Class: AWS.Inspector2

var params = {
  accountIds: [
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.batchGetAccountStatus(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    The 12-digit Amazon Web Services account IDs of the accounts to retrieve Amazon Inspector status for.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      An array of objects that provide details on the status of Amazon Inspector for each of the requested accounts.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • resourceState — required — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (map)

          An object detailing the state of Amazon Inspector scanning for Amazon EC2 resources.

          • errorCode — required — (String)

            The error code explaining why the account failed to enable Amazon Inspector.

            Possible values include:
            • "ALREADY_ENABLED"
            • "ENABLE_IN_PROGRESS"
            • "DISABLE_IN_PROGRESS"
            • "SUSPEND_IN_PROGRESS"
            • "RESOURCE_NOT_FOUND"
            • "ACCESS_DENIED"
            • "INTERNAL_ERROR"
            • "SSM_UNAVAILABLE"
            • "SSM_THROTTLED"
            • "EVENTBRIDGE_UNAVAILABLE"
            • "EVENTBRIDGE_THROTTLED"
            • "RESOURCE_SCAN_NOT_DISABLED"
            • "DISASSOCIATE_ALL_MEMBERS"
            • "ACCOUNT_IS_ISOLATED"
            • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
            • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
          • errorMessage — required — (String)

            The error message received when the account failed to enable Amazon Inspector.

          • status — required — (String)

            The status of Amazon Inspector for the account.

            Possible values include:
            • "ENABLING"
            • "ENABLED"
            • "DISABLING"
            • "DISABLED"
            • "SUSPENDING"
            • "SUSPENDED"
        • ecr — required — (map)

          An object detailing the state of Amazon Inspector scanning for Amazon ECR resources.

          • errorCode — required — (String)

            The error code explaining why the account failed to enable Amazon Inspector.

            Possible values include:
            • "ALREADY_ENABLED"
            • "ENABLE_IN_PROGRESS"
            • "DISABLE_IN_PROGRESS"
            • "SUSPEND_IN_PROGRESS"
            • "RESOURCE_NOT_FOUND"
            • "ACCESS_DENIED"
            • "INTERNAL_ERROR"
            • "SSM_UNAVAILABLE"
            • "SSM_THROTTLED"
            • "EVENTBRIDGE_UNAVAILABLE"
            • "EVENTBRIDGE_THROTTLED"
            • "RESOURCE_SCAN_NOT_DISABLED"
            • "DISASSOCIATE_ALL_MEMBERS"
            • "ACCOUNT_IS_ISOLATED"
            • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
            • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
          • errorMessage — required — (String)

            The error message received when the account failed to enable Amazon Inspector.

          • status — required — (String)

            The status of Amazon Inspector for the account.

            Possible values include:
            • "ENABLING"
            • "ENABLED"
            • "DISABLING"
            • "DISABLED"
            • "SUSPENDING"
            • "SUSPENDED"
        • lambda — (map)

          An object that described the state of Amazon Inspector scans for an account.

          • errorCode — required — (String)

            The error code explaining why the account failed to enable Amazon Inspector.

            Possible values include:
            • "ALREADY_ENABLED"
            • "ENABLE_IN_PROGRESS"
            • "DISABLE_IN_PROGRESS"
            • "SUSPEND_IN_PROGRESS"
            • "RESOURCE_NOT_FOUND"
            • "ACCESS_DENIED"
            • "INTERNAL_ERROR"
            • "SSM_UNAVAILABLE"
            • "SSM_THROTTLED"
            • "EVENTBRIDGE_UNAVAILABLE"
            • "EVENTBRIDGE_THROTTLED"
            • "RESOURCE_SCAN_NOT_DISABLED"
            • "DISASSOCIATE_ALL_MEMBERS"
            • "ACCOUNT_IS_ISOLATED"
            • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
            • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
          • errorMessage — required — (String)

            The error message received when the account failed to enable Amazon Inspector.

          • status — required — (String)

            The status of Amazon Inspector for the account.

            Possible values include:
            • "ENABLING"
            • "ENABLED"
            • "DISABLING"
            • "DISABLED"
            • "SUSPENDING"
            • "SUSPENDED"
        • lambdaCode — (map)

          An object that described the state of Amazon Inspector scans for an account.

          • errorCode — required — (String)

            The error code explaining why the account failed to enable Amazon Inspector.

            Possible values include:
            • "ALREADY_ENABLED"
            • "ENABLE_IN_PROGRESS"
            • "DISABLE_IN_PROGRESS"
            • "SUSPEND_IN_PROGRESS"
            • "RESOURCE_NOT_FOUND"
            • "ACCESS_DENIED"
            • "INTERNAL_ERROR"
            • "SSM_UNAVAILABLE"
            • "SSM_THROTTLED"
            • "EVENTBRIDGE_UNAVAILABLE"
            • "EVENTBRIDGE_THROTTLED"
            • "RESOURCE_SCAN_NOT_DISABLED"
            • "DISASSOCIATE_ALL_MEMBERS"
            • "ACCOUNT_IS_ISOLATED"
            • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
            • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
          • errorMessage — required — (String)

            The error message received when the account failed to enable Amazon Inspector.

          • status — required — (String)

            The status of Amazon Inspector for the account.

            Possible values include:
            • "ENABLING"
            • "ENABLED"
            • "DISABLING"
            • "DISABLED"
            • "SUSPENDING"
            • "SUSPENDED"
      • state — required — (map)

        An object detailing the status of Amazon Inspector for the account.

        • errorCode — required — (String)

          The error code explaining why the account failed to enable Amazon Inspector.

          Possible values include:
          • "ALREADY_ENABLED"
          • "ENABLE_IN_PROGRESS"
          • "DISABLE_IN_PROGRESS"
          • "SUSPEND_IN_PROGRESS"
          • "RESOURCE_NOT_FOUND"
          • "ACCESS_DENIED"
          • "INTERNAL_ERROR"
          • "SSM_UNAVAILABLE"
          • "SSM_THROTTLED"
          • "EVENTBRIDGE_UNAVAILABLE"
          • "EVENTBRIDGE_THROTTLED"
          • "RESOURCE_SCAN_NOT_DISABLED"
          • "DISASSOCIATE_ALL_MEMBERS"
          • "ACCOUNT_IS_ISOLATED"
          • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
          • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
        • errorMessage — required — (String)

          The error message received when the account failed to enable Amazon Inspector.

        • status — required — (String)

          The status of Amazon Inspector for the account.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
    • failedAccounts — (Array<map>)

      An array of objects detailing any accounts that failed to enable Amazon Inspector and why.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • errorCode — required — (String)

        The error code explaining why the account failed to enable Amazon Inspector.

        Possible values include:
        • "ALREADY_ENABLED"
        • "ENABLE_IN_PROGRESS"
        • "DISABLE_IN_PROGRESS"
        • "SUSPEND_IN_PROGRESS"
        • "RESOURCE_NOT_FOUND"
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
        • "SSM_UNAVAILABLE"
        • "SSM_THROTTLED"
        • "EVENTBRIDGE_UNAVAILABLE"
        • "EVENTBRIDGE_THROTTLED"
        • "RESOURCE_SCAN_NOT_DISABLED"
        • "DISASSOCIATE_ALL_MEMBERS"
        • "ACCOUNT_IS_ISOLATED"
        • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
        • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
      • errorMessage — required — (String)

        The error message received when the account failed to enable Amazon Inspector.

