aws-sdk-ec2 1.660.0 → 1.661.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 146ebe1a85bcd506ae0924a14bba9a6d50c738616d192e7517ea115b429f0a3b
-  data.tar.gz: 12d77e3bcdd481929459d2e5df193d9fcb46df311a6bcc70691a1fd613aeb14a
+  metadata.gz: 1ec5ea630cb025e3ca63864e7a15a3078f2c114d8ff627cc91657d1bd37d5479
+  data.tar.gz: f5793d6aa809d79badd207f984ffbc101a749b84840eb8774f0f9c798ce2844e
 SHA512:
-  metadata.gz: 492bab6cf58b7c04879dec7550bc9245895b6e06cbfcca8b367b293e3ffc5b8096c72e2287eb3201359910df371457658336698d0ab4ad9d11a03e18c16ed9f7
-  data.tar.gz: b794004890ca8e39ef8c82b2dde78c3ad98a11c57683e553f5efacd15ec2dcf1f76d6618c9d250035725e0ded84ef8ea80c5268e65375c46ebb7294892f94a7d
+  metadata.gz: 5c7fb21a15f183e8f8db3fcd77a8a13edb6d9744c7133a832bc8b80dc8e29b0dc32a0ae36600cddb36c935c119edaedd71480bd3f123d5bbb975c89d77d654d2
+  data.tar.gz: 101123997e8482c5f4ce2fdb96da573a3695cb6946af8705d5936ae9e48fb51bbdfca477ceaeb94ad4b6c45e24bfbc687a072105ecc2ba324fa449ee6595f060

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.661.0 (2026-10-27)
+------------------
+
+* Feature - EC2 AMIs can now show vulnerability data and be targeted directly for scanning.
+
 1.660.0 (2026-10-22)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.660.0
+1.661.0

data/lib/aws-sdk-ec2/client.rb

@@ -32271,6 +32271,49 @@ module Aws::EC2
     #   * `root-device-type` - The type of the root device volume (`ebs` \|
     #     `instance-store`).
     #
+    #   * `scan-result.critical-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `critical` severity finding on the AMI.
+    #
+    #   * `scan-result.finding-scan-date` - The date and time, in the ISO 8601
+    #     format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), of the most
+    #     recent Amazon Inspector scan of the AMI.
+    #
+    #   * `scan-result.high-fix-available-since` - The earliest date and time,
+    #     in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `high` severity finding on the AMI.
+    #
+    #   * `scan-result.highest-finding-severity-label` - The highest severity
+    #     among the AMI's Amazon Inspector findings, whether or not a fix is
+    #     available. The valid values are the following Amazon Inspector
+    #     severity levels:
+    #
+    #     * `informational` - CVSS score of 0.
+    #
+    #     * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #     * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #     * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #     * `critical` - CVSS score of 9.0 to 10.0.
+    #   * `scan-result.informational-fix-available-since` - The earliest date
+    #     and time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for an `informational` severity finding on the AMI.
+    #
+    #   * `scan-result.low-fix-available-since` - The earliest date and time,
+    #     in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `low` severity finding on the AMI.
+    #
+    #   * `scan-result.medium-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `medium` severity finding on the AMI.
+    #
     #   * `source-image-id` - The ID of the source AMI from which the AMI was
     #     created.
     #
@@ -32432,6 +32475,13 @@ module Aws::EC2
     #   resp.images[0].image_watermarks[0].source_image_id #=> String
     #   resp.images[0].image_watermarks[0].source_image_creation_time #=> Time
     #   resp.images[0].image_watermarks[0].watermark_creation_time #=> Time
+    #   resp.images[0].scan_results.highest_finding_severity_label #=> String, one of "informational", "low", "medium", "high", "critical"
+    #   resp.images[0].scan_results.finding_scan_date #=> Time
+    #   resp.images[0].scan_results.informational_fix_available_since #=> Time
+    #   resp.images[0].scan_results.low_fix_available_since #=> Time
+    #   resp.images[0].scan_results.medium_fix_available_since #=> Time
+    #   resp.images[0].scan_results.high_fix_available_since #=> Time
+    #   resp.images[0].scan_results.critical_fix_available_since #=> Time
     #   resp.images[0].instance_type_specification.supported_instance_types #=> Array
     #   resp.images[0].instance_type_specification.supported_instance_types[0].instance_type #=> String
     #   resp.images[0].instance_type_specification.unsupported_instance_types #=> Array
@@ -54311,6 +54361,13 @@ module Aws::EC2
     #   resp.image_criteria[0].image_watermarks[0].source_image_region #=> String
     #   resp.image_criteria[0].image_watermarks[0].maximum_days_since_source_image_created #=> Integer
     #   resp.image_criteria[0].image_watermarks[0].maximum_days_since_watermark_created #=> Integer
+    #   resp.image_criteria[0].scan_result_condition.max_days_since_last_finding_scan #=> Integer
+    #   resp.image_criteria[0].scan_result_condition.maximum_severity_label #=> String, one of "informational", "low", "medium", "high", "critical"
+    #   resp.image_criteria[0].scan_result_condition.max_days_since_informational_fix_available #=> Integer
+    #   resp.image_criteria[0].scan_result_condition.max_days_since_low_fix_available #=> Integer
+    #   resp.image_criteria[0].scan_result_condition.max_days_since_medium_fix_available #=> Integer
+    #   resp.image_criteria[0].scan_result_condition.max_days_since_high_fix_available #=> Integer
+    #   resp.image_criteria[0].scan_result_condition.max_days_since_critical_fix_available #=> Integer
     #   resp.managed_by #=> String, one of "account", "declarative-policy"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetAllowedImagesSettings AWS API Documentation
@@ -55654,6 +55711,74 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Describes the Amazon Inspector vulnerability findings for the
+    # specified AMI.
+    #
+    # You can get findings for AMIs that you own, AMIs that are shared with
+    # you, and public AMIs. Amazon Inspector returns findings only for AMIs
+    # that it has scanned.
+    #
+    # @option params [required, String] :image_id
+    #   The ID of the AMI.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of items to return for this request. To get the
+    #   next page of items, make another request with the token returned in
+    #   the output. For more information, see [Pagination][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination
+    #
+    # @option params [String] :next_token
+    #   The token returned from a previous paginated request. Pagination
+    #   continues from the end of the items returned by the previous request.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::GetImageFindingsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetImageFindingsResult#image_findings #image_findings} => Array<Types::ImageFinding>
+    #   * {Types::GetImageFindingsResult#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_image_findings({
+    #     image_id: "ImageId", # required
+    #     max_results: 1,
+    #     next_token: "String",
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.image_findings #=> Array
+    #   resp.image_findings[0].fix_available #=> Boolean
+    #   resp.image_findings[0].score #=> Float
+    #   resp.image_findings[0].first_observed_at #=> Time
+    #   resp.image_findings[0].updated_at #=> Time
+    #   resp.image_findings[0].title #=> String
+    #   resp.image_findings[0].paths #=> Array
+    #   resp.image_findings[0].paths[0] #=> String
+    #   resp.image_findings[0].severity_label #=> String, one of "informational", "low", "medium", "high", "critical"
+    #   resp.image_findings[0].snapshot_id #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetImageFindings AWS API Documentation
+    #
+    # @overload get_image_findings(params = {})
+    # @param [Hash] params ({})
+    def get_image_findings(params = {}, options = {})
+      req = build_request(:get_image_findings, params)
+      req.send_request(options)
+    end
+
     # Gets the default instance metadata service (IMDS) settings that are
     # set at the account level in the specified Amazon Web Services
 Region.
     #
@@ -71726,6 +71851,15 @@ module Aws::EC2
     #             maximum_days_since_watermark_created: 1,
     #           },
     #         ],
+    #         scan_result_condition: {
+    #           max_days_since_last_finding_scan: 1,
+    #           maximum_severity_label: "informational", # accepts informational, low, medium, high, critical
+    #           max_days_since_informational_fix_available: 1,
+    #           max_days_since_low_fix_available: 1,
+    #           max_days_since_medium_fix_available: 1,
+    #           max_days_since_high_fix_available: 1,
+    #           max_days_since_critical_fix_available: 1,
+    #         },
     #       },
     #     ],
     #     dry_run: false,
@@ -78224,7 +78358,7 @@ module Aws::EC2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.660.0'
+      context[:gem_version] = '1.661.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ec2/client_api.rb

