inspector2.listDelegatedAdminAccounts(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • maxResults — (Integer)

    The maximum number of results to return in the response.

  • nextToken — (String)

    A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • delegatedAdminAccounts — (Array<map>)

      Details of the Amazon Inspector delegated administrator of your organization.

      • accountId — (String)

        The Amazon Web Services account ID of the Amazon Inspector delegated administrator for your organization.

      • status — (String)

        The status of the Amazon Inspector delegated administrator.

        Possible values include:
        • "ENABLED"
        • "DISABLE_IN_PROGRESS"
    • nextToken — (String)

      A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  action: NONE | SUPPRESS,
  arns: [
    'STRING_VALUE',
    /* more items */
  ],
  maxResults: 'NUMBER_VALUE',
  nextToken: 'STRING_VALUE'
};
inspector2.listFilters(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • action — (String)

    The action the filter applies to matched findings.

    Possible values include:
    • "NONE"
    • "SUPPRESS"
  • arns — (Array<String>)

    The Amazon resource number (ARN) of the filter.

  • maxResults — (Integer)

    The maximum number of results to return in the response.

  • nextToken — (String)

    A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • filters — (Array<map>)

      Contains details on the filters associated with your account.

      • action — required — (String)

        The action that is to be applied to the findings that match the filter.

        Possible values include:
        • "NONE"
        • "SUPPRESS"
      • arn — required — (String)

        The Amazon Resource Number (ARN) associated with this filter.

      • createdAt — required — (Date)

        The date and time this filter was created at.

      • criteria — required — (map)

        Details on the filter criteria associated with this filter.

        • awsAccountId — (Array<map>)

          Details of the Amazon Web Services account IDs used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • componentId — (Array<map>)

          Details of the component IDs used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • componentType — (Array<map>)

          Details of the component types used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ec2InstanceImageId — (Array<map>)

          Details of the Amazon EC2 instance image IDs used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ec2InstanceSubnetId — (Array<map>)

          Details of the Amazon EC2 instance subnet IDs used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ec2InstanceVpcId — (Array<map>)

          Details of the Amazon EC2 instance VPC IDs used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ecrImageArchitecture — (Array<map>)

          Details of the Amazon ECR image architecture types used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ecrImageHash — (Array<map>)

          Details of the Amazon ECR image hashes used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ecrImagePushedAt — (Array<map>)

          Details on the Amazon ECR image push date and time used to filter findings.

          • endInclusive — (Date)

            A timestamp representing the end of the time period filtered on.

          • startInclusive — (Date)

            A timestamp representing the start of the time period filtered on.

        • ecrImageRegistry — (Array<map>)

          Details on the Amazon ECR registry used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ecrImageRepositoryName — (Array<map>)

          Details on the name of the Amazon ECR repository used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • ecrImageTags — (Array<map>)

          The tags attached to the Amazon ECR container image.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • exploitAvailable — (Array<map>)

          Filters the list of AWS Lambda findings by the availability of exploits.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • findingArn — (Array<map>)

          Details on the finding ARNs used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • findingStatus — (Array<map>)

          Details on the finding status types used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • findingType — (Array<map>)

          Details on the finding types used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • firstObservedAt — (Array<map>)

          Details on the date and time a finding was first seen used to filter findings.

          • endInclusive — (Date)

            A timestamp representing the end of the time period filtered on.

          • startInclusive — (Date)

            A timestamp representing the start of the time period filtered on.

        • fixAvailable — (Array<map>)

          Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • inspectorScore — (Array<map>)

          The Amazon Inspector score to filter on.

          • lowerInclusive — (Float)

            The lowest number to be included in the filter.

          • upperInclusive — (Float)

            The highest number to be included in the filter.

        • lambdaFunctionExecutionRoleArn — (Array<map>)

          Filters the list of AWS Lambda functions by execution role.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • lambdaFunctionLastModifiedAt — (Array<map>)

          Filters the list of AWS Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format

          • endInclusive — (Date)

            A timestamp representing the end of the time period filtered on.

          • startInclusive — (Date)

            A timestamp representing the start of the time period filtered on.

