vulnerabilities

Creates, updates, deletes, gets or lists a vulnerabilities resource.

Overview

Name	vulnerabilities
Type	Resource
Id	aws.inspector2.vulnerabilities

Fields

The following fields are returned by SELECT queries:

search_vulnerabilities

Name	Datatype	Description
id	string	The ID for the specific vulnerability.
atig_data	object	An object that contains information about the Amazon Web Services Threat Intel Group (ATIG) details for the vulnerability.
cisa_data	object	An object that contains the Cybersecurity and Infrastructure Security Agency (CISA) details for the vulnerability.
cvss_2	object	An object that contains the Common Vulnerability Scoring System (CVSS) Version 2 details for the vulnerability.
cvss_3	object	An object that contains the Common Vulnerability Scoring System (CVSS) Version 3 details for the vulnerability.
cvss_4	object	An object that contains the Common Vulnerability Scoring System (CVSS) Version 4 details for the vulnerability.
cwes	array	The Common Weakness Enumeration (CWE) associated with the vulnerability.
description	string	A description of the vulnerability.
detection_platforms	array	Platforms that the vulnerability can be detected on.
epss	object	An object that contains the Exploit Prediction Scoring System (EPSS) score for a vulnerability.
exploit_observed	object	An object that contains details on when the exploit was observed.
reference_urls	array	Links to various resources with more information on this vulnerability.
related_vulnerabilities	array	A list of related vulnerabilities.
source	string	The source of the vulnerability information. Possible results are RHEL, AMAZON_CVE, DEBIAN or NVD. (NVD)
source_url	string	A link to the official source material for this vulnerability.
vendor_created_at	string (date-time)	The date and time when the vendor created this vulnerability.
vendor_severity	string	The severity assigned by the vendor.
vendor_updated_at	string (date-time)	The date and time when the vendor last updated this vulnerability.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
search_vulnerabilities	select	region		Lists Amazon Inspector coverage details for a specific vulnerability.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

search_vulnerabilities

Lists Amazon Inspector coverage details for a specific vulnerability.

SELECT
id,
atig_data,
cisa_data,
cvss_2,
cvss_3,
cvss_4,
cwes,
description,
detection_platforms,
epss,
exploit_observed,
reference_urls,
related_vulnerabilities,
source,
source_url,
vendor_created_at,
vendor_severity,
vendor_updated_at
FROM aws.inspector2.vulnerabilities
WHERE region = '{{ region }}' -- required
;