AWS.Inspector2 reference

AssociateMember

Source: src/AWS/Inspector2/AssociateMember.ts

Runtime binding for inspector2:AssociateMember.

Associates an Amazon Web Services account with an Amazon Inspector delegated administrator. An HTTP 200 response indicates the association was successfully started, but doesn’t indicate whether it was completed. You can check if the association completed by using ListMembers for multiple accounts or GetMembers for a single account.

Provide the implementation with Effect.provide(AWS.Inspector2.AssociateMemberHttp).

AssociateMember: Organization & Members

// init
const associateMember = yield* AWS.Inspector2.AssociateMember();

// runtime
yield* associateMember({ accountId });

BatchGetCodeSnippet

Source: src/AWS/Inspector2/BatchGetCodeSnippet.ts

Runtime binding for inspector2:BatchGetCodeSnippet.

Retrieves code snippets from findings that Amazon Inspector detected code vulnerabilities in.

Provide the implementation with Effect.provide(AWS.Inspector2.BatchGetCodeSnippetHttp).

BatchGetCodeSnippet: Querying Findings

// init
const batchGetCodeSnippet = yield* AWS.Inspector2.BatchGetCodeSnippet();

// runtime
const { codeSnippetResults } = yield* batchGetCodeSnippet({ findingArns: [findingArn] });

BatchGetFindingDetails

Source: src/AWS/Inspector2/BatchGetFindingDetails.ts

Runtime binding for inspector2:BatchGetFindingDetails.

Gets vulnerability details for findings.

Provide the implementation with Effect.provide(AWS.Inspector2.BatchGetFindingDetailsHttp).

BatchGetFindingDetails: Querying Findings

// init
const batchGetFindingDetails = yield* AWS.Inspector2.BatchGetFindingDetails();

// runtime
const { findingDetails } = yield* batchGetFindingDetails({ findingArns: [findingArn] });

BatchGetFreeTrialInfo

Source: src/AWS/Inspector2/BatchGetFreeTrialInfo.ts

Runtime binding for inspector2:BatchGetFreeTrialInfo.

Gets free trial status for multiple Amazon Web Services accounts.

Provide the implementation with Effect.provide(AWS.Inspector2.BatchGetFreeTrialInfoHttp).

BatchGetFreeTrialInfo: Account Settings & Usage

// init
const batchGetFreeTrialInfo = yield* AWS.Inspector2.BatchGetFreeTrialInfo();

// runtime
const { accounts } = yield* batchGetFreeTrialInfo({ accountIds: [accountId] });

BatchGetMemberEc2DeepInspectionStatus

Source: src/AWS/Inspector2/BatchGetMemberEc2DeepInspectionStatus.ts

Runtime binding for inspector2:BatchGetMemberEc2DeepInspectionStatus.

Retrieves Amazon Inspector deep inspection activation status of multiple member accounts within your organization. You must be the delegated administrator of an organization in Amazon Inspector to use this API.

Provide the implementation with Effect.provide(AWS.Inspector2.BatchGetMemberEc2DeepInspectionStatusHttp).

BatchGetMemberEc2DeepInspectionStatus: Organization & Members

// init
const batchGetMemberEc2DeepInspectionStatus = yield* AWS.Inspector2.BatchGetMemberEc2DeepInspectionStatus();

// runtime
const { accountIds } = yield* batchGetMemberEc2DeepInspectionStatus();

BatchUpdateMemberEc2DeepInspectionStatus

Source: src/AWS/Inspector2/BatchUpdateMemberEc2DeepInspectionStatus.ts

Runtime binding for inspector2:BatchUpdateMemberEc2DeepInspectionStatus.

Activates or deactivates Amazon Inspector deep inspection for the provided member accounts in your organization. You must be the delegated administrator of an organization in Amazon Inspector to use this API.

Provide the implementation with Effect.provide(AWS.Inspector2.BatchUpdateMemberEc2DeepInspectionStatusHttp).

BatchUpdateMemberEc2DeepInspectionStatus: Organization & Members

// init
const batchUpdateMemberEc2DeepInspectionStatus = yield* AWS.Inspector2.BatchUpdateMemberEc2DeepInspectionStatus();

// runtime
const { accountIds } = yield* batchUpdateMemberEc2DeepInspectionStatus({
  accountIds: [{ accountId, activateDeepInspection: true }],
});

CancelFindingsReport

Source: src/AWS/Inspector2/CancelFindingsReport.ts

Runtime binding for inspector2:CancelFindingsReport.

