From 6e9ebac52e73d4764ea69fa0809c9ca185c0e4c1 Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein Date: Thu, 6 Jun 2024 16:20:29 -0700 Subject: [PATCH 1/3] Adds notes about CNVM architecture support --- docs/cloud-native-security/vuln-management-faq.asciidoc | 4 ++++ .../vuln-management-get-started.asciidoc | 3 ++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/docs/cloud-native-security/vuln-management-faq.asciidoc b/docs/cloud-native-security/vuln-management-faq.asciidoc index 9940cb0d11..450c297003 100644 --- a/docs/cloud-native-security/vuln-management-faq.asciidoc +++ b/docs/cloud-native-security/vuln-management-faq.asciidoc @@ -11,6 +11,10 @@ The CNVM integration uses various security data sources. The complete list can b CNVM uses the open source scanner https://github.com/aquasecurity/trivy[Trivy] v0.35. +*What system architectures are supported?* + +Because of Trivy's limitations, CNVM works only on ARM. Other architectures are not supported. + *How often are the security data sources synchronized?* The CNVM integration fetches the latest data sources at the beginning of every scan cycle to ensure up-to-date vulnerability information. diff --git a/docs/cloud-native-security/vuln-management-get-started.asciidoc b/docs/cloud-native-security/vuln-management-get-started.asciidoc index 6736d9a4bc..960128f826 100644 --- a/docs/cloud-native-security/vuln-management-get-started.asciidoc +++ b/docs/cloud-native-security/vuln-management-get-started.asciidoc @@ -8,7 +8,8 @@ This page explains how to set up Cloud Native Vulnerability Management (CNVM). -- * CNVM is available to all {ecloud} users. On-premise deployments require an https://www.elastic.co/pricing[Enterprise subscription]. * Requires {stack} and {agent} version 8.8 or higher. -* CNVM only works in the `Default` {kib} space. Installing the CNVM integration on a different {kib} space will not work. +* Only works in the `Default` {kib} space. Installing the CNVM integration on a different {kib} space will not work. +* Can only scan ARM based images. Does not support other architectures. * To view vulnerability scan findings, you need at least `read` privileges for the following indices: ** `logs-cloud_security_posture.vulnerabilities-*` ** `logs-cloud_security_posture.vulnerabilities_latest-*` From 997d19a213030921a1ac6ef5a2570a5f844ca235 Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> Date: Tue, 9 Jul 2024 08:53:21 -0700 Subject: [PATCH 2/3] Update docs/cloud-native-security/vuln-management-faq.asciidoc --- docs/cloud-native-security/vuln-management-faq.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/cloud-native-security/vuln-management-faq.asciidoc b/docs/cloud-native-security/vuln-management-faq.asciidoc index 450c297003..f86902fd8b 100644 --- a/docs/cloud-native-security/vuln-management-faq.asciidoc +++ b/docs/cloud-native-security/vuln-management-faq.asciidoc @@ -13,7 +13,7 @@ CNVM uses the open source scanner https://github.com/aquasecurity/trivy[Trivy] v *What system architectures are supported?* -Because of Trivy's limitations, CNVM works only on ARM. Other architectures are not supported. +Because of Trivy's limitations, CNVM can only be deployed on ARM-based VMs. However, it can scan hosts regardless of system architecture. *How often are the security data sources synchronized?* From 24b59d02900cce7212d5fa378c6b83237861abf8 Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> Date: Tue, 9 Jul 2024 08:53:26 -0700 Subject: [PATCH 3/3] Update docs/cloud-native-security/vuln-management-get-started.asciidoc --- docs/cloud-native-security/vuln-management-get-started.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/cloud-native-security/vuln-management-get-started.asciidoc b/docs/cloud-native-security/vuln-management-get-started.asciidoc index 960128f826..7369634175 100644 --- a/docs/cloud-native-security/vuln-management-get-started.asciidoc +++ b/docs/cloud-native-security/vuln-management-get-started.asciidoc @@ -9,7 +9,7 @@ This page explains how to set up Cloud Native Vulnerability Management (CNVM). * CNVM is available to all {ecloud} users. On-premise deployments require an https://www.elastic.co/pricing[Enterprise subscription]. * Requires {stack} and {agent} version 8.8 or higher. * Only works in the `Default` {kib} space. Installing the CNVM integration on a different {kib} space will not work. -* Can only scan ARM based images. Does not support other architectures. +* CNVM can only be deployed on ARM-based VMs. * To view vulnerability scan findings, you need at least `read` privileges for the following indices: ** `logs-cloud_security_posture.vulnerabilities-*` ** `logs-cloud_security_posture.vulnerabilities_latest-*`