Amazon Inspector Findings API

openapi: 3.0.0
info:
  version: '2020-06-08'
  x-release: v4
  title: Inspector2 Accountpermissions Findings API
  description: Amazon Inspector is a vulnerability discovery service that automates continuous scanning for security vulnerabilities within your Amazon EC2 and Amazon ECR environments.
  x-logo:
    url: https://twitter.com/awscloud/profile_image?size=original
    backgroundColor: '#FFFFFF'
  termsOfService: https://aws.amazon.com/service-terms/
  contact:
    name: Mike Ralphson
    email: mike.ralphson@gmail.com
    url: https://github.com/mermade/aws2openapi
    x-twitter: PermittedSoc
  license:
    name: Apache 2.0 License
    url: http://www.apache.org/licenses/
  x-providerName: amazonaws.com
  x-serviceName: inspector2
  x-aws-signingName: inspector2
  x-origin:
  - contentType: application/json
    url: https://raw.githubusercontent.com/aws/aws-sdk-js/master/apis/inspector2-2020-06-08.normal.json
    converter:
      url: https://github.com/mermade/aws2openapi
      version: 1.0.0
    x-apisguru-driver: external
  x-apiClientRegistration:
    url: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct
  x-apisguru-categories:
  - cloud
  x-preferred: true
servers:
- url: http://inspector2.{region}.amazonaws.com
  variables:
    region:
      description: The AWS region
      enum:
      - us-east-1
      - us-east-2
      - us-west-1
      - us-west-2
      - us-gov-west-1
      - us-gov-east-1
      - ca-central-1
      - eu-north-1
      - eu-west-1
      - eu-west-2
      - eu-west-3
      - eu-central-1
      - eu-south-1
      - af-south-1
      - ap-northeast-1
      - ap-northeast-2
      - ap-northeast-3
      - ap-southeast-1
      - ap-southeast-2
      - ap-east-1
      - ap-south-1
      - sa-east-1
      - me-south-1
      default: us-east-1
  description: The Inspector2 multi-region endpoint
- url: https://inspector2.{region}.amazonaws.com
  variables:
    region:
      description: The AWS region
      enum:
      - us-east-1
      - us-east-2
      - us-west-1
      - us-west-2
      - us-gov-west-1
      - us-gov-east-1
      - ca-central-1
      - eu-north-1
      - eu-west-1
      - eu-west-2
      - eu-west-3
      - eu-central-1
      - eu-south-1
      - af-south-1
      - ap-northeast-1
      - ap-northeast-2
      - ap-northeast-3
      - ap-southeast-1
      - ap-southeast-2
      - ap-east-1
      - ap-south-1
      - sa-east-1
      - me-south-1
      default: us-east-1
  description: The Inspector2 multi-region endpoint
- url: http://inspector2.{region}.amazonaws.com.cn
  variables:
    region:
      description: The AWS region
      enum:
      - cn-north-1
      - cn-northwest-1
      default: cn-north-1
  description: The Inspector2 endpoint for China (Beijing) and China (Ningxia)
- url: https://inspector2.{region}.amazonaws.com.cn
  variables:
    region:
      description: The AWS region
      enum:
      - cn-north-1
      - cn-northwest-1
      default: cn-north-1
  description: The Inspector2 endpoint for China (Beijing) and China (Ningxia)
security:
- hmac: []
tags:
- name: Findings
paths:
  /findings/details/batch/get:
    parameters:
    - $ref: '#/components/parameters/X-Amz-Content-Sha256'
    - $ref: '#/components/parameters/X-Amz-Date'
    - $ref: '#/components/parameters/X-Amz-Algorithm'
    - $ref: '#/components/parameters/X-Amz-Credential'
    - $ref: '#/components/parameters/X-Amz-Security-Token'
    - $ref: '#/components/parameters/X-Amz-Signature'
    - $ref: '#/components/parameters/X-Amz-SignedHeaders'
    post:
      operationId: BatchGetFindingDetails
      description: Gets vulnerability details for findings.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BatchGetFindingDetailsResponse'
        '480':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
        '481':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '482':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '483':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - findingArns
              properties:
                findingArns:
                  description: A list of finding ARNs.
