Skip to content

Commit 30b100c

Browse files
author
awstools
committed
feat(client-inspector2): This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts.
1 parent d7a58e2 commit 30b100c

File tree

3 files changed

+8
-1
lines changed

3 files changed

+8
-1
lines changed

clients/client-inspector2/src/models/enums.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -837,6 +837,7 @@ export const ScanStatusReason = {
837837
STALE_INVENTORY: "STALE_INVENTORY",
838838
SUCCESSFUL: "SUCCESSFUL",
839839
UNMANAGED_EC2_INSTANCE: "UNMANAGED_EC2_INSTANCE",
840+
UNSUPPORTED_CODE_ARTIFACTS: "UNSUPPORTED_CODE_ARTIFACTS",
840841
UNSUPPORTED_CONFIG_FILE: "UNSUPPORTED_CONFIG_FILE",
841842
UNSUPPORTED_LANGUAGE: "UNSUPPORTED_LANGUAGE",
842843
UNSUPPORTED_MEDIA_TYPE: "UNSUPPORTED_MEDIA_TYPE",

clients/client-inspector2/src/models/models_0.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4253,6 +4253,8 @@ export interface ScanStatus {
42534253
* Once the instance becomes managed by SSM, Inspector will automatically begin scanning this
42544254
* instance. </p>
42554255
* <p>
4256+
* <code>UNSUPPORTED_CODE_ARTIFACTS </code> - The function was not scanned because it has an unsupported code artifacts.</p>
4257+
* <p>
42564258
* <code>UNSUPPORTED_CONFIG_FILE</code> - Reserved for future use.</p>
42574259
* <p>
42584260
* <code>UNSUPPORTED_LANGUAGE</code> - The scan was unsuccessful because the repository