      • resourceStatus — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for Amazon Web Services Lambda function.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambdaCode — (String)

          The status of Amazon Inspector scanning for custom application code for Amazon Web Services Lambda functions.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  findingArns: [ /* required */
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.batchGetCodeSnippet(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • findingArns — (Array<String>)

    An array of finding ARNs for the findings you want to retrieve code snippets from.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • codeSnippetResults — (Array<map>)

      The retrieved code snippets associated with the provided finding ARNs.

      • codeSnippet — (Array<map>)

        Contains information on the retrieved code snippet.

        • content — required — (String)

          The content of a line of code

        • lineNumber — required — (Integer)

          The line number that a section of code is located at.

      • endLine — (Integer)

        The line number of the last line of a code snippet.

      • findingArn — (String)

        The ARN of a finding that the code snippet is associated with.

      • startLine — (Integer)

        The line number of the first line of a code snippet.

      • suggestedFixes — (Array<map>)

        Details of a suggested code fix.

        • code — (String)

          The fix's code.

        • description — (String)

          The fix's description.

    • errors — (Array<map>)

      Any errors Amazon Inspector encountered while trying to retrieve the requested code snippets.

      • errorCode — required — (String)

        The error code for the error that prevented a code snippet from being retrieved.

        Possible values include:
        • "INTERNAL_ERROR"
        • "ACCESS_DENIED"
        • "CODE_SNIPPET_NOT_FOUND"
        • "INVALID_INPUT"
      • errorMessage — required — (String)

        The error message received when Amazon Inspector failed to retrieve a code snippet.

      • findingArn — required — (String)

        The ARN of the finding that a code snippet couldn't be retrieved for.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  findingArns: [ /* required */
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.batchGetFindingDetails(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • findingArns — (Array<String>)

    A list of finding ARNs.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • errors — (Array<map>)

      Error information for findings that details could not be returned for.

      • errorCode — required — (String)

        The error code.

        Possible values include:
        • "INTERNAL_ERROR"
        • "ACCESS_DENIED"
        • "FINDING_DETAILS_NOT_FOUND"
        • "INVALID_INPUT"
      • errorMessage — required — (String)

        The error message.

      • findingArn — required — (String)

        The finding ARN that returned an error.

    • findingDetails — (Array<map>)

      A finding's vulnerability details.

      • cisaData — (map)

        The Cybersecurity and Infrastructure Security Agency (CISA) details for a specific vulnerability.

        • action — (String)

          The remediation action recommended by CISA for this vulnerability.

        • dateAdded — (Date)

          The date and time CISA added this vulnerability to their catalogue.

        • dateDue — (Date)

          The date and time CISA expects a fix to have been provided vulnerability.

      • cwes — (Array<String>)

        The Common Weakness Enumerations (CWEs) associated with the vulnerability.

      • epssScore — (Float)

        The Exploit Prediction Scoring System (EPSS) score of the vulnerability.

      • evidences — (Array<map>)

        Information on the evidence of the vulnerability.

        • evidenceDetail — (String)

          The evidence details.

        • evidenceRule — (String)

          The evidence rule.

        • severity — (String)

          The evidence severity.

      • exploitObserved — (map)

        Contains information on when this exploit was observed.

        • firstSeen — (Date)

          The date an time when the exploit was first seen.

        • lastSeen — (Date)

          The date an time when the exploit was last seen.

      • findingArn — (String)

        The finding ARN that the vulnerability details are associated with.

      • referenceUrls — (Array<String>)

        The reference URLs for the vulnerability data.

      • riskScore — (Integer)

        The risk score of the vulnerability.

      • tools — (Array<String>)

        The known malware tools or kits that can exploit the vulnerability.

      • ttps — (Array<String>)

        The MITRE adversary tactics, techniques, or procedures (TTPs) associated with the vulnerability.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountIds: [ /* required */
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.batchGetFreeTrialInfo(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    The account IDs to get free trial status for.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      An array of objects that provide Amazon Inspector free trial details for each of the requested accounts.

      • accountId — required — (String)

        The account associated with the Amazon Inspector free trial information.

      • freeTrialInfo — required — (Array<map>)

        Contains information about the Amazon Inspector free trial for an account.

        • end — required — (Date)

          The date and time that the Amazon Inspector free trail ends for a given account.

        • start — required — (Date)

          The date and time that the Amazon Inspector free trail started for a given account.

        • status — required — (String)

          The order to sort results by.

          Possible values include:
          • "ACTIVE"
          • "INACTIVE"
        • type — required — (String)

          The type of scan covered by the Amazon Inspector free trail.

          Possible values include:
          • "EC2"
          • "ECR"
          • "LAMBDA"
          • "LAMBDA_CODE"
    • failedAccounts — (Array<map>)

      An array of objects detailing any accounts that free trial data could not be returned for.

      • accountId — required — (String)

        The account associated with the Amazon Inspector free trial information.

      • code — required — (String)

        The error code.

        Possible values include:
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
      • message — required — (String)

        The error message returned.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountIds: [
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.batchGetMemberEc2DeepInspectionStatus(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    The unique identifiers for the Amazon Web Services accounts to retrieve Amazon Inspector deep inspection activation status for.

     </p> 

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accountIds — (Array<map>)

      An array of objects that provide details on the activation status of Amazon Inspector deep inspection for each of the requested accounts.

       </p> 

      • accountId — required — (String)

        The unique identifier for the Amazon Web Services account of the organization member

      • errorMessage — (String)

        The error message explaining why the account failed to activate Amazon Inspector deep inspection.

      • status — (String)

        The state of Amazon Inspector deep inspection in the member account.

        Possible values include:
        • "ACTIVATED"
        • "DEACTIVATED"
        • "PENDING"
        • "FAILED"
    • failedAccountIds — (Array<map>)

      An array of objects that provide details on any accounts that failed to activate Amazon Inspector deep inspection and why.

       </p> 

      • accountId — required — (String)

        The unique identifier for the Amazon Web Services account of the organization member that failed to activate Amazon Inspector deep inspection.

      • ec2ScanStatus — (String)

        The status of EC2 scanning in the account that failed to activate Amazon Inspector deep inspection.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"
      • errorMessage — (String)

        The error message explaining why the account failed to activate Amazon Inspector deep inspection.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountIds: [ /* required */
    {
      accountId: 'STRING_VALUE', /* required */
      activateDeepInspection: true || false /* required */
    },
    /* more items */
  ]
};
inspector2.batchUpdateMemberEc2DeepInspectionStatus(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<map>)

    The unique identifiers for the Amazon Web Services accounts to change Amazon Inspector deep inspection status for.

    • accountId — required — (String)

      The unique identifier for the Amazon Web Services account of the organization member.

    • activateDeepInspection — required — (Boolean)

      Whether Amazon Inspector deep inspection is active in the account. If TRUE Amazon Inspector deep inspection is active, if FALSE it is not active.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accountIds — (Array<map>)

      An array of objects that provide details for each of the accounts that Amazon Inspector deep inspection status was successfully changed for.

      • accountId — required — (String)

        The unique identifier for the Amazon Web Services account of the organization member

      • errorMessage — (String)

        The error message explaining why the account failed to activate Amazon Inspector deep inspection.