Cancels the given findings report.

Provide the implementation with Effect.provide(AWS.Inspector2.CancelFindingsReportHttp).

CancelFindingsReport: Findings Reports & SBOM Exports

// init
const cancelFindingsReport = yield* AWS.Inspector2.CancelFindingsReport();

// runtime
yield* cancelFindingsReport({ reportId });

CancelSbomExport

Source: src/AWS/Inspector2/CancelSbomExport.ts

Runtime binding for inspector2:CancelSbomExport.

Cancels a software bill of materials (SBOM) report.

Provide the implementation with Effect.provide(AWS.Inspector2.CancelSbomExportHttp).

CancelSbomExport: Findings Reports & SBOM Exports

// init
const cancelSbomExport = yield* AWS.Inspector2.CancelSbomExport();

// runtime
yield* cancelSbomExport({ reportId });

CisScanConfiguration

Source: src/AWS/Inspector2/CisScanConfiguration.ts

An Amazon Inspector CIS scan configuration — schedules CIS Benchmark scans of SSM-managed EC2 instances selected by resource tags. Name, level, schedule, and targets are all updatable in place; identity is the configuration’s ARN.

CisScanConfiguration: Scheduling CIS Scans

Daily Level 1 scan of production instances

const scan = yield* AWS.Inspector2.CisScanConfiguration("NightlyCis", {
  securityLevel: "LEVEL_1",
  schedule: {
    daily: { startTime: { timeOfDay: "02:00", timezone: "UTC" } },
  },
  targets: {
    accountIds: ["SELF"],
    targetResourceTags: { Environment: ["production"] },
  },
});

One-time Level 2 audit

const audit = yield* AWS.Inspector2.CisScanConfiguration("Level2Audit", {
  scanName: "level2-audit",
  securityLevel: "LEVEL_2",
  schedule: { oneTime: {} },
  targets: {
    accountIds: ["SELF"],
    targetResourceTags: { Audit: ["true"] },
  },
});

CreateFindingsReport

Source: src/AWS/Inspector2/CreateFindingsReport.ts

Runtime binding for inspector2:CreateFindingsReport.

Creates a finding report. By default only ACTIVE findings are returned in the report. To see SUPRESSED or CLOSED findings you must specify a value for the findingStatus filter criteria.

Provide the implementation with Effect.provide(AWS.Inspector2.CreateFindingsReportHttp).

CreateFindingsReport: Findings Reports & SBOM Exports

// init
const createFindingsReport = yield* AWS.Inspector2.CreateFindingsReport();

// runtime
const { reportId } = yield* createFindingsReport({
  reportFormat: "JSON",
  s3Destination: { bucketName, keyPrefix: "findings/", kmsKeyArn },
});

CreateSbomExport

Source: src/AWS/Inspector2/CreateSbomExport.ts

Runtime binding for inspector2:CreateSbomExport.

Creates a software bill of materials (SBOM) report.

Provide the implementation with Effect.provide(AWS.Inspector2.CreateSbomExportHttp).

CreateSbomExport: Findings Reports & SBOM Exports

// init
const createSbomExport = yield* AWS.Inspector2.CreateSbomExport();

// runtime
const { reportId } = yield* createSbomExport({
  reportFormat: "SPDX_2_3",
  s3Destination: { bucketName, keyPrefix: "sbom/", kmsKeyArn },
});

DescribeOrganizationConfiguration

Source: src/AWS/Inspector2/DescribeOrganizationConfiguration.ts

Runtime binding for inspector2:DescribeOrganizationConfiguration.

Describe Amazon Inspector configuration settings for an Amazon Web Services organization.

Provide the implementation with Effect.provide(AWS.Inspector2.DescribeOrganizationConfigurationHttp).

DescribeOrganizationConfiguration: Organization & Members

// init
const describeOrganizationConfiguration = yield* AWS.Inspector2.DescribeOrganizationConfiguration();

// runtime
const { autoEnable } = yield* describeOrganizationConfiguration();

DisableDelegatedAdminAccount

Source: src/AWS/Inspector2/DisableDelegatedAdminAccount.ts

Runtime binding for inspector2:DisableDelegatedAdminAccount.