@@ -1958,6 +1958,10 @@ module Aws::EC2
     GetImageAncestryResult = Shapes::StructureShape.new(name: 'GetImageAncestryResult')
     GetImageBlockPublicAccessStateRequest = Shapes::StructureShape.new(name: 'GetImageBlockPublicAccessStateRequest')
     GetImageBlockPublicAccessStateResult = Shapes::StructureShape.new(name: 'GetImageBlockPublicAccessStateResult')
+    GetImageFindingsEntrySet = Shapes::ListShape.new(name: 'GetImageFindingsEntrySet')
+    GetImageFindingsMaxResults = Shapes::IntegerShape.new(name: 'GetImageFindingsMaxResults')
+    GetImageFindingsRequest = Shapes::StructureShape.new(name: 'GetImageFindingsRequest')
+    GetImageFindingsResult = Shapes::StructureShape.new(name: 'GetImageFindingsResult')
     GetInstanceMetadataDefaultsRequest = Shapes::StructureShape.new(name: 'GetInstanceMetadataDefaultsRequest')
     GetInstanceMetadataDefaultsResult = Shapes::StructureShape.new(name: 'GetInstanceMetadataDefaultsResult')
     GetInstanceTpmEkPubRequest = Shapes::StructureShape.new(name: 'GetInstanceTpmEkPubRequest')
@@ -2159,6 +2163,8 @@ module Aws::EC2
     ImageDescriptionRequest = Shapes::StringShape.new(name: 'ImageDescriptionRequest')
     ImageDiskContainer = Shapes::StructureShape.new(name: 'ImageDiskContainer')
     ImageDiskContainerList = Shapes::ListShape.new(name: 'ImageDiskContainerList')
+    ImageFinding = Shapes::StructureShape.new(name: 'ImageFinding')
+    ImageFindingPathSet = Shapes::ListShape.new(name: 'ImageFindingPathSet')
     ImageId = Shapes::StringShape.new(name: 'ImageId')
     ImageIdList = Shapes::ListShape.new(name: 'ImageIdList')
     ImageIdStringList = Shapes::ListShape.new(name: 'ImageIdStringList')
@@ -2792,6 +2798,8 @@ module Aws::EC2
     MarketplaceProductCodeList = Shapes::ListShape.new(name: 'MarketplaceProductCodeList')
     MarketplaceProductCodeRequest = Shapes::StringShape.new(name: 'MarketplaceProductCodeRequest')
     MarketplaceProductCodeRequestList = Shapes::ListShape.new(name: 'MarketplaceProductCodeRequestList')
+    MaxDaysSinceFixAvailableValue = Shapes::IntegerShape.new(name: 'MaxDaysSinceFixAvailableValue')
+    MaxDaysSinceLastFindingScanValue = Shapes::IntegerShape.new(name: 'MaxDaysSinceLastFindingScanValue')
     MaxIpv4AddrPerInterface = Shapes::IntegerShape.new(name: 'MaxIpv4AddrPerInterface')
     MaxIpv6AddrPerInterface = Shapes::IntegerShape.new(name: 'MaxIpv6AddrPerInterface')
     MaxNetworkInterfaces = Shapes::IntegerShape.new(name: 'MaxNetworkInterfaces')
@@ -3583,6 +3591,9 @@ module Aws::EC2
     S3StorageUploadPolicy = Shapes::StringShape.new(name: 'S3StorageUploadPolicy')
     S3StorageUploadPolicySignature = Shapes::StringShape.new(name: 'S3StorageUploadPolicySignature')
     SSEType = Shapes::StringShape.new(name: 'SSEType')
+    ScanResultCondition = Shapes::StructureShape.new(name: 'ScanResultCondition')
+    ScanResultConditionRequest = Shapes::StructureShape.new(name: 'ScanResultConditionRequest')
+    ScanResults = Shapes::StructureShape.new(name: 'ScanResults')
     Schedule = Shapes::StringShape.new(name: 'Schedule')
     ScheduledInstance = Shapes::StructureShape.new(name: 'ScheduledInstance')
     ScheduledInstanceAvailability = Shapes::StructureShape.new(name: 'ScheduledInstanceAvailability')
@@ -3697,6 +3708,7 @@ module Aws::EC2
     ServiceType = Shapes::StringShape.new(name: 'ServiceType')
     ServiceTypeDetail = Shapes::StructureShape.new(name: 'ServiceTypeDetail')
     ServiceTypeDetailSet = Shapes::ListShape.new(name: 'ServiceTypeDetailSet')
+    SeverityLabel = Shapes::StringShape.new(name: 'SeverityLabel')
     ShutdownBehavior = Shapes::StringShape.new(name: 'ShutdownBehavior')
     SlotDateTimeRangeRequest = Shapes::StructureShape.new(name: 'SlotDateTimeRangeRequest')
     SlotStartTimeRangeRequest = Shapes::StructureShape.new(name: 'SlotStartTimeRangeRequest')
@@ -12290,6 +12302,18 @@ module Aws::EC2
     GetImageBlockPublicAccessStateResult.add_member(:managed_by, Shapes::ShapeRef.new(shape: ManagedBy, location_name: "managedBy"))
     GetImageBlockPublicAccessStateResult.struct_class = Types::GetImageBlockPublicAccessStateResult
 