      • status — (String)

        The state of Amazon Inspector deep inspection in the member account.

        Possible values include:
        • "ACTIVATED"
        • "DEACTIVATED"
        • "PENDING"
        • "FAILED"
    • failedAccountIds — (Array<map>)

      An array of objects that provide details for each of the accounts that Amazon Inspector deep inspection status could not be successfully changed for.

      • accountId — required — (String)

        The unique identifier for the Amazon Web Services account of the organization member that failed to activate Amazon Inspector deep inspection.

      • ec2ScanStatus — (String)

        The status of EC2 scanning in the account that failed to activate Amazon Inspector deep inspection.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"
      • errorMessage — (String)

        The error message explaining why the account failed to activate Amazon Inspector deep inspection.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportId: 'STRING_VALUE' /* required */
};
inspector2.cancelFindingsReport(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • reportId — (String)

    The ID of the report to be canceled.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • reportId — (String)

      The ID of the canceled report.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportId: 'STRING_VALUE' /* required */
};
inspector2.cancelSbomExport(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • reportId — (String)

    The report ID of the SBOM export to cancel.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • reportId — (String)

      The report ID of the canceled SBOM export.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  scanName: 'STRING_VALUE', /* required */
  schedule: { /* required */
    daily: {
      startTime: { /* required */
        timeOfDay: 'STRING_VALUE', /* required */
        timezone: 'STRING_VALUE' /* required */
      }
    },
    monthly: {
      day: SUN | MON | TUE | WED | THU | FRI | SAT, /* required */
      startTime: { /* required */
        timeOfDay: 'STRING_VALUE', /* required */
        timezone: 'STRING_VALUE' /* required */
      }
    },
    oneTime: {
    },
    weekly: {
      days: [ /* required */
        SUN | MON | TUE | WED | THU | FRI | SAT,
        /* more items */
      ],
      startTime: { /* required */
        timeOfDay: 'STRING_VALUE', /* required */
        timezone: 'STRING_VALUE' /* required */
      }
    }
  },
  securityLevel: LEVEL_1 | LEVEL_2, /* required */
  targets: { /* required */
    accountIds: [ /* required */
      'STRING_VALUE',
      /* more items */
    ],
    targetResourceTags: { /* required */
      '<TargetResourceTagsKey>': [
        'STRING_VALUE',
        /* more items */
      ],
      /* '<TargetResourceTagsKey>': ... */
    }
  },
  tags: {
    '<MapKey>': 'STRING_VALUE',
    /* '<MapKey>': ... */
  }
};
inspector2.createCisScanConfiguration(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • scanName — (String)

    The scan name for the CIS scan configuration.

  • schedule — (map)

    The schedule for the CIS scan configuration.

    • daily — (map)

      The schedule's daily.

      • startTime — required — (map)

        The schedule start time.

        • timeOfDay — required — (String)

          The time of day in 24-hour format (00:00).

        • timezone — required — (String)

          The timezone.

    • monthly — (map)

      The schedule's monthly.

      • day — required — (String)

        The monthly schedule's day.

        Possible values include:
        • "SUN"
        • "MON"
        • "TUE"
        • "WED"
        • "THU"
        • "FRI"
        • "SAT"
      • startTime — required — (map)

        The monthly schedule's start time.

        • timeOfDay — required — (String)

          The time of day in 24-hour format (00:00).

        • timezone — required — (String)

          The timezone.

    • oneTime — (map)

      The schedule's one time.

    • weekly — (map)

      The schedule's weekly.

      • days — required — (Array<String>)

        The weekly schedule's days.

      • startTime — required — (map)

        The weekly schedule's start time.

        • timeOfDay — required — (String)

          The time of day in 24-hour format (00:00).

        • timezone — required — (String)

          The timezone.

  • securityLevel — (String)

    The security level for the CIS scan configuration. Security level refers to the Benchmark levels that CIS assigns to a profile.

    Possible values include:
    • "LEVEL_1"
    • "LEVEL_2"
  • tags — (map<String>)

    The tags for the CIS scan configuration.

  • targets — (map)

    The targets for the CIS scan configuration.

    • accountIds — required — (Array<String>)

      The CIS target account ids.

    • targetResourceTags — required — (map<Array<String>>)

      The CIS target resource tags.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • scanConfigurationArn — (String)

      The scan configuration ARN for the CIS scan configuration.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  action: NONE | SUPPRESS, /* required */
  filterCriteria: { /* required */
    awsAccountId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    codeVulnerabilityDetectorName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    codeVulnerabilityDetectorTags: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    codeVulnerabilityFilePath: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceImageId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceSubnetId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceVpcId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageArchitecture: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageHash: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImagePushedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    ecrImageRegistry: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageRepositoryName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageTags: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    epssScore: [
      {
        lowerInclusive: 'NUMBER_VALUE',
        upperInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    exploitAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingStatus: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    firstObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    fixAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    inspectorScore: [
      {
        lowerInclusive: 'NUMBER_VALUE',
        upperInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    lambdaFunctionExecutionRoleArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionLastModifiedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    lambdaFunctionLayers: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionRuntime: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lastObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    networkProtocol: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    portRange: [
      {
        beginInclusive: 'NUMBER_VALUE',
        endInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    relatedVulnerabilities: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    resourceType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    severity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    title: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    updatedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    vendorSeverity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilityId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilitySource: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerablePackages: [
      {
        architecture: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        epoch: {
          lowerInclusive: 'NUMBER_VALUE',
          upperInclusive: 'NUMBER_VALUE'
        },
        name: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        release: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLambdaLayerArn: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLayerHash: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        version: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        }
      },
      /* more items */
    ]
  },
  name: 'STRING_VALUE', /* required */
  description: 'STRING_VALUE',
  reason: 'STRING_VALUE',
  tags: {
    '<MapKey>': 'STRING_VALUE',
    /* '<MapKey>': ... */
  }
};
inspector2.createFilter(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • action — (String)

    Defines the action that is to be applied to the findings that match the filter.

    Possible values include:
    • "NONE"
    • "SUPPRESS"
  • description — (String)

    A description of the filter.

  • filterCriteria — (map)

    Defines the criteria to be used in the filter for querying findings.

    • awsAccountId — (Array<map>)

      Details of the Amazon Web Services account IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • codeVulnerabilityDetectorName — (Array<map>)

      The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • codeVulnerabilityDetectorTags — (Array<map>)

      The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see Java tags, or Python tags.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • codeVulnerabilityFilePath — (Array<map>)

      The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentId — (Array<map>)

      Details of the component IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentType — (Array<map>)

      Details of the component types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceImageId — (Array<map>)

      Details of the Amazon EC2 instance image IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceSubnetId — (Array<map>)

      Details of the Amazon EC2 instance subnet IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceVpcId — (Array<map>)

      Details of the Amazon EC2 instance VPC IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageArchitecture — (Array<map>)

      Details of the Amazon ECR image architecture types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageHash — (Array<map>)

      Details of the Amazon ECR image hashes used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImagePushedAt — (Array<map>)

      Details on the Amazon ECR image push date and time used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • ecrImageRegistry — (Array<map>)

      Details on the Amazon ECR registry used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageRepositoryName — (Array<map>)

      Details on the name of the Amazon ECR repository used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageTags — (Array<map>)

      The tags attached to the Amazon ECR container image.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • epssScore — (Array<map>)

      The EPSS score used to filter findings.