                  type: array
                  items:
                    $ref: '#/components/schemas/FindingArn'
                  minItems: 1
                  maxItems: 10
      summary: Amazon Inspector Batch Get Finding Details
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
      tags:
      - Findings
  /findings/aggregation/list:
    parameters:
    - $ref: '#/components/parameters/X-Amz-Content-Sha256'
    - $ref: '#/components/parameters/X-Amz-Date'
    - $ref: '#/components/parameters/X-Amz-Algorithm'
    - $ref: '#/components/parameters/X-Amz-Credential'
    - $ref: '#/components/parameters/X-Amz-Security-Token'
    - $ref: '#/components/parameters/X-Amz-Signature'
    - $ref: '#/components/parameters/X-Amz-SignedHeaders'
    post:
      operationId: ListFindingAggregations
      description: Lists aggregated finding data for your environment based on specific criteria.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListFindingAggregationsResponse'
        '480':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
        '481':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '482':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
      parameters:
      - name: maxResults
        in: query
        schema:
          type: string
        description: Pagination limit
        required: false
      - name: nextToken
        in: query
        schema:
          type: string
        description: Pagination token
        required: false
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - aggregationType
              properties:
                accountIds:
                  description: The Amazon Web Services account IDs to retrieve finding aggregation data for.
                  type: array
                  items:
                    $ref: '#/components/schemas/StringFilter'
                  minItems: 1
                  maxItems: 10
                aggregationRequest:
                  description: Contains details about an aggregation request.
                  type: object
                  properties:
                    accountAggregation:
                      allOf:
                      - $ref: '#/components/schemas/AccountAggregation'
                      - description: An object that contains details about an aggregation request based on Amazon Web Services account IDs.
                    amiAggregation:
                      allOf:
                      - $ref: '#/components/schemas/AmiAggregation'
                      - description: An object that contains details about an aggregation request based on Amazon Machine Images (AMIs).
                    awsEcrContainerAggregation:
                      allOf:
                      - $ref: '#/components/schemas/AwsEcrContainerAggregation'
                      - description: An object that contains details about an aggregation request based on Amazon ECR container images.
                    ec2InstanceAggregation:
                      allOf:
                      - $ref: '#/components/schemas/Ec2InstanceAggregation'
                      - description: An object that contains details about an aggregation request based on Amazon EC2 instances.
                    findingTypeAggregation:
                      allOf:
                      - $ref: '#/components/schemas/FindingTypeAggregation'
                      - description: An object that contains details about an aggregation request based on finding types.
                    imageLayerAggregation:
                      allOf:
                      - $ref: '#/components/schemas/ImageLayerAggregation'
                      - description: An object that contains details about an aggregation request based on container image layers.
                    lambdaFunctionAggregation:
                      allOf:
                      - $ref: '#/components/schemas/LambdaFunctionAggregation'
                      - description: Returns an object with findings aggregated by AWS Lambda function.
                    lambdaLayerAggregation:
                      allOf:
                      - $ref: '#/components/schemas/LambdaLayerAggregation'
                      - description: Returns an object with findings aggregated by AWS Lambda layer.
                    packageAggregation:
                      allOf:
                      - $ref: '#/components/schemas/PackageAggregation'
                      - description: An object that contains details about an aggregation request based on operating system package type.
                    repositoryAggregation:
                      allOf:
                      - $ref: '#/components/schemas/RepositoryAggregation'
                      - description: An object that contains details about an aggregation request based on Amazon ECR repositories.
                    titleAggregation:
                      allOf:
                      - $ref: '#/components/schemas/TitleAggregation'
                      - description: An object that contains details about an aggregation request based on finding title.
                aggregationType:
                  description: The type of the aggregation request.
                  type: string
                  enum:
                  - FINDING_TYPE
                  - PACKAGE
                  - TITLE
                  - REPOSITORY
                  - AMI
                  - AWS_EC2_INSTANCE
                  - AWS_ECR_CONTAINER
                  - IMAGE_LAYER
                  - ACCOUNT
                  - AWS_LAMBDA_FUNCTION
                  - LAMBDA_LAYER
                maxResults:
                  description: The maximum number of results to return in the response.