+    GetImageFindingsEntrySet.member = Shapes::ShapeRef.new(shape: ImageFinding, location_name: "item")
+
+    GetImageFindingsRequest.add_member(:image_id, Shapes::ShapeRef.new(shape: ImageId, required: true, location_name: "ImageId"))
+    GetImageFindingsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: GetImageFindingsMaxResults, location_name: "MaxResults"))
+    GetImageFindingsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "NextToken"))
+    GetImageFindingsRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
+    GetImageFindingsRequest.struct_class = Types::GetImageFindingsRequest
+
+    GetImageFindingsResult.add_member(:image_findings, Shapes::ShapeRef.new(shape: GetImageFindingsEntrySet, location_name: "imageFindingSet"))
+    GetImageFindingsResult.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "nextToken"))
+    GetImageFindingsResult.struct_class = Types::GetImageFindingsResult
+
     GetInstanceMetadataDefaultsRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
     GetInstanceMetadataDefaultsRequest.struct_class = Types::GetInstanceMetadataDefaultsRequest
 
@@ -13110,6 +13134,7 @@ module Aws::EC2
     Image.add_member(:free_tier_eligible, Shapes::ShapeRef.new(shape: Boolean, location_name: "freeTierEligible"))
     Image.add_member(:public_ssm_parameter_name, Shapes::ShapeRef.new(shape: String, location_name: "publicSsmParameterName"))
     Image.add_member(:image_watermarks, Shapes::ShapeRef.new(shape: ImageWatermarkList, location_name: "imageWatermarkSet"))
+    Image.add_member(:scan_results, Shapes::ShapeRef.new(shape: ScanResults, location_name: "scanResults"))
     Image.add_member(:instance_type_specification, Shapes::ShapeRef.new(shape: InstanceTypeSpecification, location_name: "instanceTypeSpecification"))
     Image.add_member(:image_id, Shapes::ShapeRef.new(shape: String, location_name: "imageId"))
     Image.add_member(:image_location, Shapes::ShapeRef.new(shape: String, location_name: "imageLocation"))
@@ -13156,6 +13181,7 @@ module Aws::EC2
     ImageCriterion.add_member(:deprecation_time_condition, Shapes::ShapeRef.new(shape: DeprecationTimeCondition, location_name: "deprecationTimeCondition"))
     ImageCriterion.add_member(:creation_date_condition, Shapes::ShapeRef.new(shape: CreationDateCondition, location_name: "creationDateCondition"))
     ImageCriterion.add_member(:image_watermarks, Shapes::ShapeRef.new(shape: ImageWatermarkFilterResponseList, location_name: "imageWatermarkSet"))
+    ImageCriterion.add_member(:scan_result_condition, Shapes::ShapeRef.new(shape: ScanResultCondition, location_name: "scanResultCondition"))
     ImageCriterion.struct_class = Types::ImageCriterion
 
     ImageCriterionList.member = Shapes::ShapeRef.new(shape: ImageCriterion, location_name: "item")
@@ -13166,6 +13192,7 @@ module Aws::EC2
     ImageCriterionRequest.add_member(:deprecation_time_condition, Shapes::ShapeRef.new(shape: DeprecationTimeConditionRequest, location_name: "DeprecationTimeCondition"))
     ImageCriterionRequest.add_member(:creation_date_condition, Shapes::ShapeRef.new(shape: CreationDateConditionRequest, location_name: "CreationDateCondition"))
     ImageCriterionRequest.add_member(:image_watermarks, Shapes::ShapeRef.new(shape: ImageWatermarkFilterRequestList, location_name: "ImageWatermark"))
+    ImageCriterionRequest.add_member(:scan_result_condition, Shapes::ShapeRef.new(shape: ScanResultConditionRequest, location_name: "ScanResultCondition"))
     ImageCriterionRequest.struct_class = Types::ImageCriterionRequest
 