      • lowerInclusive — (Float)

        The lowest number to be included in the filter.

      • upperInclusive — (Float)

        The highest number to be included in the filter.

    • exploitAvailable — (Array<map>)

      Filters the list of Amazon Web Services Lambda findings by the availability of exploits.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingArn — (Array<map>)

      Details on the finding ARNs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingStatus — (Array<map>)

      Details on the finding status types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingType — (Array<map>)

      Details on the finding types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • firstObservedAt — (Array<map>)

      Details on the date and time a finding was first seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • fixAvailable — (Array<map>)

      Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • inspectorScore — (Array<map>)

      The Amazon Inspector score to filter on.

      • lowerInclusive — (Float)

        The lowest number to be included in the filter.

      • upperInclusive — (Float)

        The highest number to be included in the filter.

    • lambdaFunctionExecutionRoleArn — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by execution role.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionLastModifiedAt — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • lambdaFunctionLayers — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the function's layers. A Lambda function can have up to five layers.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionName — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the name of the function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionRuntime — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the runtime environment for the Lambda function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lastObservedAt — (Array<map>)

      Details on the date and time a finding was last seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • networkProtocol — (Array<map>)

      Details on network protocol used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • portRange — (Array<map>)

      Details on the port ranges used to filter findings.

      • beginInclusive — (Integer)

        The port number the port range begins at.

      • endInclusive — (Integer)

        The port number the port range ends at.

    • relatedVulnerabilities — (Array<map>)

      Details on the related vulnerabilities used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceId — (Array<map>)

      Details on the resource IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceTags — (Array<map>)

      Details on the resource tags used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key used in the filter.

      • value — (String)

        The tag value used in the filter.

    • resourceType — (Array<map>)

      Details on the resource types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • severity — (Array<map>)

      Details on the severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • title — (Array<map>)

      Details on the finding title used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • updatedAt — (Array<map>)

      Details on the date and time a finding was last updated at used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • vendorSeverity — (Array<map>)

      Details on the vendor severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilityId — (Array<map>)

      Details on the vulnerability ID used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilitySource — (Array<map>)

      Details on the vulnerability type used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerablePackages — (Array<map>)

      Details on the vulnerable packages used to filter findings.

      • architecture — (map)

        An object that contains details on the package architecture type to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • epoch — (map)

        An object that contains details on the package epoch to filter on.

        • lowerInclusive — (Float)

          The lowest number to be included in the filter.

        • upperInclusive — (Float)

          The highest number to be included in the filter.

      • name — (map)

        An object that contains details on the name of the package to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • release — (map)

        An object that contains details on the package release to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLambdaLayerArn — (map)

        An object that describes the details of a string filter.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLayerHash — (map)

        An object that contains details on the source layer hash to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • version — (map)

        The package version to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

  • name — (String)

    The name of the filter. Minimum length of 3. Maximum length of 64. Valid characters include alphanumeric characters, dot (.), underscore (_), and dash (-). Spaces are not allowed.

  • reason — (String)

    The reason for creating the filter.

  • tags — (map<String>)

    A list of tags for the filter.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • arn — (String)

      The Amazon Resource Number (ARN) of the successfully created filter.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportFormat: CSV | JSON, /* required */
  s3Destination: { /* required */
    bucketName: 'STRING_VALUE', /* required */
    kmsKeyArn: 'STRING_VALUE', /* required */
    keyPrefix: 'STRING_VALUE'
  },
  filterCriteria: {
    awsAccountId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    codeVulnerabilityDetectorName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    codeVulnerabilityDetectorTags: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    codeVulnerabilityFilePath: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    componentType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceImageId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceSubnetId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceVpcId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageArchitecture: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageHash: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImagePushedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    ecrImageRegistry: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageRepositoryName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrImageTags: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    epssScore: [
      {
        lowerInclusive: 'NUMBER_VALUE',
        upperInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    exploitAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingStatus: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    firstObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    fixAvailable: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    inspectorScore: [
      {
        lowerInclusive: 'NUMBER_VALUE',
        upperInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    lambdaFunctionExecutionRoleArn: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionLastModifiedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    lambdaFunctionLayers: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionName: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionRuntime: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lastObservedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    networkProtocol: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    portRange: [
      {
        beginInclusive: 'NUMBER_VALUE',
        endInclusive: 'NUMBER_VALUE'
      },
      /* more items */
    ],
    relatedVulnerabilities: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    resourceType: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    severity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    title: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    updatedAt: [
      {
        endInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789,
        startInclusive: new Date || 'Wed Dec 31 1969 16:00:00 GMT-0800 (PST)' || 123456789
      },
      /* more items */
    ],
    vendorSeverity: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilityId: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerabilitySource: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    vulnerablePackages: [
      {
        architecture: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        epoch: {
          lowerInclusive: 'NUMBER_VALUE',
          upperInclusive: 'NUMBER_VALUE'
        },
        name: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        release: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLambdaLayerArn: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        sourceLayerHash: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        },
        version: {
          comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
          value: 'STRING_VALUE' /* required */
        }
      },
      /* more items */
    ]
  }
};
inspector2.createFindingsReport(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • filterCriteria — (map)

    The filter criteria to apply to the results of the finding report.

    • awsAccountId — (Array<map>)

      Details of the Amazon Web Services account IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • codeVulnerabilityDetectorName — (Array<map>)

      The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • codeVulnerabilityDetectorTags — (Array<map>)

      The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see Java tags, or Python tags.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • codeVulnerabilityFilePath — (Array<map>)

      The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentId — (Array<map>)

      Details of the component IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • componentType — (Array<map>)

      Details of the component types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceImageId — (Array<map>)

      Details of the Amazon EC2 instance image IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceSubnetId — (Array<map>)

      Details of the Amazon EC2 instance subnet IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ec2InstanceVpcId — (Array<map>)

      Details of the Amazon EC2 instance VPC IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageArchitecture — (Array<map>)

      Details of the Amazon ECR image architecture types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageHash — (Array<map>)

      Details of the Amazon ECR image hashes used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImagePushedAt — (Array<map>)

      Details on the Amazon ECR image push date and time used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • ecrImageRegistry — (Array<map>)

      Details on the Amazon ECR registry used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageRepositoryName — (Array<map>)

      Details on the name of the Amazon ECR repository used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • ecrImageTags — (Array<map>)

      The tags attached to the Amazon ECR container image.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • epssScore — (Array<map>)

      The EPSS score used to filter findings.

      • lowerInclusive — (Float)

        The lowest number to be included in the filter.

      • upperInclusive — (Float)

        The highest number to be included in the filter.

    • exploitAvailable — (Array<map>)

      Filters the list of Amazon Web Services Lambda findings by the availability of exploits.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingArn — (Array<map>)

      Details on the finding ARNs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingStatus — (Array<map>)

      Details on the finding status types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • findingType — (Array<map>)

      Details on the finding types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • firstObservedAt — (Array<map>)

      Details on the date and time a finding was first seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • fixAvailable — (Array<map>)

      Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • inspectorScore — (Array<map>)

      The Amazon Inspector score to filter on.