Disables the Amazon Inspector delegated administrator for your organization.

Provide the implementation with Effect.provide(AWS.Inspector2.DisableDelegatedAdminAccountHttp).

DisableDelegatedAdminAccount: Organization & Members

// init
const disableDelegatedAdminAccount = yield* AWS.Inspector2.DisableDelegatedAdminAccount();

// runtime
yield* disableDelegatedAdminAccount({ delegatedAdminAccountId });

DisassociateMember

Source: src/AWS/Inspector2/DisassociateMember.ts

Runtime binding for inspector2:DisassociateMember.

Disassociates a member account from an Amazon Inspector delegated administrator.

Provide the implementation with Effect.provide(AWS.Inspector2.DisassociateMemberHttp).

DisassociateMember: Organization & Members

// init
const disassociateMember = yield* AWS.Inspector2.DisassociateMember();

// runtime
yield* disassociateMember({ accountId });

EnableDelegatedAdminAccount

Source: src/AWS/Inspector2/EnableDelegatedAdminAccount.ts

Runtime binding for inspector2:EnableDelegatedAdminAccount.

Enables the Amazon Inspector delegated administrator for your Organizations organization.

Provide the implementation with Effect.provide(AWS.Inspector2.EnableDelegatedAdminAccountHttp).

EnableDelegatedAdminAccount: Organization & Members

// init
const enableDelegatedAdminAccount = yield* AWS.Inspector2.EnableDelegatedAdminAccount();

// runtime
yield* enableDelegatedAdminAccount({ delegatedAdminAccountId });

Enabler

Source: src/AWS/Inspector2/Enabler.ts

Amazon Inspector account enablement — an account/region singleton that turns on continuous vulnerability scanning for the selected resource types (EC2, ECR, Lambda). Inspector exposes no tagging, so ownership is tracked by the set of scan types this resource enabled; destroy only disables those types and leaves any the account had enabled out-of-band untouched.

Enabler: Enabling Inspector

const inspector = yield* Inspector2.Enabler("Inspector", {
  resourceTypes: ["EC2", "ECR", "LAMBDA"],
});

Filter

Source: src/AWS/Inspector2/Filter.ts

An Amazon Inspector findings filter — matches findings against criteria and either keeps them visible (NONE, a saved view) or suppresses them (SUPPRESS, a suppression rule). Everything is updatable in place; the filter’s identity is its ARN.

Filter: Suppressing Findings

Suppress informational findings

const filter = yield* AWS.Inspector2.Filter("SuppressInfo", {
  action: "SUPPRESS",
  reason: "Informational findings are tracked elsewhere",
  filterCriteria: {
    severity: [{ comparison: "EQUALS", value: "INFORMATIONAL" }],
  },
});

Saved view of one repository’s findings

const filter = yield* AWS.Inspector2.Filter("RepoView", {
  name: "payments-repository",
  action: "NONE",
  filterCriteria: {
    ecrImageRepositoryName: [{ comparison: "EQUALS", value: "payments" }],
  },
});

GetCisScanReport

Source: src/AWS/Inspector2/GetCisScanReport.ts

Runtime binding for inspector2:GetCisScanReport.

Retrieves a CIS scan report.

Provide the implementation with Effect.provide(AWS.Inspector2.GetCisScanReportHttp).

GetCisScanReport: CIS Scan Results

// init
const getCisScanReport = yield* AWS.Inspector2.GetCisScanReport();

// runtime
const { url, status } = yield* getCisScanReport({ scanArn });

GetCisScanResultDetails

Source: src/AWS/Inspector2/GetCisScanResultDetails.ts

Runtime binding for inspector2:GetCisScanResultDetails.

Retrieves CIS scan result details.

Provide the implementation with Effect.provide(AWS.Inspector2.GetCisScanResultDetailsHttp).