     ImageCriterionRequestList.member = Shapes::ShapeRef.new(shape: ImageCriterionRequest, location_name: "ImageCriterion")
@@ -13180,6 +13207,18 @@ module Aws::EC2
 
     ImageDiskContainerList.member = Shapes::ShapeRef.new(shape: ImageDiskContainer, location_name: "item")
 
+    ImageFinding.add_member(:fix_available, Shapes::ShapeRef.new(shape: Boolean, location_name: "fixAvailable"))
+    ImageFinding.add_member(:score, Shapes::ShapeRef.new(shape: Double, location_name: "score"))
+    ImageFinding.add_member(:first_observed_at, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "firstObservedAt"))
+    ImageFinding.add_member(:updated_at, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "updatedAt"))
+    ImageFinding.add_member(:title, Shapes::ShapeRef.new(shape: String, location_name: "title"))
+    ImageFinding.add_member(:paths, Shapes::ShapeRef.new(shape: ImageFindingPathSet, location_name: "pathSet"))
+    ImageFinding.add_member(:severity_label, Shapes::ShapeRef.new(shape: SeverityLabel, location_name: "severityLabel"))
+    ImageFinding.add_member(:snapshot_id, Shapes::ShapeRef.new(shape: SnapshotId, location_name: "snapshotId"))
+    ImageFinding.struct_class = Types::ImageFinding
+
+    ImageFindingPathSet.member = Shapes::ShapeRef.new(shape: String, location_name: "item")
+
     ImageIdList.member = Shapes::ShapeRef.new(shape: ImageId, location_name: "item")
 
     ImageIdStringList.member = Shapes::ShapeRef.new(shape: ImageId, location_name: "ImageId")
@@ -18508,6 +18547,33 @@ module Aws::EC2
     S3Storage.add_member(:upload_policy_signature, Shapes::ShapeRef.new(shape: S3StorageUploadPolicySignature, location_name: "uploadPolicySignature"))
     S3Storage.struct_class = Types::S3Storage
 
+    ScanResultCondition.add_member(:max_days_since_last_finding_scan, Shapes::ShapeRef.new(shape: MaxDaysSinceLastFindingScanValue, location_name: "maxDaysSinceLastFindingScan"))
+    ScanResultCondition.add_member(:maximum_severity_label, Shapes::ShapeRef.new(shape: SeverityLabel, location_name: "maximumSeverityLabel"))
+    ScanResultCondition.add_member(:max_days_since_informational_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "maxDaysSinceInformationalFixAvailable"))
+    ScanResultCondition.add_member(:max_days_since_low_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "maxDaysSinceLowFixAvailable"))
+    ScanResultCondition.add_member(:max_days_since_medium_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "maxDaysSinceMediumFixAvailable"))
+    ScanResultCondition.add_member(:max_days_since_high_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "maxDaysSinceHighFixAvailable"))
+    ScanResultCondition.add_member(:max_days_since_critical_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "maxDaysSinceCriticalFixAvailable"))
+    ScanResultCondition.struct_class = Types::ScanResultCondition
+
+    ScanResultConditionRequest.add_member(:max_days_since_last_finding_scan, Shapes::ShapeRef.new(shape: MaxDaysSinceLastFindingScanValue, location_name: "MaxDaysSinceLastFindingScan"))
+    ScanResultConditionRequest.add_member(:maximum_severity_label, Shapes::ShapeRef.new(shape: SeverityLabel, location_name: "MaximumSeverityLabel"))
+    ScanResultConditionRequest.add_member(:max_days_since_informational_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "MaxDaysSinceInformationalFixAvailable"))
+    ScanResultConditionRequest.add_member(:max_days_since_low_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "MaxDaysSinceLowFixAvailable"))
+    ScanResultConditionRequest.add_member(:max_days_since_medium_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "MaxDaysSinceMediumFixAvailable"))
+    ScanResultConditionRequest.add_member(:max_days_since_high_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "MaxDaysSinceHighFixAvailable"))
+    ScanResultConditionRequest.add_member(:max_days_since_critical_fix_available, Shapes::ShapeRef.new(shape: MaxDaysSinceFixAvailableValue, location_name: "MaxDaysSinceCriticalFixAvailable"))
+    ScanResultConditionRequest.struct_class = Types::ScanResultConditionRequest
+
+    ScanResults.add_member(:highest_finding_severity_label, Shapes::ShapeRef.new(shape: SeverityLabel, location_name: "highestFindingSeverityLabel"))
+    ScanResults.add_member(:finding_scan_date, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "findingScanDate"))
+    ScanResults.add_member(:informational_fix_available_since, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "informationalFixAvailableSince"))
+    ScanResults.add_member(:low_fix_available_since, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "lowFixAvailableSince"))
+    ScanResults.add_member(:medium_fix_available_since, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "mediumFixAvailableSince"))
+    ScanResults.add_member(:high_fix_available_since, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "highFixAvailableSince"))
+    ScanResults.add_member(:critical_fix_available_since, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "criticalFixAvailableSince"))
+    ScanResults.struct_class = Types::ScanResults
+
     ScheduledInstance.add_member(:availability_zone, Shapes::ShapeRef.new(shape: String, location_name: "availabilityZone"))
     ScheduledInstance.add_member(:create_date, Shapes::ShapeRef.new(shape: DateTime, location_name: "createDate"))
     ScheduledInstance.add_member(:hourly_price, Shapes::ShapeRef.new(shape: String, location_name: "hourlyPrice"))
@@ -26533,6 +26599,20 @@ module Aws::EC2
         o.output = Shapes::ShapeRef.new(shape: GetImageBlockPublicAccessStateResult)
       end)
 