      • lowerInclusive — (Float)

        The lowest number to be included in the filter.

      • upperInclusive — (Float)

        The highest number to be included in the filter.

    • lambdaFunctionExecutionRoleArn — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by execution role.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionLastModifiedAt — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • lambdaFunctionLayers — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the function's layers. A Lambda function can have up to five layers.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionName — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the name of the function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lambdaFunctionRuntime — (Array<map>)

      Filters the list of Amazon Web Services Lambda functions by the runtime environment for the Lambda function.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • lastObservedAt — (Array<map>)

      Details on the date and time a finding was last seen used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • networkProtocol — (Array<map>)

      Details on network protocol used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • portRange — (Array<map>)

      Details on the port ranges used to filter findings.

      • beginInclusive — (Integer)

        The port number the port range begins at.

      • endInclusive — (Integer)

        The port number the port range ends at.

    • relatedVulnerabilities — (Array<map>)

      Details on the related vulnerabilities used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceId — (Array<map>)

      Details on the resource IDs used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • resourceTags — (Array<map>)

      Details on the resource tags used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The tag key used in the filter.

      • value — (String)

        The tag value used in the filter.

    • resourceType — (Array<map>)

      Details on the resource types used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • severity — (Array<map>)

      Details on the severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • title — (Array<map>)

      Details on the finding title used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • updatedAt — (Array<map>)

      Details on the date and time a finding was last updated at used to filter findings.

      • endInclusive — (Date)

        A timestamp representing the end of the time period filtered on.

      • startInclusive — (Date)

        A timestamp representing the start of the time period filtered on.

    • vendorSeverity — (Array<map>)

      Details on the vendor severity used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilityId — (Array<map>)

      Details on the vulnerability ID used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerabilitySource — (Array<map>)

      Details on the vulnerability type used to filter findings.

      • comparison — required — (String)

        The operator to use when comparing values in the filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value to filter on.

    • vulnerablePackages — (Array<map>)

      Details on the vulnerable packages used to filter findings.

      • architecture — (map)

        An object that contains details on the package architecture type to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • epoch — (map)

        An object that contains details on the package epoch to filter on.

        • lowerInclusive — (Float)

          The lowest number to be included in the filter.

        • upperInclusive — (Float)

          The highest number to be included in the filter.

      • name — (map)

        An object that contains details on the name of the package to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • release — (map)

        An object that contains details on the package release to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLambdaLayerArn — (map)

        An object that describes the details of a string filter.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • sourceLayerHash — (map)

        An object that contains details on the source layer hash to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • version — (map)

        The package version to filter on.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

  • reportFormat — (String)

    The format to generate the report in.

    Possible values include:
    • "CSV"
    • "JSON"
  • s3Destination — (map)

    The Amazon S3 export destination for the report.

    • bucketName — required — (String)

      The name of the Amazon S3 bucket to export findings to.

    • keyPrefix — (String)

      The prefix that the findings will be written under.

    • kmsKeyArn — required — (String)

      The ARN of the KMS key used to encrypt data when exporting findings.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • reportId — (String)

      The ID of the report.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportFormat: CYCLONEDX_1_4 | SPDX_2_3, /* required */
  s3Destination: { /* required */
    bucketName: 'STRING_VALUE', /* required */
    kmsKeyArn: 'STRING_VALUE', /* required */
    keyPrefix: 'STRING_VALUE'
  },
  resourceFilterCriteria: {
    accountId: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ec2InstanceTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    ecrImageTags: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    ecrRepositoryName: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionName: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    lambdaFunctionTags: [
      {
        comparison: EQUALS, /* required */
        key: 'STRING_VALUE', /* required */
        value: 'STRING_VALUE'
      },
      /* more items */
    ],
    resourceId: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    resourceType: [
      {
        comparison: EQUALS | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ]
  }
};
inspector2.createSbomExport(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • reportFormat — (String)

    The output format for the software bill of materials (SBOM) report.

    Possible values include:
    • "CYCLONEDX_1_4"
    • "SPDX_2_3"
  • resourceFilterCriteria — (map)

    The resource filter criteria for the software bill of materials (SBOM) report.

    • accountId — (Array<map>)

      The account IDs used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The filter's value.

    • ec2InstanceTags — (Array<map>)

      The EC2 instance tags used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The filter's key.

      • value — (String)

        The filter's value.

    • ecrImageTags — (Array<map>)

      The ECR image tags used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The filter's value.

    • ecrRepositoryName — (Array<map>)

      The ECR repository names used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The filter's value.

    • lambdaFunctionName — (Array<map>)

      The Amazon Web Services Lambda function name used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The filter's value.

    • lambdaFunctionTags — (Array<map>)

      The Amazon Web Services Lambda function tags used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
      • key — required — (String)

        The filter's key.

      • value — (String)

        The filter's value.

    • resourceId — (Array<map>)

      The resource IDs used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The filter's value.

    • resourceType — (Array<map>)

      The resource types used as resource filter criteria.

      • comparison — required — (String)

        The filter's comparison.

        Possible values include:
        • "EQUALS"
        • "NOT_EQUALS"
      • value — required — (String)

        The filter's value.

  • s3Destination — (map)

    Contains details of the Amazon S3 bucket and KMS key used to export findings.

    • bucketName — required — (String)

      The name of the Amazon S3 bucket to export findings to.

    • keyPrefix — (String)

      The prefix that the findings will be written under.

    • kmsKeyArn — required — (String)

      The ARN of the KMS key used to encrypt data when exporting findings.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • reportId — (String)

      The report ID for the software bill of materials (SBOM) report.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  scanConfigurationArn: 'STRING_VALUE' /* required */
};
inspector2.deleteCisScanConfiguration(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • scanConfigurationArn — (String)

    The ARN of the CIS scan configuration.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • scanConfigurationArn — (String)

      The ARN of the CIS scan configuration.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  arn: 'STRING_VALUE' /* required */
};
inspector2.deleteFilter(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • arn — (String)

    The Amazon Resource Number (ARN) of the filter to be deleted.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • arn — (String)

      The Amazon Resource Number (ARN) of the filter that has been deleted.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
};
inspector2.describeOrganizationConfiguration(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {})

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • autoEnable — (map)

      The scan types are automatically enabled for new members of your organization.

      • ec2 — required — (Boolean)

        Represents whether Amazon EC2 scans are automatically enabled for new members of your Amazon Inspector organization.

      • ecr — required — (Boolean)

        Represents whether Amazon ECR scans are automatically enabled for new members of your Amazon Inspector organization.

      • lambda — (Boolean)

        Represents whether Amazon Web Services Lambda standard scans are automatically enabled for new members of your Amazon Inspector organization.

      • lambdaCode — (Boolean)

        Represents whether Lambda code scans are automatically enabled for new members of your Amazon Inspector organization.

         </p> 

    • maxAccountLimitReached — (Boolean)

      Represents whether your organization has reached the maximum Amazon Web Services account limit for Amazon Inspector.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountIds: [
    'STRING_VALUE',
    /* more items */
  ],
  resourceTypes: [
    EC2 | ECR | LAMBDA | LAMBDA_CODE,
    /* more items */
  ]
};
inspector2.disable(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    An array of account IDs you want to disable Amazon Inspector scans for.