GetCisScanResultDetails: CIS Scan Results

// init
const getCisScanResultDetails = yield* AWS.Inspector2.GetCisScanResultDetails();

// runtime
const { scanResultDetails } = yield* getCisScanResultDetails({
  scanArn,
  accountId,
  targetResourceId: instanceId,
});

GetClustersForImage

Source: src/AWS/Inspector2/GetClustersForImage.ts

Runtime binding for inspector2:GetClustersForImage.

Returns a list of clusters and metadata associated with an image.

Provide the implementation with Effect.provide(AWS.Inspector2.GetClustersForImageHttp).

GetClustersForImage: Coverage & Vulnerability Intel

// init
const getClustersForImage = yield* AWS.Inspector2.GetClustersForImage();

// runtime
const { cluster } = yield* getClustersForImage({
  filter: { resourceId: imageResourceId },
});

GetCodeSecurityScan

Source: src/AWS/Inspector2/GetCodeSecurityScan.ts

Runtime binding for inspector2:GetCodeSecurityScan.

Retrieves information about a specific code security scan.

Provide the implementation with Effect.provide(AWS.Inspector2.GetCodeSecurityScanHttp).

GetCodeSecurityScan: Code Security Scans

// init
const getCodeSecurityScan = yield* AWS.Inspector2.GetCodeSecurityScan();

// runtime
const { status } = yield* getCodeSecurityScan({
  resource: { projectId },
  scanId,
});

GetConfiguration

Source: src/AWS/Inspector2/GetConfiguration.ts

Runtime binding for inspector2:GetConfiguration.

Retrieves setting configurations for Inspector scans.

Provide the implementation with Effect.provide(AWS.Inspector2.GetConfigurationHttp).

GetConfiguration: Account Settings & Usage

// init
const getConfiguration = yield* AWS.Inspector2.GetConfiguration();

// runtime
const { ecrConfiguration, ec2Configuration } = yield* getConfiguration();

GetDelegatedAdminAccount

Source: src/AWS/Inspector2/GetDelegatedAdminAccount.ts

Runtime binding for inspector2:GetDelegatedAdminAccount.

Retrieves information about the Amazon Inspector delegated administrator for your organization.

Provide the implementation with Effect.provide(AWS.Inspector2.GetDelegatedAdminAccountHttp).

GetDelegatedAdminAccount: Organization & Members

// init
const getDelegatedAdminAccount = yield* AWS.Inspector2.GetDelegatedAdminAccount();

// runtime
const { delegatedAdmin } = yield* getDelegatedAdminAccount();

GetEc2DeepInspectionConfiguration

Source: src/AWS/Inspector2/GetEc2DeepInspectionConfiguration.ts

Runtime binding for inspector2:GetEc2DeepInspectionConfiguration.

Retrieves the activation status of Amazon Inspector deep inspection and custom paths associated with your account.

Provide the implementation with Effect.provide(AWS.Inspector2.GetEc2DeepInspectionConfigurationHttp).

GetEc2DeepInspectionConfiguration: Account Settings & Usage

// init
const getEc2DeepInspectionConfiguration = yield* AWS.Inspector2.GetEc2DeepInspectionConfiguration();

// runtime
const { status, packagePaths } = yield* getEc2DeepInspectionConfiguration();

GetEncryptionKey

Source: src/AWS/Inspector2/GetEncryptionKey.ts

Runtime binding for inspector2:GetEncryptionKey.

Gets an encryption key.

Provide the implementation with Effect.provide(AWS.Inspector2.GetEncryptionKeyHttp).

GetEncryptionKey: Account Settings & Usage

// init
const getEncryptionKey = yield* AWS.Inspector2.GetEncryptionKey();

// runtime
const { kmsKeyId } = yield* getEncryptionKey({
  resourceType: "AWS_ECR_CONTAINER_IMAGE",
  scanType: "PACKAGE",
});

GetFindingsReportStatus

Source: src/AWS/Inspector2/GetFindingsReportStatus.ts

Runtime binding for inspector2:GetFindingsReportStatus.

Gets the status of a findings report.

Provide the implementation with Effect.provide(AWS.Inspector2.GetFindingsReportStatusHttp).

GetFindingsReportStatus: Findings Reports & SBOM Exports

// init
const getFindingsReportStatus = yield* AWS.Inspector2.GetFindingsReportStatus();

// runtime
const { status } = yield* getFindingsReportStatus({ reportId });

GetMember

Source: src/AWS/Inspector2/GetMember.ts

Runtime binding for inspector2:GetMember.