+      api.add_operation(:get_image_findings, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetImageFindings"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetImageFindingsRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetImageFindingsResult)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
       api.add_operation(:get_instance_metadata_defaults, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetInstanceMetadataDefaults"
         o.http_method = "POST"

data/lib/aws-sdk-ec2/image.rb

@@ -277,6 +277,17 @@ module Aws::EC2
       data[:image_watermarks]
     end
 
+    # The Amazon Inspector scan results for the AMI. This information is
+    # present only for AMIs that Amazon Inspector has scanned.
+    #
+    # When you share an AMI with other accounts, organizations, or
+    # organizational units (OUs), or make it public, its scan results are
+    # available to the accounts that can use the AMI.
+    # @return [Types::ScanResults]
+    def scan_results
+      data[:scan_results]
+    end
+
     # The instance type specification for the AMI, which defines which
     # instance types are compatible with this image.
     # @return [Types::InstanceTypeSpecification]

data/lib/aws-sdk-ec2/resource.rb

@@ -2574,6 +2574,49 @@ module Aws::EC2
     #   * `root-device-type` - The type of the root device volume (`ebs` \|
     #     `instance-store`).
     #
+    #   * `scan-result.critical-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `critical` severity finding on the AMI.
+    #
+    #   * `scan-result.finding-scan-date` - The date and time, in the ISO 8601
+    #     format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), of the most
+    #     recent Amazon Inspector scan of the AMI.
+    #
+    #   * `scan-result.high-fix-available-since` - The earliest date and time,
+    #     in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `high` severity finding on the AMI.
+    #
+    #   * `scan-result.highest-finding-severity-label` - The highest severity
+    #     among the AMI's Amazon Inspector findings, whether or not a fix is
+    #     available. The valid values are the following Amazon Inspector
+    #     severity levels:
+    #
+    #     * `informational` - CVSS score of 0.
+    #
+    #     * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #     * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #     * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #     * `critical` - CVSS score of 9.0 to 10.0.
+    #   * `scan-result.informational-fix-available-since` - The earliest date
+    #     and time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for an `informational` severity finding on the AMI.
+    #
+    #   * `scan-result.low-fix-available-since` - The earliest date and time,
+    #     in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `low` severity finding on the AMI.
+    #
+    #   * `scan-result.medium-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a fix
+    #     as available for a `medium` severity finding on the AMI.
+    #
     #   * `source-image-id` - The ID of the source AMI from which the AMI was
     #     created.
     #