  • resourceTypes — (Array<String>)

    The resource scan types you want to disable.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      Information on the accounts that have had Amazon Inspector scans successfully disabled. Details are provided for each account.

      • accountId — required — (String)

        The ID of the Amazon Web Services account.

      • resourceStatus — required — (map)

        Details of the status of Amazon Inspector scans by resource type.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for Amazon Web Services Lambda function.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambdaCode — (String)

          The status of Amazon Inspector scanning for custom application code for Amazon Web Services Lambda functions.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — required — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"
    • failedAccounts — (Array<map>)

      Information on any accounts for which Amazon Inspector scans could not be disabled. Details are provided for each account.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • errorCode — required — (String)

        The error code explaining why the account failed to enable Amazon Inspector.

        Possible values include:
        • "ALREADY_ENABLED"
        • "ENABLE_IN_PROGRESS"
        • "DISABLE_IN_PROGRESS"
        • "SUSPEND_IN_PROGRESS"
        • "RESOURCE_NOT_FOUND"
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
        • "SSM_UNAVAILABLE"
        • "SSM_THROTTLED"
        • "EVENTBRIDGE_UNAVAILABLE"
        • "EVENTBRIDGE_THROTTLED"
        • "RESOURCE_SCAN_NOT_DISABLED"
        • "DISASSOCIATE_ALL_MEMBERS"
        • "ACCOUNT_IS_ISOLATED"
        • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
        • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
      • errorMessage — required — (String)

        The error message received when the account failed to enable Amazon Inspector.

      • resourceStatus — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for Amazon Web Services Lambda function.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambdaCode — (String)

          The status of Amazon Inspector scanning for custom application code for Amazon Web Services Lambda functions.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  delegatedAdminAccountId: 'STRING_VALUE' /* required */
};
inspector2.disableDelegatedAdminAccount(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • delegatedAdminAccountId — (String)

    The Amazon Web Services account ID of the current Amazon Inspector delegated administrator.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • delegatedAdminAccountId — (String)

      The Amazon Web Services account ID of the successfully disabled delegated administrator.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountId: 'STRING_VALUE' /* required */
};
inspector2.disassociateMember(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountId — (String)

    The Amazon Web Services account ID of the member account to disassociate.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accountId — (String)

      The Amazon Web Services account ID of the successfully disassociated member.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  resourceTypes: [ /* required */
    EC2 | ECR | LAMBDA | LAMBDA_CODE,
    /* more items */
  ],
  accountIds: [
    'STRING_VALUE',
    /* more items */
  ],
  clientToken: 'STRING_VALUE'
};
inspector2.enable(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountIds — (Array<String>)

    A list of account IDs you want to enable Amazon Inspector scans for.

  • clientToken — (String)

    The idempotency token for the request.

    If a token is not provided, the SDK will use a version 4 UUID.
  • resourceTypes — (Array<String>)

    The resource scan types you want to enable.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • accounts — (Array<map>)

      Information on the accounts that have had Amazon Inspector scans successfully enabled. Details are provided for each account.

      • accountId — required — (String)

        The ID of the Amazon Web Services account.

      • resourceStatus — required — (map)

        Details of the status of Amazon Inspector scans by resource type.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for Amazon Web Services Lambda function.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambdaCode — (String)

          The status of Amazon Inspector scanning for custom application code for Amazon Web Services Lambda functions.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — required — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"
    • failedAccounts — (Array<map>)

      Information on any accounts for which Amazon Inspector scans could not be enabled. Details are provided for each account.

      • accountId — required — (String)

        The Amazon Web Services account ID.

      • errorCode — required — (String)

        The error code explaining why the account failed to enable Amazon Inspector.

        Possible values include:
        • "ALREADY_ENABLED"
        • "ENABLE_IN_PROGRESS"
        • "DISABLE_IN_PROGRESS"
        • "SUSPEND_IN_PROGRESS"
        • "RESOURCE_NOT_FOUND"
        • "ACCESS_DENIED"
        • "INTERNAL_ERROR"
        • "SSM_UNAVAILABLE"
        • "SSM_THROTTLED"
        • "EVENTBRIDGE_UNAVAILABLE"
        • "EVENTBRIDGE_THROTTLED"
        • "RESOURCE_SCAN_NOT_DISABLED"
        • "DISASSOCIATE_ALL_MEMBERS"
        • "ACCOUNT_IS_ISOLATED"
        • "EC2_SSM_RESOURCE_DATA_SYNC_LIMIT_EXCEEDED"
        • "EC2_SSM_ASSOCIATION_VERSION_LIMIT_EXCEEDED"
      • errorMessage — required — (String)

        The error message received when the account failed to enable Amazon Inspector.

      • resourceStatus — (map)

        An object detailing which resources Amazon Inspector is enabled to scan for the account.

        • ec2 — required — (String)

          The status of Amazon Inspector scanning for Amazon EC2 resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • ecr — required — (String)

          The status of Amazon Inspector scanning for Amazon ECR resources.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambda — (String)

          The status of Amazon Inspector scanning for Amazon Web Services Lambda function.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
        • lambdaCode — (String)

          The status of Amazon Inspector scanning for custom application code for Amazon Web Services Lambda functions.

          Possible values include:
          • "ENABLING"
          • "ENABLED"
          • "DISABLING"
          • "DISABLED"
          • "SUSPENDING"
          • "SUSPENDED"
      • status — (String)

        The status of Amazon Inspector for the account.

        Possible values include:
        • "ENABLING"
        • "ENABLED"
        • "DISABLING"
        • "DISABLED"
        • "SUSPENDING"
        • "SUSPENDED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  delegatedAdminAccountId: 'STRING_VALUE', /* required */
  clientToken: 'STRING_VALUE'
};
inspector2.enableDelegatedAdminAccount(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • clientToken — (String)

    The idempotency token for the request.

    If a token is not provided, the SDK will use a version 4 UUID.
  • delegatedAdminAccountId — (String)

    The Amazon Web Services account ID of the Amazon Inspector delegated administrator.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • delegatedAdminAccountId — (String)

      The Amazon Web Services account ID of the successfully Amazon Inspector delegated administrator.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  scanArn: 'STRING_VALUE', /* required */
  reportFormat: PDF | CSV,
  targetAccounts: [
    'STRING_VALUE',
    /* more items */
  ]
};
inspector2.getCisScanReport(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • reportFormat — (String)

    The format of the report. Valid values are PDF and CSV. If no value is specified, the report format defaults to PDF.

    Possible values include:
    • "PDF"
    • "CSV"
  • scanArn — (String)

    The scan ARN.

  • targetAccounts — (Array<String>)

    The target accounts.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • status — (String)

      The status.

      Possible values include:
      • "SUCCEEDED"
      • "FAILED"
      • "IN_PROGRESS"
    • url — (String)

      The URL where a PDF or CSV of the CIS scan report can be downloaded.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  accountId: 'STRING_VALUE', /* required */
  scanArn: 'STRING_VALUE', /* required */
  targetResourceId: 'STRING_VALUE', /* required */
  filterCriteria: {
    checkIdFilters: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingArnFilters: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ],
    findingStatusFilters: [
      {
        comparison: EQUALS, /* required */
        value: PASSED | FAILED | SKIPPED /* required */
      },
      /* more items */
    ],
    securityLevelFilters: [
      {
        comparison: EQUALS, /* required */
        value: LEVEL_1 | LEVEL_2 /* required */
      },
      /* more items */
    ],
    titleFilters: [
      {
        comparison: EQUALS | PREFIX | NOT_EQUALS, /* required */
        value: 'STRING_VALUE' /* required */
      },
      /* more items */
    ]
  },
  maxResults: 'NUMBER_VALUE',
  nextToken: 'STRING_VALUE',
  sortBy: CHECK_ID | STATUS,
  sortOrder: ASC | DESC
};
inspector2.getCisScanResultDetails(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • accountId — (String)

    The account ID.