codegen/sdk-codegen/aws-models/inspector2.json

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15351,7 +15351,7 @@
1535115351
"reason": {
1535215352
"target": "com.amazonaws.inspector2#ScanStatusReason",
1535315353
"traits": {
15354-
"smithy.api#documentation": "<p>The scan status. Possible return values and descriptions are: </p>\n <p>\n <code>ACCESS_DENIED</code> - Resource access policy restricting Amazon Inspector access. Please\n update the IAM policy.</p>\n <p>\n <code>ACCESS_DENIED_TO_ENCRYPTION_KEY</code> - The KMS key policy doesn't allow Amazon Inspector\n access. Update the key policy.</p>\n <p>\n <code>DEEP_INSPECTION_COLLECTION_TIME_LIMIT_EXCEEDED</code> - Amazon Inspector failed to extract\n the package inventory because the package collection time exceeding the maximum threshold\n of 15 minutes.</p>\n <p>\n <code>DEEP_INSPECTION_DAILY_SSM_INVENTORY_LIMIT_EXCEEDED</code> - The SSM agent couldn't\n send inventory to Amazon Inspector because the SSM quota for Inventory data collected per instance per\n day has already been reached for this instance.</p>\n <p>\n <code>DEEP_INSPECTION_NO_INVENTORY</code> - The Amazon Inspector plugin hasn't yet been able to\n collect an inventory of packages for this instance. This is usually the result of a pending\n scan, however, if this status persists after 6 hours, use SSM to ensure that\n the required Amazon Inspector associations exist and are running for the instance.</p>\n <p>\n <code>DEEP_INSPECTION_PACKAGE_COLLECTION_LIMIT_EXCEEDED</code> - The instance has\n exceeded the 5000 package limit for Amazon Inspector Deep inspection. To resume Deep inspection for\n this instance you can try to adjust the custom paths associated with the account.</p>\n <p>\n <code>EC2_INSTANCE_STOPPED</code> - This EC2 instance is in a stopped state, therefore,\n Amazon Inspector will pause scanning. The existing findings will continue to exist until the instance\n is terminated. Once the instance is re-started, Inspector will automatically start scanning\n the instance again. Please note that you will not be charged for this instance while it's\n in a stopped state.</p>\n <p>\n <code>EXCLUDED_BY_TAG</code> - This resource was not scanned because it has been\n excluded by a tag.</p>\n <p>\n <code>IMAGE_SIZE_EXCEEDED</code> - Reserved for future use.</p>\n <p>\n <code>INTEGRATION_CONNNECTION_LOST</code> - Amazon Inspector couldn't communicate with the source\n code management platform.</p>\n <p>\n <code>INTERNAL_ERROR</code> - Amazon Inspector has encountered an internal error for this resource.\n Amazon Inspector service will automatically resolve the issue and resume the scanning. No action\n required from the user.</p>\n <p>\n <code>NO_INVENTORY</code> - Amazon Inspector couldn't find software application inventory to scan\n for vulnerabilities. This might be caused due to required Amazon Inspector associations being deleted\n or failing to run on your resource. Please verify the status of\n <code>InspectorInventoryCollection-do-not-delete</code> association in the SSM console\n for the resource. Additionally, you can verify the instance's inventory in the SSM Fleet\n Manager console.</p>\n <p>\n <code>NO_RESOURCES_FOUND</code> - Reserved for future use.</p>\n <p>\n <code>NO_SCAN_CONFIGURATION_ASSOCIATED</code> - The code repository resource doesn't\n have an associated scan configuration.</p>\n <p>\n <code>PENDING_DISABLE</code> - This resource is pending cleanup during disablement. The\n customer will not be billed while a resource is in the pending disable status.</p>\n <p>\n <code>PENDING_INITIAL_SCAN</code> - This resource has been identified for scanning,\n results will be available soon.</p>\n <p>\n <code>RESOURCE_TERMINATED</code> - This resource has been terminated. The findings and\n coverage associated with this resource are in the process of being cleaned up.</p>\n <p>\n <code>SCAN_ELIGIBILITY_EXPIRED</code> - The configured scan duration has lapsed for this\n image.</p>\n <p>\n <code>SCAN_FREQUENCY_MANUAL</code> - This image will not be covered by Amazon Inspector due to the\n repository scan frequency configuration.</p>\n <p>\n <code>SCAN_FREQUENCY_SCAN_ON_PUSH</code> - This image will be scanned one time and will\n not new findings because of the scan frequency configuration.</p>\n <p>\n <code>SCAN_IN_PROGRESS</code> - The resource is currently being scanned.