                  type: integer
                  minimum: 1
                  maximum: 100
                nextToken:
                  description: A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the <code>NextToken</code> value returned from the previous request to continue listing results after the first page.
                  type: string
                  minLength: 0
                  maxLength: 1000000
      summary: Amazon Inspector List Finding Aggregations
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
      tags:
      - Findings
  /findings/list:
    parameters:
    - $ref: '#/components/parameters/X-Amz-Content-Sha256'
    - $ref: '#/components/parameters/X-Amz-Date'
    - $ref: '#/components/parameters/X-Amz-Algorithm'
    - $ref: '#/components/parameters/X-Amz-Credential'
    - $ref: '#/components/parameters/X-Amz-Security-Token'
    - $ref: '#/components/parameters/X-Amz-Signature'
    - $ref: '#/components/parameters/X-Amz-SignedHeaders'
    post:
      operationId: ListFindings
      description: Lists findings for your environment.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListFindingsResponse'
        '480':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
        '481':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '482':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
      parameters:
      - name: maxResults
        in: query
        schema:
          type: string
        description: Pagination limit
        required: false
      - name: nextToken
        in: query
        schema:
          type: string
        description: Pagination token
        required: false
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                filterCriteria:
                  description: Details on the criteria used to define the filter.
                  type: object
                  properties:
                    awsAccountId:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the Amazon Web Services account IDs used to filter findings.
                    codeVulnerabilityDetectorName:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.
                    codeVulnerabilityDetectorTags:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: 'The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see <a href="https://docs.aws.amazon.com/codeguru/detector-library/java/tags/">Java tags</a>, or <a href="https://docs.aws.amazon.com/codeguru/detector-library/python/tags/">Python tags</a>. '
                    codeVulnerabilityFilePath:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.
                    componentId:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the component IDs used to filter findings.
                    componentType:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the component types used to filter findings.
                    ec2InstanceImageId:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the Amazon EC2 instance image IDs used to filter findings.
                    ec2InstanceSubnetId:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the Amazon EC2 instance subnet IDs used to filter findings.
                    ec2InstanceVpcId:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the Amazon EC2 instance VPC IDs used to filter findings.
                    ecrImageArchitecture:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the Amazon ECR image architecture types used to filter findings.
                    ecrImageHash:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details of the Amazon ECR image hashes used to filter findings.
                    ecrImagePushedAt:
                      allOf:
                      - $ref: '#/components/schemas/DateFilterList'
                      - description: Details on the Amazon ECR image push date and time used to filter findings.
                    ecrImageRegistry:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the Amazon ECR registry used to filter findings.
                    ecrImageRepositoryName:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the name of the Amazon ECR repository used to filter findings.
                    ecrImageTags:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: The tags attached to the Amazon ECR container image.
                    epssScore:
                      allOf:
                      - $ref: '#/components/schemas/NumberFilterList'
                      - description: The EPSS score used to filter findings.
                    exploitAvailable:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Filters the list of AWS Lambda findings by the availability of exploits.
                    findingArn:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the finding ARNs used to filter findings.
                    findingStatus:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the finding status types used to filter findings.
                    findingType:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the finding types used to filter findings.
                    firstObservedAt:
                      allOf:
                      - $ref: '#/components/schemas/DateFilterList'
                      - description: Details on the date and time a finding was first seen used to filter findings.
                    fixAvailable:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on whether a fix is available through a version update. This value can be <code>YES</code>, <code>NO</code>, or <code>PARTIAL</code>. A <code>PARTIAL</code> fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.
                    inspectorScore:
                      allOf:
                      - $ref: '#/components/schemas/NumberFilterList'
                      - description: The Amazon Inspector score to filter on.
                    lambdaFunctionExecutionRoleArn:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Filters the list of AWS Lambda functions by execution role.
                    lambdaFunctionLastModifiedAt:
                      allOf:
                      - $ref: '#/components/schemas/DateFilterList'
                      - description: 'Filters the list of AWS Lambda functions by the date and time that a user last updated the configuration, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO 8601 format</a> '
                    lambdaFunctionLayers:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Filters the list of AWS Lambda functions by the function's <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html"> layers</a>. A Lambda function can have up to five layers.
                    lambdaFunctionName:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Filters the list of AWS Lambda functions by the name of the function.