  • filterCriteria — (map)

    The filter criteria.

    • checkIdFilters — (Array<map>)

      The criteria's check ID filters.

      • comparison — required — (String)

        The comparison value of the CIS string filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value of the CIS string filter.

    • findingArnFilters — (Array<map>)

      The criteria's finding ARN filters.

      • comparison — required — (String)

        The comparison value of the CIS string filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value of the CIS string filter.

    • findingStatusFilters — (Array<map>)

      The criteria's finding status filters.

      • comparison — required — (String)

        The comparison value of the CIS finding status filter.

        Possible values include:
        • "EQUALS"
      • value — required — (String)

        The value of the CIS finding status filter.

        Possible values include:
        • "PASSED"
        • "FAILED"
        • "SKIPPED"
    • securityLevelFilters — (Array<map>)

      The criteria's security level filters. . Security level refers to the Benchmark levels that CIS assigns to a profile.

      • comparison — required — (String)

        The CIS security filter comparison value.

        Possible values include:
        • "EQUALS"
      • value — required — (String)

        The CIS security filter value.

        Possible values include:
        • "LEVEL_1"
        • "LEVEL_2"
    • titleFilters — (Array<map>)

      The criteria's title filters.

      • comparison — required — (String)

        The comparison value of the CIS string filter.

        Possible values include:
        • "EQUALS"
        • "PREFIX"
        • "NOT_EQUALS"
      • value — required — (String)

        The value of the CIS string filter.

  • maxResults — (Integer)

    The maximum number of CIS scan result details to be returned in a single page of results.

  • nextToken — (String)

    The pagination token from a previous request that's used to retrieve the next page of results.

  • scanArn — (String)

    The scan ARN.

  • sortBy — (String)

    The sort by order.

    Possible values include:
    • "CHECK_ID"
    • "STATUS"
  • sortOrder — (String)

    The sort order.

    Possible values include:
    • "ASC"
    • "DESC"
  • targetResourceId — (String)

    The target resource ID.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • nextToken — (String)

      The pagination token from a previous request that's used to retrieve the next page of results.

    • scanResultDetails — (Array<map>)

      The scan result details.

      • accountId — (String)

        The CIS scan result details' account ID.

      • checkDescription — (String)

        The account ID that's associated with the CIS scan result details.

      • checkId — (String)

        The CIS scan result details' check ID.

      • findingArn — (String)

        The CIS scan result details' finding ARN.

      • level — (String)

        The CIS scan result details' level.

        Possible values include:
        • "LEVEL_1"
        • "LEVEL_2"
      • platform — (String)

        The CIS scan result details' platform.

      • remediation — (String)

        The CIS scan result details' remediation.

      • scanArn — required — (String)

        The CIS scan result details' scan ARN.

      • status — (String)

        The CIS scan result details' status.

        Possible values include:
        • "PASSED"
        • "FAILED"
        • "SKIPPED"
      • statusReason — (String)

        The CIS scan result details' status reason.

      • targetResourceId — (String)

        The CIS scan result details' target resource ID.

      • title — (String)

        The CIS scan result details' title.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
};
inspector2.getConfiguration(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {})

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • ec2Configuration — (map)

      Specifies how the Amazon EC2 automated scan mode is currently configured for your environment.

      • scanModeState — (map)

        An object that contains details about the state of the Amazon EC2 scan mode.

        • scanMode — (String)

          The scan method that is applied to the instance.

          Possible values include:
          • "EC2_SSM_AGENT_BASED"
          • "EC2_HYBRID"
        • scanModeStatus — (String)

          The status of the Amazon EC2 scan mode setting.

          Possible values include:
          • "SUCCESS"
          • "PENDING"
    • ecrConfiguration — (map)

      Specifies how the ECR automated re-scan duration is currently configured for your environment.

      • rescanDurationState — (map)

        An object that contains details about the state of the ECR re-scan settings.

        • pullDateRescanDuration — (String)

          The rescan duration configured for image pull date.

          Possible values include:
          • "DAYS_14"
          • "DAYS_30"
          • "DAYS_60"
          • "DAYS_90"
          • "DAYS_180"
        • rescanDuration — (String)

          The rescan duration configured for image push date.

           </p> 

          Possible values include:
          • "LIFETIME"
          • "DAYS_30"
          • "DAYS_180"
          • "DAYS_14"
          • "DAYS_60"
          • "DAYS_90"
        • status — (String)

          The status of changes to the ECR automated re-scan duration.

          Possible values include:
          • "SUCCESS"
          • "PENDING"
          • "FAILED"
        • updatedAt — (Date)

          A timestamp representing when the last time the ECR scan duration setting was changed.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
};
inspector2.getDelegatedAdminAccount(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {})

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • delegatedAdmin — (map)

      The Amazon Web Services account ID of the Amazon Inspector delegated administrator.

      • accountId — (String)

        The Amazon Web Services account ID of the Amazon Inspector delegated administrator for your organization.

      • relationshipStatus — (String)

        The status of the Amazon Inspector delegated administrator.

        Possible values include:
        • "CREATED"
        • "INVITED"
        • "DISABLED"
        • "ENABLED"
        • "REMOVED"
        • "RESIGNED"
        • "DELETED"
        • "EMAIL_VERIFICATION_IN_PROGRESS"
        • "EMAIL_VERIFICATION_FAILED"
        • "REGION_DISABLED"
        • "ACCOUNT_SUSPENDED"
        • "CANNOT_CREATE_DETECTOR_IN_ORG_MASTER"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
};
inspector2.getEc2DeepInspectionConfiguration(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {})

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • errorMessage — (String)

      An error message explaining why Amazon Inspector deep inspection configurations could not be retrieved for your account.

    • orgPackagePaths — (Array<String>)

      The Amazon Inspector deep inspection custom paths for your organization.

    • packagePaths — (Array<String>)

      The Amazon Inspector deep inspection custom paths for your account.

    • status — (String)

      The activation status of Amazon Inspector deep inspection in your account.

      Possible values include:
      • "ACTIVATED"
      • "DEACTIVATED"
      • "PENDING"
      • "FAILED"

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  resourceType: AWS_EC2_INSTANCE | AWS_ECR_CONTAINER_IMAGE | AWS_ECR_REPOSITORY | AWS_LAMBDA_FUNCTION, /* required */
  scanType: NETWORK | PACKAGE | CODE /* required */
};
inspector2.getEncryptionKey(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • resourceType — (String)

    The resource type the key encrypts.

    Possible values include:
    • "AWS_EC2_INSTANCE"
    • "AWS_ECR_CONTAINER_IMAGE"
    • "AWS_ECR_REPOSITORY"
    • "AWS_LAMBDA_FUNCTION"
  • scanType — (String)

    The scan type the key encrypts.