</p>\n <p>\n <code>STALE_INVENTORY</code> - Amazon Inspector wasn't able to collect an updated software\n application inventory in the last 7 days. Please confirm the required Amazon Inspector associations\n still exist and you can still see an updated inventory in the SSM console.</p>\n <p>\n <code>SUCCESSFUL</code> - The scan was successful.</p>\n <p>\n <code>UNMANAGED_EC2_INSTANCE</code> - The EC2 instance is not managed by SSM, please use\n the following SSM automation to remediate the issue: <a href=\"https://docs.aws.amazon.com/systems-manager-automation-runbooks/latest/userguide/automation-awssupport-troubleshoot-managed-instance.html\">https://docs.aws.amazon.com/systems-manager-automation-runbooks/latest/userguide/automation-awssupport-troubleshoot-managed-instance.html</a>.\n Once the instance becomes managed by SSM, Inspector will automatically begin scanning this\n instance. </p>\n <p>\n <code>UNSUPPORTED_CONFIG_FILE</code> - Reserved for future use.</p>\n <p>\n <code>UNSUPPORTED_LANGUAGE</code> - The scan was unsuccessful because the repository\n contains files in an unsupported programming language.</p>\n <p>\n <code>UNSUPPORTED_MEDIA_TYPE </code>- The ECR image has an unsupported media\n type.</p>\n <p>\n <code>UNSUPPORTED_OS</code> - Amazon Inspector does not support this OS, architecture, or image\n manifest type at this time. To see a complete list of supported operating systems see:\n <a href=\" https://docs.aws.amazon.com/inspector/latest/user/supported.html\">https://docs.aws.amazon.com/inspector/latest/user/supported.html</a>.</p>\n <p>\n <code>UNSUPPORTED_RUNTIME</code> - The function was not scanned because it has an\n unsupported runtime. To see a complete list of supported runtimes see: <a href=\" https://docs.aws.amazon.com/inspector/latest/user/supported.html\">https://docs.aws.amazon.com/inspector/latest/user/supported.html</a>.</p>\n <p>\n <code>IMAGE_ARCHIVED</code> - This image has been archived in Amazon ECR and is no longer available for scanning in Amazon Inspector.\n </p>",
15354+
"smithy.api#documentation": "<p>The scan status. Possible return values and descriptions are: </p>\n <p>\n <code>ACCESS_DENIED</code> - Resource access policy restricting Amazon Inspector access. Please\n update the IAM policy.</p>\n <p>\n <code>ACCESS_DENIED_TO_ENCRYPTION_KEY</code> - The KMS key policy doesn't allow Amazon Inspector\n access. Update the key policy.</p>\n <p>\n <code>DEEP_INSPECTION_COLLECTION_TIME_LIMIT_EXCEEDED</code> - Amazon Inspector failed to extract\n the package inventory because the package collection time exceeding the maximum threshold\n of 15 minutes.</p>\n <p>\n <code>DEEP_INSPECTION_DAILY_SSM_INVENTORY_LIMIT_EXCEEDED</code> - The SSM agent couldn't\n send inventory to Amazon Inspector because the SSM quota for Inventory data collected per instance per\n day has already been reached for this instance.</p>\n <p>\n <code>DEEP_INSPECTION_NO_INVENTORY</code> - The Amazon Inspector plugin hasn't yet been able to\n collect an inventory of packages for this instance. This is usually the result of a pending\n scan, however, if this status persists after 6 hours, use SSM to ensure that\n the required Amazon Inspector associations exist and are running for the instance.</p>\n <p>\n <code>DEEP_INSPECTION_PACKAGE_COLLECTION_LIMIT_EXCEEDED</code> - The instance has\n exceeded the 5000 package limit for Amazon Inspector Deep inspection. To resume Deep inspection for\n this instance you can try to adjust the custom paths associated with the account.</p>\n <p>\n <code>EC2_INSTANCE_STOPPED</code> - This EC2 instance is in a stopped state, therefore,\n Amazon Inspector will pause scanning. The existing findings will continue to exist until the instance\n is terminated. Once the instance is re-started, Inspector will automatically start scanning\n the instance again. Please note that you will not be charged for this instance while it's\n in a stopped state.</p>\n <p>\n <code>EXCLUDED_BY_TAG</code> - This resource was not scanned because it has been\n excluded by a tag.</p>\n <p>\n <code>IMAGE_SIZE_EXCEEDED</code> - Reserved for future use.</p>\n <p>\n <code>INTEGRATION_CONNNECTION_LOST</code> - Amazon Inspector couldn't communicate with the source\n code management platform.</p>\n <p>\n <code>INTERNAL_ERROR</code> - Amazon Inspector has encountered an internal error for this resource.