Gets member information for your organization.

Provide the implementation with Effect.provide(AWS.Inspector2.GetMemberHttp).

GetMember: Organization & Members

// init
const getMember = yield* AWS.Inspector2.GetMember();

// runtime
const { member } = yield* getMember({ accountId });

GetSbomExport

Source: src/AWS/Inspector2/GetSbomExport.ts

Runtime binding for inspector2:GetSbomExport.

Gets details of a software bill of materials (SBOM) report.

Provide the implementation with Effect.provide(AWS.Inspector2.GetSbomExportHttp).

GetSbomExport: Findings Reports & SBOM Exports

// init
const getSbomExport = yield* AWS.Inspector2.GetSbomExport();

// runtime
const { status } = yield* getSbomExport({ reportId });

ListAccountPermissions

Source: src/AWS/Inspector2/ListAccountPermissions.ts

Runtime binding for inspector2:ListAccountPermissions.

Lists the permissions an account has to configure Amazon Inspector. If the account is a member account or standalone account with resources managed by an Organizations policy, the operation returns fewer permissions.

Provide the implementation with Effect.provide(AWS.Inspector2.ListAccountPermissionsHttp).

ListAccountPermissions: Account Settings & Usage

// init
const listAccountPermissions = yield* AWS.Inspector2.ListAccountPermissions();

// runtime
const { permissions } = yield* listAccountPermissions();

ListCisScanResultsAggregatedByChecks

Source: src/AWS/Inspector2/ListCisScanResultsAggregatedByChecks.ts

Runtime binding for inspector2:ListCisScanResultsAggregatedByChecks.

Lists scan results aggregated by checks.

Provide the implementation with Effect.provide(AWS.Inspector2.ListCisScanResultsAggregatedByChecksHttp).

ListCisScanResultsAggregatedByChecks: CIS Scan Results

// init
const listCisScanResultsAggregatedByChecks = yield* AWS.Inspector2.ListCisScanResultsAggregatedByChecks();

// runtime
const { checkAggregations } = yield* listCisScanResultsAggregatedByChecks({ scanArn });

ListCisScanResultsAggregatedByTargetResource

Source: src/AWS/Inspector2/ListCisScanResultsAggregatedByTargetResource.ts

Runtime binding for inspector2:ListCisScanResultsAggregatedByTargetResource.

Lists scan results aggregated by a target resource.

Provide the implementation with Effect.provide(AWS.Inspector2.ListCisScanResultsAggregatedByTargetResourceHttp).

ListCisScanResultsAggregatedByTargetResource: CIS Scan Results

// init
const listCisScanResultsAggregatedByTargetResource = yield* AWS.Inspector2.ListCisScanResultsAggregatedByTargetResource();

// runtime
const { targetResourceAggregations } = yield* listCisScanResultsAggregatedByTargetResource({ scanArn });

ListCisScans

Source: src/AWS/Inspector2/ListCisScans.ts

Runtime binding for inspector2:ListCisScans.

Returns a CIS scan list.

Provide the implementation with Effect.provide(AWS.Inspector2.ListCisScansHttp).

ListCisScans: CIS Scan Results

// init
const listCisScans = yield* AWS.Inspector2.ListCisScans();

// runtime
const { scans } = yield* listCisScans();

ListCoverage

Source: src/AWS/Inspector2/ListCoverage.ts

Runtime binding for inspector2:ListCoverage.

Lists coverage details for your environment.

Provide the implementation with Effect.provide(AWS.Inspector2.ListCoverageHttp).

ListCoverage: Coverage & Vulnerability Intel

// init
const listCoverage = yield* AWS.Inspector2.ListCoverage();

// runtime
const { coveredResources } = yield* listCoverage();

ListCoverageStatistics

Source: src/AWS/Inspector2/ListCoverageStatistics.ts

Runtime binding for inspector2:ListCoverageStatistics.

Lists Amazon Inspector coverage statistics for your environment.

Provide the implementation with Effect.provide(AWS.Inspector2.ListCoverageStatisticsHttp).