data/lib/aws-sdk-ec2/types.rb

@@ -27770,6 +27770,50 @@ module Aws::EC2
     #   * `root-device-type` - The type of the root device volume (`ebs` \|
     #     `instance-store`).
     #
+    #   * `scan-result.critical-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `critical` severity finding on the AMI.
+    #
+    #   * `scan-result.finding-scan-date` - The date and time, in the ISO
+    #     8601 format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), of
+    #     the most recent Amazon Inspector scan of the AMI.
+    #
+    #   * `scan-result.high-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `high` severity finding on the AMI.
+    #
+    #   * `scan-result.highest-finding-severity-label` - The highest
+    #     severity among the AMI's Amazon Inspector findings, whether or
+    #     not a fix is available. The valid values are the following Amazon
+    #     Inspector severity levels:
+    #
+    #     * `informational` - CVSS score of 0.
+    #
+    #     * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #     * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #     * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #     * `critical` - CVSS score of 9.0 to 10.0.
+    #   * `scan-result.informational-fix-available-since` - The earliest
+    #     date and time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for an `informational` severity finding on the
+    #     AMI.
+    #
+    #   * `scan-result.low-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `low` severity finding on the AMI.
+    #
+    #   * `scan-result.medium-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `medium` severity finding on the AMI.
+    #
     #   * `source-image-id` - The ID of the source AMI from which the AMI
     #     was created.
     #
@@ -47633,6 +47677,62 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] image_id
+    #   The ID of the AMI.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of items to return for this request. To get the
+    #   next page of items, make another request with the token returned in
+    #   the output. For more information, see [Pagination][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token returned from a previous paginated request. Pagination
+    #   continues from the end of the items returned by the previous
+    #   request.
+    #   @return [String]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetImageFindingsRequest AWS API Documentation
+    #
+    class GetImageFindingsRequest < Struct.new(
+      :image_id,
+      :max_results,
+      :next_token,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] image_findings
+    #   The Amazon Inspector findings for the AMI.
+    #   @return [Array<Types::ImageFinding>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to include in another request to get the next page of
+    #   items. This value is `null` when there are no more items to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetImageFindingsResult AWS API Documentation
+    #
+    class GetImageFindingsResult < Struct.new(
+      :image_findings,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the operation,
     #   without actually making the request, and provides an error response.
@@ -51887,6 +51987,15 @@ module Aws::EC2
     #   The watermarks attached to the AMI.
     #   @return [Array<Types::ImageWatermark>]
     #
+    # @!attribute [rw] scan_results
+    #   The Amazon Inspector scan results for the AMI. This information is
+    #   present only for AMIs that Amazon Inspector has scanned.
+    #
+    #   When you share an AMI with other accounts, organizations, or
+    #   organizational units (OUs), or make it public, its scan results are
+    #   available to the accounts that can use the AMI.
+    #   @return [Types::ScanResults]
+    #
     # @!attribute [rw] instance_type_specification
     #   The instance type specification for the AMI, which defines which
     #   instance types are compatible with this image.
@@ -51976,6 +52085,7 @@ module Aws::EC2
       :free_tier_eligible,
       :public_ssm_parameter_name,
       :image_watermarks,
+      :scan_results,
       :instance_type_specification,
       :image_id,
       :image_location,
@@ -52222,6 +52332,13 @@ module Aws::EC2
     #   Maximum: 50 values
     #   @return [Array<Types::ImageWatermarkFilterResponse>]
     #
+    # @!attribute [rw] scan_result_condition
+    #   The Amazon Inspector scan-result criteria that an AMI must meet to
+    #   be allowed. The criteria can limit the highest finding severity, the
+    #   number of days since Amazon Inspector last scanned the AMI, and the
+    #   number of days since Amazon Inspector reported a fix as available.
+    #   @return [Types::ScanResultCondition]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ImageCriterion AWS API Documentation
     #
     class ImageCriterion < Struct.new(
@@ -52230,7 +52347,8 @@ module Aws::EC2
       :image_names,
       :deprecation_time_condition,
       :creation_date_condition,
-      :image_watermarks)
+      :image_watermarks,
+      :scan_result_condition)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -52332,6 +52450,13 @@ module Aws::EC2
     #   Maximum: 50 values
     #   @return [Array<Types::ImageWatermarkFilterRequest>]
     #
+    # @!attribute [rw] scan_result_condition
+    #   The Amazon Inspector scan-result criteria that an AMI must meet to
+    #   be allowed. The criteria can limit the highest finding severity, the
+    #   number of days since Amazon Inspector last scanned the AMI, and the
+    #   number of days since Amazon Inspector reported a fix as available.
+    #   @return [Types::ScanResultConditionRequest]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ImageCriterionRequest AWS API Documentation
     #
     class ImageCriterionRequest < Struct.new(
@@ -52340,7 +52465,8 @@ module Aws::EC2
       :image_names,
       :deprecation_time_condition,
       :creation_date_condition,
-      :image_watermarks)
+      :image_watermarks,
+      :scan_result_condition)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -52387,6 +52513,83 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes an Amazon Inspector vulnerability finding for an AMI.
+    #
+    # @!attribute [rw] fix_available
+    #   Specifies whether a fix is available for the finding. This value is
+    #   `true` when Amazon Inspector reports a full or partial fix for the
+    #   finding.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] score
+    #   The Amazon Inspector score for the finding.
+    #   @return [Float]
+    #
+    # @!attribute [rw] first_observed_at
+    #   The date and time, in the ISO 8601 format in the UTC time zone
+    #   (YYYY-MM-DDThh:mm:ss.sssZ), when Amazon Inspector first observed the
+    #   finding.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_at
+    #   The date and time, in the ISO 8601 format in the UTC time zone
+    #   (YYYY-MM-DDThh:mm:ss.sssZ), when Amazon Inspector last updated the
+    #   finding.
+    #   @return [Time]
+    #
+    # @!attribute [rw] title
+    #   The title of the finding.
+    #   @return [String]
+    #
+    # @!attribute [rw] paths
+    #   The file paths in the AMI that are affected by the finding. Amazon
+    #   EC2 returns up to 10 file paths for each finding.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] severity_label
+    #   The severity of the finding.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] snapshot_id
+    #   The ID of the Amazon EBS snapshot of the AMI in which the finding
+    #   was detected.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ImageFinding AWS API Documentation
+    #
+    class ImageFinding < Struct.new(
+      :fix_available,
+      :score,
+      :first_observed_at,
+      :updated_at,
+      :title,
+      :paths,
+      :severity_label,
+      :snapshot_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information about the AMI.
     #
     # @!attribute [rw] image_id
@@ -81560,6 +81763,375 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # The Amazon Inspector scan-result criteria that an AMI must meet to be
+    # allowed. The criteria can limit the highest finding severity. They can
+    # also limit, for each severity, the days since Amazon Inspector
+    # reported a fix as available.
+    #
+    # The severity limit applies to all findings, whether or not a fix is
+    # available. The day limits for each severity apply only to findings
+    # that have a fix available. A scanned AMI that has no fix-available
+    # finding of a given severity meets that severity's day limit. AMIs
+    # that Amazon Inspector has not scanned are not allowed when you specify
+    # this condition.
+    #
+    # @!attribute [rw] max_days_since_last_finding_scan
+    #   The maximum number of days that have elapsed since Amazon Inspector
+    #   last scanned the AMI. For example, a value of `7` allows AMIs that
+    #   were scanned within the last 7 days. AMIs that Amazon Inspector has
