Skip to content

EC2  >  Structures  >  ScanResults

ScanResults

Structure Class

ScanResults dataclass

Bases: _SerdeShape

The Amazon Inspector scan results for an AMI. This information is present only for AMIs that Amazon Inspector has scanned.

When you share an AMI with other accounts, organizations, or organizational units (OUs), or make it public, its scan results are available to the accounts that can use the AMI.

The fix-available dates are specific to the AMI. Each date reflects when a fix became available for a finding on that AMI, not when the vendor released the fix. As a result, a date can be later than the vendor's release date, and AMIs with the same vulnerability can have different dates.

Attributes

critical_fix_available_since class-attribute instance-attribute 
critical_fix_available_since: datetime | None = ...

The earliest date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), at which Amazon Inspector reported a fix as available for a critical severity finding on the AMI. This value is present only if the AMI has at least one critical severity finding with a fix available. Amazon Inspector recomputes this value on each scan.

finding_scan_date class-attribute instance-attribute 
finding_scan_date: datetime | None = ...

The date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), of the most recent Amazon Inspector scan of the AMI.

high_fix_available_since class-attribute instance-attribute 
high_fix_available_since: datetime | None = ...

The earliest date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), at which Amazon Inspector reported a fix as available for a high severity finding on the AMI. This value is present only if the AMI has at least one high severity finding with a fix available. Amazon Inspector recomputes this value on each scan.

highest_finding_severity_label class-attribute instance-attribute 
highest_finding_severity_label: str | None = ...

The highest severity among the AMI's Amazon Inspector findings, whether or not a fix is available.

The valid values are the following Amazon Inspector severity levels, which correspond to CVSS score ranges:

  • informational - CVSS score of 0.

  • low - CVSS score of 0.1 to 3.9.

  • medium - CVSS score of 4.0 to 6.9.

  • high - CVSS score of 7.0 to 8.9.

  • critical - CVSS score of 9.0 to 10.0.

For more information, see Software package vulnerability severity in the Amazon Inspector User Guide.

This value is present only if the AMI has at least one finding.

informational_fix_available_since class-attribute instance-attribute 
informational_fix_available_since: datetime | None = ...

The earliest date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), at which Amazon Inspector reported a fix as available for an informational severity finding on the AMI. This value is present only if the AMI has at least one informational severity finding with a fix available. Amazon Inspector recomputes this value on each scan.

low_fix_available_since class-attribute instance-attribute 
low_fix_available_since: datetime | None = ...

The earliest date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), at which Amazon Inspector reported a fix as available for a low severity finding on the AMI. This value is present only if the AMI has at least one low severity finding with a fix available. Amazon Inspector recomputes this value on each scan.

medium_fix_available_since class-attribute instance-attribute 
medium_fix_available_since: datetime | None = ...

The earliest date and time, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh🇲🇲ss.sssZ), at which Amazon Inspector reported a fix as available for a medium severity finding on the AMI. This value is present only if the AMI has at least one medium severity finding with a fix available. Amazon Inspector recomputes this value on each scan.