ListCoverageStatistics: Coverage & Vulnerability Intel

// init
const listCoverageStatistics = yield* AWS.Inspector2.ListCoverageStatistics();

// runtime
const { countsByGroup, totalCounts } = yield* listCoverageStatistics({ groupBy: "RESOURCE_TYPE" });

ListDelegatedAdminAccounts

Source: src/AWS/Inspector2/ListDelegatedAdminAccounts.ts

Runtime binding for inspector2:ListDelegatedAdminAccounts.

Lists information about the Amazon Inspector delegated administrator of your organization.

Provide the implementation with Effect.provide(AWS.Inspector2.ListDelegatedAdminAccountsHttp).

ListDelegatedAdminAccounts: Organization & Members

// init
const listDelegatedAdminAccounts = yield* AWS.Inspector2.ListDelegatedAdminAccounts();

// runtime
const { delegatedAdminAccounts } = yield* listDelegatedAdminAccounts();

ListFindingAggregations

Source: src/AWS/Inspector2/ListFindingAggregations.ts

Runtime binding for inspector2:ListFindingAggregations.

Lists aggregated finding data for your environment based on specific criteria.

Provide the implementation with Effect.provide(AWS.Inspector2.ListFindingAggregationsHttp).

ListFindingAggregations: Querying Findings

// init
const listFindingAggregations = yield* AWS.Inspector2.ListFindingAggregations();

// runtime
const { responses } = yield* listFindingAggregations({ aggregationType: "ACCOUNT" });

ListFindings

Source: src/AWS/Inspector2/ListFindings.ts

Runtime binding for inspector2:ListFindings.

Lists findings for your environment.

Provide the implementation with Effect.provide(AWS.Inspector2.ListFindingsHttp).

ListFindings: Querying Findings

// init
const listFindings = yield* AWS.Inspector2.ListFindings();

// runtime
const { findings } = yield* listFindings({
  filterCriteria: { severity: [{ comparison: "EQUALS", value: "CRITICAL" }] },
});

ListMembers

Source: src/AWS/Inspector2/ListMembers.ts

Runtime binding for inspector2:ListMembers.

List members associated with the Amazon Inspector delegated administrator for your organization.

Provide the implementation with Effect.provide(AWS.Inspector2.ListMembersHttp).

ListMembers: Organization & Members

// init
const listMembers = yield* AWS.Inspector2.ListMembers();

// runtime
const { members } = yield* listMembers();

ListUsageTotals

Source: src/AWS/Inspector2/ListUsageTotals.ts

Runtime binding for inspector2:ListUsageTotals.

Lists the Amazon Inspector usage totals over the last 30 days.

Provide the implementation with Effect.provide(AWS.Inspector2.ListUsageTotalsHttp).

ListUsageTotals: Account Settings & Usage

// init
const listUsageTotals = yield* AWS.Inspector2.ListUsageTotals();

// runtime
const { totals } = yield* listUsageTotals();

ResetEncryptionKey

Source: src/AWS/Inspector2/ResetEncryptionKey.ts

Runtime binding for inspector2:ResetEncryptionKey.

Resets an encryption key. After the key is reset your resources will be encrypted by an Amazon Web Services owned key.

Provide the implementation with Effect.provide(AWS.Inspector2.ResetEncryptionKeyHttp).

ResetEncryptionKey: Account Settings & Usage

// init
const resetEncryptionKey = yield* AWS.Inspector2.ResetEncryptionKey();

// runtime
yield* resetEncryptionKey({
  resourceType: "AWS_ECR_CONTAINER_IMAGE",
  scanType: "PACKAGE",
});

SearchVulnerabilities

Source: src/AWS/Inspector2/SearchVulnerabilities.ts

Runtime binding for inspector2:SearchVulnerabilities.

Lists Amazon Inspector coverage details for a specific vulnerability.

Provide the implementation with Effect.provide(AWS.Inspector2.SearchVulnerabilitiesHttp).

SearchVulnerabilities: Coverage & Vulnerability Intel

// init
const searchVulnerabilities = yield* AWS.Inspector2.SearchVulnerabilities();

// runtime
const { vulnerabilities } = yield* searchVulnerabilities({
  filterCriteria: { vulnerabilityIds: ["CVE-2021-44228"] },
});

StartCodeSecurityScan

Source: src/AWS/Inspector2/StartCodeSecurityScan.ts

Runtime binding for inspector2:StartCodeSecurityScan.

