aws_ecr_enhanced_image_scan_finding

account_id

Type: STRING

aws_account_id

Type: STRING
Provider name: awsAccountId
Description: The Amazon Web Services account ID associated with the image.

description

Type: STRING
Provider name: description
Description: The description of the finding.

finding_arn

Type: STRING
Provider name: findingArn
Description: The Amazon Resource Number (ARN) of the finding.

first_observed_at

Type: TIMESTAMP
Provider name: firstObservedAt
Description: The date and time that the finding was first observed.

image_id

Type: STRING

last_observed_at

Type: TIMESTAMP
Provider name: lastObservedAt
Description: The date and time that the finding was last observed.

package_vulnerability_details

Type: STRUCT
Provider name: packageVulnerabilityDetails
Description: An object that contains the details of a package vulnerability finding.

• cvss
  Type: UNORDERED_LIST_STRUCT
  Provider name: cvss
  Description: An object that contains details about the CVSS score of a finding.
  
  • base_score
    Type: DOUBLE
    Provider name: baseScore
    Description: The base CVSS score used for the finding.
    
  • scoring_vector
    Type: STRING
    Provider name: scoringVector
    Description: The vector string of the CVSS score.
    
  • source
    Type: STRING
    Provider name: source
    Description: The source of the CVSS score.
    
  • version
    Type: STRING
    Provider name: version
    Description: The version of CVSS used for the score.
    
• reference_urls
  Type: UNORDERED_LIST_STRING
  Provider name: referenceUrls
  Description: One or more URLs that contain details about this vulnerability type.
  
• related_vulnerabilities
  Type: UNORDERED_LIST_STRING
  Provider name: relatedVulnerabilities
  Description: One or more vulnerabilities related to the one identified in this finding.
  
• source
  Type: STRING
  Provider name: source
  Description: The source of the vulnerability information.
  
• source_url
  Type: STRING
  Provider name: sourceUrl
  Description: A URL to the source of the vulnerability information.
  
• vendor_created_at
  Type: TIMESTAMP
  Provider name: vendorCreatedAt
  Description: The date and time that this vulnerability was first added to the vendor’s database.
  
• vendor_severity
  Type: STRING
  Provider name: vendorSeverity
  Description: The severity the vendor has given to this vulnerability type.
  
• vendor_updated_at
  Type: TIMESTAMP
  Provider name: vendorUpdatedAt
  Description: The date and time the vendor last updated this vulnerability in their database.
  
• vulnerability_id
  Type: STRING
  Provider name: vulnerabilityId
  Description: The ID given to this vulnerability.
  
• vulnerable_packages
  Type: UNORDERED_LIST_STRUCT
  Provider name: vulnerablePackages
  Description: The packages impacted by this vulnerability.
  
  • arch
    Type: STRING
    Provider name: arch
    Description: The architecture of the vulnerable package.
    
  • epoch
    Type: INT32
    Provider name: epoch
    Description: The epoch of the vulnerable package.
    
  • file_path
    Type: STRING
    Provider name: filePath
    Description: The file path of the vulnerable package.
    
  • name
    Type: STRING
    Provider name: name
    Description: The name of the vulnerable package.
    
  • package_manager
    Type: STRING
    Provider name: packageManager
    Description: The package manager of the vulnerable package.
    
  • release
    Type: STRING
    Provider name: release
    Description: The release of the vulnerable package.
    
  • source_layer_hash
    Type: STRING
    Provider name: sourceLayerHash
    Description: The source layer hash of the vulnerable package.
    
  • version
    Type: STRING
    Provider name: version
    Description: The version of the vulnerable package.
    

remediation

Type: STRUCT
Provider name: remediation
Description: An object that contains the details about how to remediate a finding.

• recommendation
  Type: STRUCT
  Provider name: recommendation
  Description: An object that contains information about the recommended course of action to remediate the finding.
  
  • text
    Type: STRING
    Provider name: text
    Description: The recommended course of action to remediate the finding.
    
  • url
    Type: STRING
    Provider name: url
    Description: The URL address to the CVE remediation recommendations.
    

score

Type: DOUBLE
Provider name: score
Description: The Amazon Inspector score given to the finding.

score_details

Type: STRUCT
Provider name: scoreDetails
Description: An object that contains details of the Amazon Inspector score.

• cvss
  Type: STRUCT
  Provider name: cvss
  Description: An object that contains details about the CVSS score given to a finding.
  
  • adjustments
    Type: UNORDERED_LIST_STRUCT
    Provider name: adjustments
    Description: An object that contains details about adjustment Amazon Inspector made to the CVSS score.
    
    • metric
      Type: STRING
      Provider name: metric
      Description: The metric used to adjust the CVSS score.
      
    • reason
      Type: STRING
      Provider name: reason
      Description: The reason the CVSS score has been adjustment.
      
  • score
    Type: DOUBLE
    Provider name: score
    Description: The CVSS score.
    
  • score_source
    Type: STRING
    Provider name: scoreSource
    Description: The source for the CVSS score.
    
  • scoring_vector
    Type: STRING
    Provider name: scoringVector
    Description: The vector for the CVSS score.
    
  • version
    Type: STRING
    Provider name: version
    Description: The CVSS version used in scoring.
    

severity

Type: STRING
Provider name: severity
Description: The severity of the finding.

status

Type: STRING
Provider name: status
Description: The status of the finding.

tags

Type: UNORDERED_LIST_STRING

title

Type: STRING
Provider name: title
Description: The title of the finding.

type

Type: STRING
Provider name: type
Description: The type of the finding.

updated_at

Type: TIMESTAMP
Provider name: updatedAt
Description: The date and time the finding was last updated at.