+    #   not scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] maximum_severity_label
+    #   The maximum severity that an AMI's Amazon Inspector findings can
+    #   have for the AMI to be allowed. Findings count whether or not a fix
+    #   is available. For example, a value of `medium` allows AMIs whose
+    #   highest severity is `informational`, `low`, or `medium`.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #   A scanned AMI that has no findings meets this limit.
+    #
+    #   AMIs that Amazon Inspector has not scanned are not allowed when you
+    #   specify this condition.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] max_days_since_informational_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for an `informational` severity finding on the AMI. For
+    #   example, a value of `7` does not allow an AMI if Amazon Inspector
+    #   reported such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `informational` severity finding with a
+    #   fix available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_low_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `low` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `low` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_medium_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `medium` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `medium` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_high_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `high` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `high` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_critical_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `critical` severity finding on the AMI. For example,
+    #   a value of `7` does not allow an AMI if Amazon Inspector reported
+    #   such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `critical` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ScanResultCondition AWS API Documentation
+    #
+    class ScanResultCondition < Struct.new(
+      :max_days_since_last_finding_scan,
+      :maximum_severity_label,
+      :max_days_since_informational_fix_available,
+      :max_days_since_low_fix_available,
+      :max_days_since_medium_fix_available,
+      :max_days_since_high_fix_available,
+      :max_days_since_critical_fix_available)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The Amazon Inspector scan-result criteria that an AMI must meet to be
+    # allowed. The criteria can limit the highest finding severity. They can
+    # also limit, for each severity, the days since Amazon Inspector
+    # reported a fix as available.
+    #
+    # The severity limit applies to all findings, whether or not a fix is
+    # available. The day limits for each severity apply only to findings
+    # that have a fix available. A scanned AMI that has no fix-available
+    # finding of a given severity meets that severity's day limit. AMIs
+    # that Amazon Inspector has not scanned are not allowed when you specify
+    # this condition.
+    #
+    # @!attribute [rw] max_days_since_last_finding_scan
+    #   The maximum number of days that have elapsed since Amazon Inspector
+    #   last scanned the AMI. For example, a value of `7` allows AMIs that
+    #   were scanned within the last 7 days. AMIs that Amazon Inspector has
+    #   not scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] maximum_severity_label
+    #   The maximum severity that an AMI's Amazon Inspector findings can
+    #   have for the AMI to be allowed. Findings count whether or not a fix
+    #   is available. For example, a value of `medium` allows AMIs whose
+    #   highest severity is `informational`, `low`, or `medium`.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #   A scanned AMI that has no findings meets this limit.
+    #
+    #   AMIs that Amazon Inspector has not scanned are not allowed when you
+    #   specify this condition.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] max_days_since_informational_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for an `informational` severity finding on the AMI. For
+    #   example, a value of `7` does not allow an AMI if Amazon Inspector
+    #   reported such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `informational` severity finding with a
+    #   fix available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_low_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `low` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `low` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_medium_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `medium` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `medium` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_high_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `high` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `high` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_critical_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `critical` severity finding on the AMI. For example,
+    #   a value of `7` does not allow an AMI if Amazon Inspector reported
+    #   such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `critical` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ScanResultConditionRequest AWS API Documentation
+    #
+    class ScanResultConditionRequest < Struct.new(
+      :max_days_since_last_finding_scan,
+      :maximum_severity_label,
+      :max_days_since_informational_fix_available,
+      :max_days_since_low_fix_available,
+      :max_days_since_medium_fix_available,
+      :max_days_since_high_fix_available,
+      :max_days_since_critical_fix_available)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The Amazon Inspector scan results for an AMI. This information is
+    # present only for AMIs that Amazon Inspector has scanned.
+    #
+    # When you share an AMI with other accounts, organizations, or
+    # organizational units (OUs), or make it public, its scan results are
+    # available to the accounts that can use the AMI.
+    #
+    # The fix-available dates are specific to the AMI. Each date reflects
+    # when a fix became available for a finding on that AMI, not when the
+    # vendor released the fix. As a result, a date can be later than the
+    # vendor's release date, and AMIs with the same vulnerability can have
+    # different dates.
+    #
+    # @!attribute [rw] highest_finding_severity_label
+    #   The highest severity among the AMI's Amazon Inspector findings,
+    #   whether or not a fix is available.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #   This value is present only if the AMI has at least one finding.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] finding_scan_date
+    #   The date and time, in the ISO 8601 format in the UTC time zone
+    #   (YYYY-MM-DDThh:mm:ss.sssZ), of the most recent Amazon Inspector scan
+    #   of the AMI.
+    #   @return [Time]
+    #
+    # @!attribute [rw] informational_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for an `informational` severity finding on the
+    #   AMI. This value is present only if the AMI has at least one
+    #   `informational` severity finding with a fix available. Amazon
+    #   Inspector recomputes this value on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] low_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `low` severity finding on the AMI. This
+    #   value is present only if the AMI has at least one `low` severity
+    #   finding with a fix available. Amazon Inspector recomputes this value
+    #   on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] medium_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `medium` severity finding on the AMI. This
+    #   value is present only if the AMI has at least one `medium` severity
+    #   finding with a fix available. Amazon Inspector recomputes this value
+    #   on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] high_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `high` severity finding on the AMI. This
+    #   value is present only if the AMI has at least one `high` severity
+    #   finding with a fix available. Amazon Inspector recomputes this value
+    #   on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] critical_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `critical` severity finding on the AMI.
+    #   This value is present only if the AMI has at least one `critical`
+    #   severity finding with a fix available. Amazon Inspector recomputes
+    #   this value on each scan.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ScanResults AWS API Documentation
+    #
+    class ScanResults < Struct.new(
+      :highest_finding_severity_label,
+      :finding_scan_date,
+      :informational_fix_available_since,
+      :low_fix_available_since,
+      :medium_fix_available_since,
+      :high_fix_available_since,
+      :critical_fix_available_since)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes a Scheduled Instance.
     #
     # @!attribute [rw] availability_zone

