coverages

Creates, updates, deletes, gets or lists a coverages resource.

Overview

Name	coverages
Type	Resource
Id	aws.inspector2.coverages

Fields

The following fields are returned by SELECT queries:

list_coverage

Name	Datatype	Description
account_id	string	The Amazon Web Services account ID of the covered resource. (pattern: <code>\d{12}</code>)
last_scanned_at	string (date-time)	The date and time the resource was last checked for vulnerabilities.
provider	string	The cloud provider of the covered resource. (AWS, AZURE)
provider_account_id	string	The cloud provider account ID of the covered resource. (pattern: <code>(\d{12}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})</code>)
provider_org_id	string	The cloud provider organization ID of the covered resource. (pattern: <code>(o-[a-z0-9]{10,32}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})</code>)
provider_partition	string	The cloud provider partition of the covered resource. (pattern: <code>(aws(-[a-z]+)*|Azure[A-Za-z]+)</code>)
provider_region	string	The cloud provider region of the covered resource. (pattern: <code>([a-z]{2}(-[a-z]+)+-\d+|[a-z][a-z0-9]+)</code>)
resource_id	string	The ID of the covered resource. (pattern: <code>.(^arn:.:ecr:.:\d{12}:repository/[a-zA-Z0-9._/-]+(/sha256:[a-z0-9]{64})?$)|(^i-([a-z0-9]{8}|[a-z0-9]{17}|\)$|(^arn:(aws[a-zA-Z-])?:lambda:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-.]+(:($LATEST|[a-zA-Z0-9-]+))?$)|(^arn:(aws[a-zA-Z-])?:inspector2:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:codesecurity-integration/[a-f0-9-]{36}/project-[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$))|(^/subscriptions/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}/resourcegroups/[a-z0-9_-.()]+/providers/(microsoft.compute/virtualmachines/[a-z0-9_-]+|microsoft.web/sites/[a-z0-9_-]+|microsoft.containerregistry/registries/[a-z0-9_-]+(/repositories/[a-z0-9_-/]+/images?/sha256:[a-f0-9]{64})?)$).*</code>)
resource_metadata	object	An object that contains details about the metadata.
resource_type	string	The type of the covered resource. (AWS_EC2_INSTANCE, AWS_ECR_CONTAINER_IMAGE, AWS_ECR_REPOSITORY, AWS_LAMBDA_FUNCTION, CODE_REPOSITORY, Microsoft.Compute/virtualMachines, Microsoft.ContainerRegistry/registry/containerImage, Microsoft.ContainerRegistry/registry/containerRepository, Microsoft.Web/sites, Microsoft.ContainerRegistry/registries)
scan_mode	string	The scan method that is applied to the instance. (EC2_SSM_AGENT_BASED, EC2_AGENTLESS, EC2_INSPECTOR_AGENT_BASED, VM_INSPECTOR_AGENT_BASED)
scan_status	object	The status of the scan covering the resource.
scan_type	string	The Amazon Inspector scan type covering the resource. (NETWORK, PACKAGE, CODE)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_coverage	select	region		Lists coverage details for your environment.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_coverage

Lists coverage details for your environment.

SELECT
account_id,
last_scanned_at,
provider,
provider_account_id,
provider_org_id,
provider_partition,
provider_region,
resource_id,
resource_metadata,
resource_type,
scan_mode,
scan_status,
scan_type
FROM aws.inspector2.coverages
WHERE region = '{{ region }}' -- required
;