                    lambdaFunctionRuntime:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Filters the list of AWS Lambda functions by the runtime environment for the Lambda function.
                    lastObservedAt:
                      allOf:
                      - $ref: '#/components/schemas/DateFilterList'
                      - description: Details on the date and time a finding was last seen used to filter findings.
                    networkProtocol:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on network protocol used to filter findings.
                    portRange:
                      allOf:
                      - $ref: '#/components/schemas/PortRangeFilterList'
                      - description: Details on the port ranges used to filter findings.
                    relatedVulnerabilities:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the related vulnerabilities used to filter findings.
                    resourceId:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the resource IDs used to filter findings.
                    resourceTags:
                      allOf:
                      - $ref: '#/components/schemas/MapFilterList'
                      - description: Details on the resource tags used to filter findings.
                    resourceType:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the resource types used to filter findings.
                    severity:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the severity used to filter findings.
                    title:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the finding title used to filter findings.
                    updatedAt:
                      allOf:
                      - $ref: '#/components/schemas/DateFilterList'
                      - description: Details on the date and time a finding was last updated at used to filter findings.
                    vendorSeverity:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the vendor severity used to filter findings.
                    vulnerabilityId:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the vulnerability ID used to filter findings.
                    vulnerabilitySource:
                      allOf:
                      - $ref: '#/components/schemas/StringFilterList'
                      - description: Details on the vulnerability type used to filter findings.
                    vulnerablePackages:
                      allOf:
                      - $ref: '#/components/schemas/PackageFilterList'
                      - description: Details on the vulnerable packages used to filter findings.
                maxResults:
                  description: The maximum number of results to return in the response.
                  type: integer
                  minimum: 1
                  maximum: 100
                nextToken:
                  description: A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the <code>NextToken</code> value returned from the previous request to continue listing results after the first page.
                  type: string
                  minLength: 0
                  maxLength: 1000000
                sortCriteria:
                  description: Details about the criteria used to sort finding results.
                  type: object
                  properties:
                    field:
                      allOf:
                      - $ref: '#/components/schemas/SortField'
                      - description: The finding detail field by which results are sorted.
                    sortOrder:
                      allOf:
                      - $ref: '#/components/schemas/SortOrder'
                      - description: The order by which findings are sorted.
      summary: Amazon Inspector List Findings
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
      tags:
      - Findings
  /findings/get:
    post:
      operationId: GetFindingsReportStatus
      summary: Amazon Inspector Get findings report status
      description: Gets the status of a findings report.
      tags:
      - Findings
      responses:
        '200':
          description: Report status
components:
  schemas:
    IpV6AddressList:
      type: array
      items:
        $ref: '#/components/schemas/IpV6Address'
    FixAvailable:
      type: string
      enum:
      - 'YES'
      - 'NO'
      - PARTIAL
    LayerList:
      type: array
      items:
        $ref: '#/components/schemas/LambdaLayerArn'
      minItems: 1
      maxItems: 5
    IpV4Address:
      type: string
      pattern: ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$
      minLength: 7
      maxLength: 15
    FindingDescription:
      type: string
      minLength: 1
      maxLength: 1024
    CweList:
      type: array
      items:
        $ref: '#/components/schemas/NonEmptyString'
      minItems: 1
      maxItems: 10
    FindingDetail:
      type: object
      properties:
        cisaData:
          $ref: '#/components/schemas/CisaData'
        cwes:
          allOf:
          - $ref: '#/components/schemas/Cwes'
          - description: The Common Weakness Enumerations (CWEs) associated with the vulnerability.
        epssScore:
          allOf:
          - $ref: '#/components/schemas/Double'
          - description: The Exploit Prediction Scoring System (EPSS) score of the vulnerability.
        evidences:
          allOf:
          - $ref: '#/components/schemas/EvidenceList'
          - description: Information on the evidence of the vulnerability.
        exploitObserved:
          $ref: '#/components/schemas/ExploitObserved'
        findingArn:
          allOf:
          - $ref: '#/components/schemas/FindingArn'
          - description: The finding ARN that the vulnerability details are associated with.
        referenceUrls:
          allOf:
          - $ref: '#/components/schemas/VulnerabilityReferenceUrls'
          - description: The reference URLs for the vulnerability data.
        riskScore:
          allOf:
          - $ref: '#/components/schemas/RiskScore'
          - description: The risk score of the vulnerability.
        tools:
          allOf:
          - $ref: '#/components/schemas/Tools'
          - description: The known malware tools or kits that can exploit the vulnerability.
        ttps:
          allOf:
          - $ref: '#/components/schemas/Ttps'
          - description: The MITRE adversary tactics, techniques, or procedures (TTPs) associated with the vulnerability.
      description: Details of the vulnerability identified in a finding.