    Possible values include:
    • "NETWORK"
    • "PACKAGE"
    • "CODE"

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • kmsKeyId — (String)

      A kms key ID.

Returns:

• (AWS.Request) —

  a handle to the operation request for subsequent event callback registration.

var params = {
  reportId: 'STRING_VALUE'
};
inspector2.getFindingsReportStatus(params, function(err, data) {
  if (err) console.log(err, err.stack); // an error occurred
  else     console.log(data);           // successful response
});

Parameters:

• params (Object) (defaults to: {}) —
  • reportId — (String)

    The ID of the report to retrieve the status of.

Callback (callback):

• function(err, data) { ... }

  Called when a response from the service is returned. If a callback is not supplied, you must call AWS.Request.send() on the returned request object to initiate the request.

  Context (this):

  • (AWS.Response) —

    the response object containing error, data properties, and the original request object.

  Parameters:

  • err (Error) —

    the error object returned from the request. Set to null if the request is successful.

  • data (Object) —

    the de-serialized data returned from the request. Set to null if a request error occurs. The data object has the following properties:

    • destination — (map)

      The destination of the report.

      • bucketName — required — (String)

        The name of the Amazon S3 bucket to export findings to.

      • keyPrefix — (String)

        The prefix that the findings will be written under.

      • kmsKeyArn — required — (String)

        The ARN of the KMS key used to encrypt data when exporting findings.

    • errorCode — (String)

      The error code of the report.

      Possible values include:
      • "INTERNAL_ERROR"
      • "INVALID_PERMISSIONS"
      • "NO_FINDINGS_FOUND"
      • "BUCKET_NOT_FOUND"
      • "INCOMPATIBLE_BUCKET_REGION"
      • "MALFORMED_KMS_KEY"
    • errorMessage — (String)

      The error message of the report.

    • filterCriteria — (map)

      The filter criteria associated with the report.

      • awsAccountId — (Array<map>)

        Details of the Amazon Web Services account IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • codeVulnerabilityDetectorName — (Array<map>)

        The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • codeVulnerabilityDetectorTags — (Array<map>)

        The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see Java tags, or Python tags.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • codeVulnerabilityFilePath — (Array<map>)

        The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • componentId — (Array<map>)

        Details of the component IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • componentType — (Array<map>)

        Details of the component types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ec2InstanceImageId — (Array<map>)

        Details of the Amazon EC2 instance image IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ec2InstanceSubnetId — (Array<map>)

        Details of the Amazon EC2 instance subnet IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ec2InstanceVpcId — (Array<map>)

        Details of the Amazon EC2 instance VPC IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageArchitecture — (Array<map>)

        Details of the Amazon ECR image architecture types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageHash — (Array<map>)

        Details of the Amazon ECR image hashes used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImagePushedAt — (Array<map>)

        Details on the Amazon ECR image push date and time used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • ecrImageRegistry — (Array<map>)

        Details on the Amazon ECR registry used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageRepositoryName — (Array<map>)

        Details on the name of the Amazon ECR repository used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • ecrImageTags — (Array<map>)

        The tags attached to the Amazon ECR container image.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • epssScore — (Array<map>)

        The EPSS score used to filter findings.

        • lowerInclusive — (Float)

          The lowest number to be included in the filter.

        • upperInclusive — (Float)

          The highest number to be included in the filter.

      • exploitAvailable — (Array<map>)

        Filters the list of Amazon Web Services Lambda findings by the availability of exploits.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • findingArn — (Array<map>)

        Details on the finding ARNs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • findingStatus — (Array<map>)

        Details on the finding status types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • findingType — (Array<map>)

        Details on the finding types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • firstObservedAt — (Array<map>)

        Details on the date and time a finding was first seen used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • fixAvailable — (Array<map>)

        Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • inspectorScore — (Array<map>)

        The Amazon Inspector score to filter on.

        • lowerInclusive — (Float)

          The lowest number to be included in the filter.

        • upperInclusive — (Float)

          The highest number to be included in the filter.

      • lambdaFunctionExecutionRoleArn — (Array<map>)

        Filters the list of Amazon Web Services Lambda functions by execution role.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lambdaFunctionLastModifiedAt — (Array<map>)

        Filters the list of Amazon Web Services Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • lambdaFunctionLayers — (Array<map>)

        Filters the list of Amazon Web Services Lambda functions by the function's layers. A Lambda function can have up to five layers.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lambdaFunctionName — (Array<map>)

        Filters the list of Amazon Web Services Lambda functions by the name of the function.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lambdaFunctionRuntime — (Array<map>)

        Filters the list of Amazon Web Services Lambda functions by the runtime environment for the Lambda function.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • lastObservedAt — (Array<map>)

        Details on the date and time a finding was last seen used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • networkProtocol — (Array<map>)

        Details on network protocol used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • portRange — (Array<map>)

        Details on the port ranges used to filter findings.

        • beginInclusive — (Integer)

          The port number the port range begins at.

        • endInclusive — (Integer)

          The port number the port range ends at.

      • relatedVulnerabilities — (Array<map>)

        Details on the related vulnerabilities used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • resourceId — (Array<map>)

        Details on the resource IDs used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • resourceTags — (Array<map>)

        Details on the resource tags used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
        • key — required — (String)

          The tag key used in the filter.

        • value — (String)

          The tag value used in the filter.

      • resourceType — (Array<map>)

        Details on the resource types used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • severity — (Array<map>)

        Details on the severity used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • title — (Array<map>)

        Details on the finding title used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • updatedAt — (Array<map>)

        Details on the date and time a finding was last updated at used to filter findings.

        • endInclusive — (Date)

          A timestamp representing the end of the time period filtered on.

        • startInclusive — (Date)

          A timestamp representing the start of the time period filtered on.

      • vendorSeverity — (Array<map>)

        Details on the vendor severity used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • vulnerabilityId — (Array<map>)

        Details on the vulnerability ID used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • vulnerabilitySource — (Array<map>)

        Details on the vulnerability type used to filter findings.

        • comparison — required — (String)

          The operator to use when comparing values in the filter.

          Possible values include:
          • "EQUALS"
          • "PREFIX"
          • "NOT_EQUALS"
        • value — required — (String)

          The value to filter on.

      • vulnerablePackages — (Array<map>)

        Details on the vulnerable packages used to filter findings.

        • architecture — (map)

          An object that contains details on the package architecture type to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • epoch — (map)

          An object that contains details on the package epoch to filter on.

          • lowerInclusive — (Float)

            The lowest number to be included in the filter.

          • upperInclusive — (Float)

            The highest number to be included in the filter.

        • name — (map)

          An object that contains details on the name of the package to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • release — (map)

          An object that contains details on the package release to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • sourceLambdaLayerArn — (map)

          An object that describes the details of a string filter.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • sourceLayerHash — (map)

          An object that contains details on the source layer hash to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

        • version — (map)

          The package version to filter on.

          • comparison — required — (String)

            The operator to use when comparing values in the filter.

            Possible values include:
            • "EQUALS"
            • "PREFIX"
            • "NOT_EQUALS"
          • value — required — (String)

            The value to filter on.

    • reportId — (String)

      The ID of the report.

    • status — (String)

      The status of the report.

      Possible values include:
      • "SUCCEEDED"
      • "IN_PROGRESS"
      • "CANCELLED"
      • "FAILED"