cis_scans

Creates, updates, deletes, gets or lists a cis_scans resource.

Overview

Name	cis_scans
Type	Resource
Id	aws.inspector2.cis_scans

Fields

The following fields are returned by SELECT queries:

list_cis_scans

Name	Datatype	Description
failed_checks	integer	The CIS scan's failed checks.
scan_arn	string	The CIS scan's ARN. (pattern: <code>arn:aws(-us-gov|-cn)?:inspector2:[-.a-z0-9]{0,20}:\d{12}:owner/(\d{12}|o-[a-z0-9]{10,32})/cis-scan/[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}</code>)
scan_configuration_arn	string	The CIS scan's configuration ARN. (pattern: <code>arn:aws(-us-gov|-cn)?:inspector2:[a-z]{2}(-gov)?-[a-z]+-[0-9]{1}:[0-9]{12}:owner/(o-[a-z0-9]+|[0-9]{12})/cis-configuration/[0-9a-fA-F-]+</code>)
scan_date	string (date-time)	The CIS scan's date.
scan_name	string	The the name of the scan configuration that's associated with this scan.
scheduled_by	string	The account or organization that schedules the CIS scan.
security_level	string	The security level for the CIS scan. Security level refers to the Benchmark levels that CIS assigns to a profile. (LEVEL_1, LEVEL_2)
status	string	The CIS scan's status. (FAILED, COMPLETED, CANCELLED, IN_PROGRESS)
targets	object	The CIS scan's targets.
total_checks	integer	The CIS scan's total checks.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_cis_scans	select	region		Returns a CIS scan list.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_cis_scans

Returns a CIS scan list.

SELECT
failed_checks,
scan_arn,
scan_configuration_arn,
scan_date,
scan_name,
scheduled_by,
security_level,
status,
targets,
total_checks
FROM aws.inspector2.cis_scans
WHERE region = '{{ region }}' -- required
;