Skip to content

Updates the scan configuration for your Amazon Inspector account

Description

Updates the scan configuration for your Amazon Inspector account. If you don't specify an accountId, this operation updates the delegated administrator's configuration and propagates it to member accounts that have not been individually configured. If you specify an accountId, this operation updates that member account's configuration. Only the delegated administrator can specify an accountId; member accounts cannot call this operation.

Usage

inspector2_update_configuration(accountId, ecrConfiguration,
  ec2Configuration, updateConfigurationInheritance)

Arguments

  • accountId

    The 12-digit Amazon Web Services account ID of the member account whose scan configuration you want to update. When specified, you must be the delegated administrator for this member account. If not specified, the operation updates your own configuration and propagates changes to any member accounts that have not been individually configured.

  • ecrConfiguration

    Specifies how the ECR automated re-scan will be updated for your environment.

  • ec2Configuration

    Specifies how the Amazon EC2 automated scan will be updated for your environment.

  • updateConfigurationInheritance

    Specifies which scan-type configurations to reset to the delegated administrator's inherited values for the targeted member account. Each member of this structure is independently optional. When specified, ec2Configuration and ecrConfiguration must be absent, and accountId must also be present. Only INHERIT_FROM_ADMIN is valid for each member. If not specified, the operation uses the ec2Configuration and ecrConfiguration parameters instead.

Value

An empty list.

Request syntax

svc$update_configuration(
  accountId = "string",
  ecrConfiguration = list(
    rescanDuration = "LIFETIME"|"DAYS_30"|"DAYS_180"|"DAYS_14"|"DAYS_60"|"DAYS_90"|"DAYS_3"|"DAYS_7",
    pullDateRescanDuration = "DAYS_14"|"DAYS_30"|"DAYS_60"|"DAYS_90"|"DAYS_180"|"DAYS_3"|"DAYS_7",
    pullDateRescanMode = "LAST_PULL_DATE"|"LAST_IN_USE_AT"
  ),
  ec2Configuration = list(
    scanMode = "EC2_SSM_AGENT_BASED"|"EC2_HYBRID",
    activateVMScanner = TRUE|FALSE
  ),
  updateConfigurationInheritance = list(
    ec2Configuration = "INHERIT_FROM_ADMIN",
    ecrConfiguration = "INHERIT_FROM_ADMIN"
  )
)