CoveredResource

The AWS account ID of the covered resource.

Type: String

Length Constraints: Fixed length of 12.

Pattern: \d{12}

Required: Yes

The ID of the covered resource.

Type: String

Length Constraints: Minimum length of 10. Maximum length of 1024.

Pattern: .*(^arn:.*:ecr:.*:\d{12}:repository\/[a-zA-Z0-9._\/-]+(\/sha256:[a-z0-9]{64})?$)|(^i-([a-z0-9]{8}|[a-z0-9]{17}|\\*)$|(^arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST|[a-zA-Z0-9-_]+))?$)|(^arn:(aws[a-zA-Z-]*)?:inspector2:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:codesecurity-integration\/[a-f0-9-]{36}\/project-[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$))|(^\/subscriptions\/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}\/resourcegroups\/[a-z0-9_\-\.()]+\/providers\/(microsoft\.compute\/virtualmachines\/[a-z0-9_\-]+|microsoft\.web\/sites\/[a-z0-9_\-]+|microsoft\.containerregistry\/registries\/[a-z0-9_\-]+(\/repositories\/[a-z0-9_\-\/]+\/images?\/sha256:[a-f0-9]{64})?)$).*

Required: Yes

The type of the covered resource.

Type: String

Valid Values: AWS_EC2_INSTANCE | AWS_ECR_CONTAINER_IMAGE | AWS_ECR_REPOSITORY | AWS_LAMBDA_FUNCTION | CODE_REPOSITORY | Microsoft.Compute/virtualMachines | Microsoft.ContainerRegistry/registry/containerImage | Microsoft.ContainerRegistry/registry/containerRepository | Microsoft.Web/sites | Microsoft.ContainerRegistry/registries

Required: Yes

The Amazon Inspector scan type covering the resource.

Type: String

Valid Values: NETWORK | PACKAGE | CODE

Required: Yes

The date and time the resource was last checked for vulnerabilities.

Type: Timestamp

Required: No

The cloud provider of the covered resource.

Type: String

Valid Values: AWS | AZURE

Required: No

The cloud provider account ID of the covered resource.

Type: String

Length Constraints: Minimum length of 12. Maximum length of 36.

Pattern: (\d{12}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})

Required: No

The cloud provider organization ID of the covered resource.

Type: String

Length Constraints: Minimum length of 12. Maximum length of 36.

Pattern: (o-[a-z0-9]{10,32}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})

Required: No

The cloud provider partition of the covered resource.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: (aws(-[a-z]+)*|Azure[A-Za-z]+)

Required: No

The cloud provider region of the covered resource.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: ([a-z]{2}(-[a-z]+)+-\d+|[a-z][a-z0-9]+)

Required: No

An object that contains details about the metadata.

Type: ResourceScanMetadata object

Required: No

The scan method that is applied to the instance.

Type: String

Valid Values: EC2_SSM_AGENT_BASED | EC2_AGENTLESS | EC2_INSPECTOR_AGENT_BASED | VM_INSPECTOR_AGENT_BASED

Required: No

The status of the scan covering the resource.

Type: ScanStatus object

Required: No