    NumberFilter:
      type: object
      properties:
        lowerInclusive:
          allOf:
          - $ref: '#/components/schemas/Double'
          - description: The lowest number to be included in the filter.
        upperInclusive:
          allOf:
          - $ref: '#/components/schemas/Double'
          - description: The highest number to be included in the filter.
      description: An object that describes the details of a number filter.
    AwsEc2InstanceDetails:
      type: object
      properties:
        iamInstanceProfileArn:
          allOf:
          - $ref: '#/components/schemas/NonEmptyString'
          - description: The IAM instance profile ARN of the Amazon EC2 instance.
        imageId:
          allOf:
          - $ref: '#/components/schemas/NonEmptyString'
          - description: The image ID of the Amazon EC2 instance.
        ipV4Addresses:
          allOf:
          - $ref: '#/components/schemas/IpV4AddressList'
          - description: The IPv4 addresses of the Amazon EC2 instance.
        ipV6Addresses:
          allOf:
          - $ref: '#/components/schemas/IpV6AddressList'
          - description: The IPv6 addresses of the Amazon EC2 instance.
        keyName:
          allOf:
          - $ref: '#/components/schemas/NonEmptyString'
          - description: The name of the key pair used to launch the Amazon EC2 instance.
        launchedAt:
          allOf:
          - $ref: '#/components/schemas/DateTimeTimestamp'
          - description: The date and time the Amazon EC2 instance was launched at.
        platform:
          allOf:
          - $ref: '#/components/schemas/Platform'
          - description: The platform of the Amazon EC2 instance.
        subnetId:
          allOf:
          - $ref: '#/components/schemas/NonEmptyString'
          - description: The subnet ID of the Amazon EC2 instance.
        type:
          allOf:
          - $ref: '#/components/schemas/NonEmptyString'
          - description: The type of the Amazon EC2 instance.
        vpcId:
          allOf:
          - $ref: '#/components/schemas/NonEmptyString'
          - description: The VPC ID of the Amazon EC2 instance.
      description: Details of the Amazon EC2 instance involved in a finding.
    NonEmptyString:
      type: string
      minLength: 1
    VulnerablePackageRemediation:
      type: string
      minLength: 1
      maxLength: 1024
    AggregationFindingType:
      type: string
      enum:
      - NETWORK_REACHABILITY
      - PACKAGE_VULNERABILITY
      - CODE_VULNERABILITY
    CvssScoreAdjustmentList:
      type: array
      items:
        $ref: '#/components/schemas/CvssScoreAdjustment'
    SubnetId:
      type: string
      pattern: ^subnet-([a-z0-9]{8}|[a-z0-9]{17}|\*)$
    LambdaVpcConfig:
      type: object
      properties:
        securityGroupIds:
          allOf:
          - $ref: '#/components/schemas/SecurityGroupIdList'
          - description: The VPC security groups and subnets that are attached to an AWS Lambda function. For more information, see <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html">VPC Settings</a>.
        subnetIds:
          allOf:
          - $ref: '#/components/schemas/SubnetIdList'
          - description: A list of VPC subnet IDs.
        vpcId:
          allOf:
          - $ref: '#/components/schemas/VpcId'
          - description: The ID of the VPC.
      description: The VPC security groups and subnets that are attached to an AWS Lambda function. For more information, see <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html">VPC Settings</a>.
    CvssScoreDetails:
      type: object
      required:
      - score
      - scoreSource
      - scoringVector
      - version
      properties:
        adjustments:
     

# --- truncated at 32 KB (97 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/amazon-inspector/refs/heads/main/openapi/amazon-inspector-findings-api-openapi.yml