Initiates a code security scan on a specified repository.

Provide the implementation with Effect.provide(AWS.Inspector2.StartCodeSecurityScanHttp).

StartCodeSecurityScan: Code Security Scans

// init
const startCodeSecurityScan = yield* AWS.Inspector2.StartCodeSecurityScan();

// runtime
const { scanId, status } = yield* startCodeSecurityScan({
  resource: { projectId },
});

UpdateConfiguration

Source: src/AWS/Inspector2/UpdateConfiguration.ts

Runtime binding for inspector2:UpdateConfiguration.

Updates setting configurations for your Amazon Inspector account. When you use this API as an Amazon Inspector delegated administrator this updates the setting for all accounts you manage. Member accounts in an organization cannot update this setting.

Provide the implementation with Effect.provide(AWS.Inspector2.UpdateConfigurationHttp).

UpdateConfiguration: Account Settings & Usage

// init
const updateConfiguration = yield* AWS.Inspector2.UpdateConfiguration();

// runtime
yield* updateConfiguration({
  ecrConfiguration: { rescanDuration: "DAYS_30" },
});

UpdateEc2DeepInspectionConfiguration

Source: src/AWS/Inspector2/UpdateEc2DeepInspectionConfiguration.ts

Runtime binding for inspector2:UpdateEc2DeepInspectionConfiguration.

Activates, deactivates Amazon Inspector deep inspection, or updates custom paths for your account.

Provide the implementation with Effect.provide(AWS.Inspector2.UpdateEc2DeepInspectionConfigurationHttp).

UpdateEc2DeepInspectionConfiguration: Account Settings & Usage

// init
const updateEc2DeepInspectionConfiguration = yield* AWS.Inspector2.UpdateEc2DeepInspectionConfiguration();

// runtime
const { status } = yield* updateEc2DeepInspectionConfiguration({ activateDeepInspection: true });

UpdateEncryptionKey

Source: src/AWS/Inspector2/UpdateEncryptionKey.ts

Runtime binding for inspector2:UpdateEncryptionKey.

Updates an encryption key. A ResourceNotFoundException means that an Amazon Web Services owned key is being used for encryption.

Provide the implementation with Effect.provide(AWS.Inspector2.UpdateEncryptionKeyHttp).

UpdateEncryptionKey: Account Settings & Usage

// init
const updateEncryptionKey = yield* AWS.Inspector2.UpdateEncryptionKey();

// runtime
yield* updateEncryptionKey({
  kmsKeyId,
  resourceType: "AWS_ECR_CONTAINER_IMAGE",
  scanType: "PACKAGE",
});

UpdateOrganizationConfiguration

Source: src/AWS/Inspector2/UpdateOrganizationConfiguration.ts

Runtime binding for inspector2:UpdateOrganizationConfiguration.

Updates the configurations for your Amazon Inspector organization.

Provide the implementation with Effect.provide(AWS.Inspector2.UpdateOrganizationConfigurationHttp).

UpdateOrganizationConfiguration: Organization & Members

// init
const updateOrganizationConfiguration = yield* AWS.Inspector2.UpdateOrganizationConfiguration();

// runtime
yield* updateOrganizationConfiguration({
  autoEnable: { ec2: true, ecr: true, lambda: true },
});

UpdateOrgEc2DeepInspectionConfiguration

Source: src/AWS/Inspector2/UpdateOrgEc2DeepInspectionConfiguration.ts

Runtime binding for inspector2:UpdateOrgEc2DeepInspectionConfiguration.

Updates the Amazon Inspector deep inspection custom paths for your organization. You must be an Amazon Inspector delegated administrator to use this API.

Provide the implementation with Effect.provide(AWS.Inspector2.UpdateOrgEc2DeepInspectionConfigurationHttp).

UpdateOrgEc2DeepInspectionConfiguration: Organization & Members

// init
const updateOrgEc2DeepInspectionConfiguration = yield* AWS.Inspector2.UpdateOrgEc2DeepInspectionConfiguration();

// runtime
yield* updateOrgEc2DeepInspectionConfiguration({ orgPackagePaths: ["/opt/app"] });