data/lib/aws-sdk-ec2.rb

@@ -78,7 +78,7 @@ module Aws::EC2
   autoload :VpcPeeringConnection, 'aws-sdk-ec2/vpc_peering_connection'
   autoload :VpcAddress, 'aws-sdk-ec2/vpc_address'
 
-  GEM_VERSION = '1.660.0'
+  GEM_VERSION = '1.661.0'
 
 end
 

data/sig/client.rbs

@@ -10538,6 +10538,20 @@ module Aws
                                                ) -> _GetImageBlockPublicAccessStateResponseSuccess
                                              | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetImageBlockPublicAccessStateResponseSuccess
 
+      interface _GetImageFindingsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetImageFindingsResult]
+        def image_findings: () -> ::Array[Types::ImageFinding]
+        def next_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Client.html#get_image_findings-instance_method
+      def get_image_findings: (
+                                image_id: ::String,
+                                ?max_results: ::Integer,
+                                ?next_token: ::String,
+                                ?dry_run: bool
+                              ) -> _GetImageFindingsResponseSuccess
+                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetImageFindingsResponseSuccess
+
       interface _GetInstanceMetadataDefaultsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetInstanceMetadataDefaultsResult]
         def account_level: () -> Types::InstanceMetadataDefaultsResponse
@@ -13926,7 +13940,16 @@ module Aws
                                                                        maximum_days_since_source_image_created: ::Integer?,
                                                                        maximum_days_since_watermark_created: ::Integer?
                                                                      }
-                                                                   ]?
+                                                                   ]?,
+                                                                   scan_result_condition: {
+                                                                     max_days_since_last_finding_scan: ::Integer?,
+                                                                     maximum_severity_label: ("informational" | "low" | "medium" | "high" | "critical")?,
+                                                                     max_days_since_informational_fix_available: ::Integer?,
+                                                                     max_days_since_low_fix_available: ::Integer?,
+                                                                     max_days_since_medium_fix_available: ::Integer?,
+                                                                     max_days_since_high_fix_available: ::Integer?,
+                                                                     max_days_since_critical_fix_available: ::Integer?
+                                                                   }?
                                                                  }
                                                                ],
                                                                ?dry_run: bool

data/sig/image.rbs

@@ -99,6 +99,9 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Image.html#image_watermarks-instance_method
       def image_watermarks: () -> ::Array[Types::ImageWatermark]
 
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Image.html#scan_results-instance_method
+      def scan_results: () -> Types::ScanResults
+
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Image.html#instance_type_specification-instance_method
       def instance_type_specification: () -> Types::InstanceTypeSpecification
 

data/sig/types.rbs

@@ -10411,6 +10411,20 @@ module Aws::EC2
       SENSITIVE: []
     end
 
+    class GetImageFindingsRequest
+      attr_accessor image_id: ::String
+      attr_accessor max_results: ::Integer
+      attr_accessor next_token: ::String
+      attr_accessor dry_run: bool
+      SENSITIVE: []
+    end
+
+    class GetImageFindingsResult
+      attr_accessor image_findings: ::Array[Types::ImageFinding]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class GetInstanceMetadataDefaultsRequest
       attr_accessor dry_run: bool
       SENSITIVE: []
@@ -11464,6 +11478,7 @@ module Aws::EC2
       attr_accessor free_tier_eligible: bool
       attr_accessor public_ssm_parameter_name: ::String
       attr_accessor image_watermarks: ::Array[Types::ImageWatermark]
+      attr_accessor scan_results: Types::ScanResults
       attr_accessor instance_type_specification: Types::InstanceTypeSpecification
       attr_accessor image_id: ::String
       attr_accessor image_location: ::String
@@ -11514,6 +11529,7 @@ module Aws::EC2
       attr_accessor deprecation_time_condition: Types::DeprecationTimeCondition
       attr_accessor creation_date_condition: Types::CreationDateCondition
       attr_accessor image_watermarks: ::Array[Types::ImageWatermarkFilterResponse]
+      attr_accessor scan_result_condition: Types::ScanResultCondition
       SENSITIVE: []
     end
 
@@ -11524,6 +11540,7 @@ module Aws::EC2
       attr_accessor deprecation_time_condition: Types::DeprecationTimeConditionRequest
       attr_accessor creation_date_condition: Types::CreationDateConditionRequest
       attr_accessor image_watermarks: ::Array[Types::ImageWatermarkFilterRequest]
+      attr_accessor scan_result_condition: Types::ScanResultConditionRequest
       SENSITIVE: []
     end
 
@@ -11537,6 +11554,18 @@ module Aws::EC2
       SENSITIVE: [:url]
     end
 
+    class ImageFinding
+      attr_accessor fix_available: bool
+      attr_accessor score: ::Float
+      attr_accessor first_observed_at: ::Time
+      attr_accessor updated_at: ::Time
+      attr_accessor title: ::String
+      attr_accessor paths: ::Array[::String]
+      attr_accessor severity_label: ("informational" | "low" | "medium" | "high" | "critical")
+      attr_accessor snapshot_id: ::String
+      SENSITIVE: []
+    end
+
     class ImageMetadata
       attr_accessor image_id: ::String
       attr_accessor name: ::String
@@ -17573,6 +17602,39 @@ module Aws::EC2
       SENSITIVE: [:upload_policy, :upload_policy_signature]
     end
 
+    class ScanResultCondition
+      attr_accessor max_days_since_last_finding_scan: ::Integer
+      attr_accessor maximum_severity_label: ("informational" | "low" | "medium" | "high" | "critical")
+      attr_accessor max_days_since_informational_fix_available: ::Integer
+      attr_accessor max_days_since_low_fix_available: ::Integer
+      attr_accessor max_days_since_medium_fix_available: ::Integer
+      attr_accessor max_days_since_high_fix_available: ::Integer
+      attr_accessor max_days_since_critical_fix_available: ::Integer
+      SENSITIVE: []
+    end
+
+    class ScanResultConditionRequest
+      attr_accessor max_days_since_last_finding_scan: ::Integer
+      attr_accessor maximum_severity_label: ("informational" | "low" | "medium" | "high" | "critical")
+      attr_accessor max_days_since_informational_fix_available: ::Integer
+      attr_accessor max_days_since_low_fix_available: ::Integer
+      attr_accessor max_days_since_medium_fix_available: ::Integer
+      attr_accessor max_days_since_high_fix_available: ::Integer
+      attr_accessor max_days_since_critical_fix_available: ::Integer
+      SENSITIVE: []
+    end
+
+    class ScanResults
+      attr_accessor highest_finding_severity_label: ("informational" | "low" | "medium" | "high" | "critical")
+      attr_accessor finding_scan_date: ::Time
+      attr_accessor informational_fix_available_since: ::Time
+      attr_accessor low_fix_available_since: ::Time
+      attr_accessor medium_fix_available_since: ::Time
+      attr_accessor high_fix_available_since: ::Time
+      attr_accessor critical_fix_available_since: ::Time
+      SENSITIVE: []
+    end
+
     class ScheduledInstance
       attr_accessor availability_zone: ::String
       attr_accessor create_date: ::Time

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ec2
 version: !ruby/object:Gem::Version
-  version: 1.660.0
+  version: 1.661.0
 platform: ruby
 authors:
 - Amazon Web Services