        • lambdaFunctionLayers — (Array<map>)

          Filters the list of AWS Lambda functions by the function's layers. A Lambda function can have up to five layers.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • lambdaFunctionName — (Array<map>)

          Filters the list of AWS Lambda functions by the name of the function.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • lambdaFunctionRuntime — (Array<map>)

          Filters the list of AWS Lambda functions by the runtime environment for the Lambda function.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • lastObservedAt — (Array<map>)

          Details on the date and time a finding was last seen used to filter findings.

          • endInclusive — (Date)

            A timestamp representing the end of the time period filtered on.

          • startInclusive — (Date)

            A timestamp representing the start of the time period filtered on.

        • networkProtocol — (Array<map>)

          Details on the ingress source addresses used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • portRange — (Array<map>)

          Details on the port ranges used to filter findings.

          • beginInclusive — (Integer)

            The port number the port range begins at.

          • endInclusive — (Integer)

            The port number the port range ends at.

        • relatedVulnerabilities — (Array<map>)

          Details on the related vulnerabilities used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • resourceId — (Array<map>)

          Details on the resource IDs used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • resourceTags — (Array<map>)

          Details on the resource tags used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
          • key — required — (String)

            The tag key used in the filter.

          • value — (String)

            The tag value used in the filter.

        • resourceType — (Array<map>)

          Details on the resource types used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • severity — (Array<map>)

          Details on the severity used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • title — (Array<map>)

          Details on the finding title used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • updatedAt — (Array<map>)

          Details on the date and time a finding was last updated at used to filter findings.

          • endInclusive — (Date)

            A timestamp representing the end of the time period filtered on.

          • startInclusive — (Date)

            A timestamp representing the start of the time period filtered on.

        • vendorSeverity — (Array<map>)

          Details on the vendor severity used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • vulnerabilityId — (Array<map>)

          Details on the vulnerability ID used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • vulnerabilitySource — (Array<map>)

          Details on the vulnerability type used to filter findings.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • vulnerablePackages — (Array<map>)

          Details on the vulnerable packages used to filter findings.

          • architecture — (map)

            An object that contains details on the package architecture type to filter on.

            • comparison — required — (String)

              The operator to use when comparing values in the filter.

              Possible values include:
              • "EQUALS"
              • "PREFIX"
              • "NOT_EQUALS"
            • value — required — (String)

              The value to filter on.

          • epoch — (map)

            An object that contains details on the package epoch to filter on.

            • lowerInclusive — (Float)

              The lowest number to be included in the filter.

            • upperInclusive — (Float)

              The highest number to be included in the filter.

          • name — (map)

            An object that contains details on the name of the package to filter on.

            • comparison — required — (String)

              The operator to use when comparing values in the filter.

              Possible values include:
              • "EQUALS"
              • "PREFIX"
              • "NOT_EQUALS"
            • value — required — (String)

              The value to filter on.

          • release — (map)

            An object that contains details on the package release to filter on.

            • comparison — required — (String)

              The operator to use when comparing values in the filter.

              Possible values include:
              • "EQUALS"
              • "PREFIX"
              • "NOT_EQUALS"
            • value — required — (String)

              The value to filter on.

          • sourceLambdaLayerArn — (map)

            An object that describes the details of a string filter.

            • comparison — required — (String)

              The operator to use when comparing values in the filter.

              Possible values include:
              • "EQUALS"
              • "PREFIX"
              • "NOT_EQUALS"
            • value — required — (String)

              The value to filter on.

          • sourceLayerHash — (map)

            An object that contains details on the source layer hash to filter on.

            • comparison — required — (String)

              The operator to use when comparing values in the filter.

              Possible values include:
              • "EQUALS"
              • "PREFIX"
              • "NOT_EQUALS"
            • value — required — (String)

              The value to filter on.

          • version — (map)

            The package version to filter on.

            • comparison — required — (String)

              The operator to use when comparing values in the filter.

              Possible values include:
              • "EQUALS"
              • "PREFIX"
              • "NOT_EQUALS"
            • value — required — (String)

              The value to filter on.

      • description — (String)

        A description of the filter.

      • name — required — (String)

        The name of the filter.

      • ownerId — required — (String)

        The Amazon Web Services account ID of the account that created the filter.

      • reason — (String)

        The reason for the filter.

      • tags — (map<String>)

        The tags attached to the filter.

      • updatedAt — required — (Date)

        The date and time the filter was last updated at.

    • nextToken — (String)

      A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.