Skip to content

EC2  >  Structures  >  ImageFinding

ImageFinding

Structure Class

ImageFinding dataclass

Bases: _SerdeShape

Describes an Amazon Inspector vulnerability finding for an AMI.

Attributes

first_observed_at class-attribute instance-attribute
first_observed_at: datetime | None = ...

The date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), when Amazon Inspector first observed the finding.

fix_available class-attribute instance-attribute
fix_available: bool | None = ...

Specifies whether a fix is available for the finding. This value is true when Amazon Inspector reports a full or partial fix for the finding.

paths class-attribute instance-attribute
paths: list[str] | None = ...

The file paths in the AMI that are affected by the finding. Amazon EC2 returns up to 10 file paths for each finding.

score class-attribute instance-attribute
score: float | None = ...

The Amazon Inspector score for the finding.

severity_label class-attribute instance-attribute
severity_label: str | None = ...

The severity of the finding.

The valid values are the following Amazon Inspector severity levels, which correspond to CVSS score ranges:

  • informational - CVSS score of 0.

  • low - CVSS score of 0.1 to 3.9.

  • medium - CVSS score of 4.0 to 6.9.

  • high - CVSS score of 7.0 to 8.9.

  • critical - CVSS score of 9.0 to 10.0.

For more information, see Software package vulnerability severity in the Amazon Inspector User Guide.

snapshot_id class-attribute instance-attribute
snapshot_id: str | None = ...

The ID of the Amazon EBS snapshot of the AMI in which the finding was detected.

title class-attribute instance-attribute
title: str | None = ...

The title of the finding.

updated_at class-attribute instance-attribute
updated_at: datetime | None = ...

The date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), when Amazon Inspector last updated the finding.