Amazon Inspector2
(inspector2)
IAM Changes
Services
2026-10-28
2026-10-28
3 new actions, 1 new condition | 2 updated actions
Additions
Actions
GetOnDemandScanStatus
Description:
Grants permission to retrieve the status of an on-demand scan for a specified resource
Access:
Read
ListOnDemandScans
Description:
Grants permission to retrieve information about on-demand scans for a specified resource
Access:
List
StartOnDemandScan
Description:
Grants permission to initiate an on-demand scan on a specified resource
Access:
Write
Conditions
inspector2:ExpectedBucketOwner
Description:
Filters access by the AWS account ID that must own the destination S3 bucket when requesting a findings report or SBOM export
Type:
String
Updates
Actions
CreateFindingsReport
Conditions
+ inspector2:ExpectedBucketOwner
CreateSbomExport
Conditions
+ inspector2:ExpectedBucketOwner