\n Amazon Inspector service will automatically resolve the issue and resume the scanning. No action\n required from the user.</p>\n <p>\n <code>NO_INVENTORY</code> - Amazon Inspector couldn't find software application inventory to scan\n for vulnerabilities. This might be caused due to required Amazon Inspector associations being deleted\n or failing to run on your resource. Please verify the status of\n <code>InspectorInventoryCollection-do-not-delete</code> association in the SSM console\n for the resource. Additionally, you can verify the instance's inventory in the SSM Fleet\n Manager console.</p>\n <p>\n <code>NO_RESOURCES_FOUND</code> - Reserved for future use.</p>\n <p>\n <code>NO_SCAN_CONFIGURATION_ASSOCIATED</code> - The code repository resource doesn't\n have an associated scan configuration.</p>\n <p>\n <code>PENDING_DISABLE</code> - This resource is pending cleanup during disablement. The\n customer will not be billed while a resource is in the pending disable status.</p>\n <p>\n <code>PENDING_INITIAL_SCAN</code> - This resource has been identified for scanning,\n results will be available soon.</p>\n <p>\n <code>RESOURCE_TERMINATED</code> - This resource has been terminated. The findings and\n coverage associated with this resource are in the process of being cleaned up.</p>\n <p>\n <code>SCAN_ELIGIBILITY_EXPIRED</code> - The configured scan duration has lapsed for this\n image.</p>\n <p>\n <code>SCAN_FREQUENCY_MANUAL</code> - This image will not be covered by Amazon Inspector due to the\n repository scan frequency configuration.</p>\n <p>\n <code>SCAN_FREQUENCY_SCAN_ON_PUSH</code> - This image will be scanned one time and will\n not new findings because of the scan frequency configuration.</p>\n <p>\n <code>SCAN_IN_PROGRESS</code> - The resource is currently being scanned.</p>\n <p>\n <code>STALE_INVENTORY</code> - Amazon Inspector wasn't able to collect an updated software\n application inventory in the last 7 days. Please confirm the required Amazon Inspector associations\n still exist and you can still see an updated inventory in the SSM console.</p>\n <p>\n <code>SUCCESSFUL</code> - The scan was successful.</p>\n <p>\n <code>UNMANAGED_EC2_INSTANCE</code> - The EC2 instance is not managed by SSM, please use\n the following SSM automation to remediate the issue: <a href=\"https://docs.aws.amazon.com/systems-manager-automation-runbooks/latest/userguide/automation-awssupport-troubleshoot-managed-instance.html\">https://docs.aws.amazon.com/systems-manager-automation-runbooks/latest/userguide/automation-awssupport-troubleshoot-managed-instance.html</a>.\n Once the instance becomes managed by SSM, Inspector will automatically begin scanning this\n instance. </p>\n <p>\n <code>UNSUPPORTED_CODE_ARTIFACTS </code> - The function was not scanned because it has an unsupported code artifacts.</p>\n <p>\n <code>UNSUPPORTED_CONFIG_FILE</code> - Reserved for future use.</p>\n <p>\n <code>UNSUPPORTED_LANGUAGE</code> - The scan was unsuccessful because the repository\n contains files in an unsupported programming language.</p>\n <p>\n <code>UNSUPPORTED_MEDIA_TYPE </code>- The ECR image has an unsupported media\n type.</p>\n <p>\n <code>UNSUPPORTED_OS</code> - Amazon Inspector does not support this OS, architecture, or image\n manifest type at this time. To see a complete list of supported operating systems see:\n <a href=\" https://docs.aws.amazon.com/inspector/latest/user/supported.html\">https://docs.aws.amazon.com/inspector/latest/user/supported.html</a>.</p>\n <p>\n <code>UNSUPPORTED_RUNTIME</code> - The function was not scanned because it has an\n unsupported runtime. To see a complete list of supported runtimes see: <a href=\" https://docs.aws.amazon.com/inspector/latest/user/supported.html\">https://docs.aws.amazon.com/inspector/latest/user/supported.html</a>.</p>\n <p>\n <code>IMAGE_ARCHIVED</code> - This image has been archived in Amazon ECR and is no longer available for scanning in Amazon Inspector.\n </p>",
1535515355
"smithy.api#required": {}
1535615356
}
1535715357
}
@@ -15510,6 +15510,10 @@
1551015510
{
1551115511
"value": "IMAGE_ARCHIVED",
1551215512
"name": "IMAGE_ARCHIVED"
15513+
},
15514+
{
15515+
"value": "UNSUPPORTED_CODE_ARTIFACTS",
15516+
"name": "UNSUPPORTED_CODE_ARTIFACTS"
1551315517
}
1551415518
]
1551515519
}

0 commit comments

Comments
 (0)