---
title: "POST /configuration/update"
method: POST
path: "/configuration/update"
---

# POST /configuration/update

`POST /configuration/update`

Updates the scan configuration for your Amazon Inspector account. If you don't specify an <code>accountId</code>, this operation updates the delegated administrator's configuration and propagates it to member accounts that have not been individually configured. If you specify an <code>accountId</code>, this operation updates that member account's configuration. Only the delegated administrator can specify an <code>accountId</code>; member accounts cannot call this operation.

## Request body

- object
  - `accountId` string — The 12-digit Amazon Web Services account ID of the member account whose scan configuration you want to update. When specified, you must be the delegated administrator for this member account. If not specified, the operation updates your own configuration and propagates changes to any member accounts that have not been individually configured.
  - `ecrConfiguration` object — Details about the ECR automated re-scan duration setting for your environment.
    - `rescanDuration` 'LIFETIME' | 'DAYS_30' | 'DAYS_180' | 'DAYS_14' | 'DAYS_60' | 'DAYS_90' | 'DAYS_3' | 'DAYS_7' — The rescan duration configured for image push date.
    - `pullDateRescanDuration` 'DAYS_14' | 'DAYS_30' | 'DAYS_60' | 'DAYS_90' | 'DAYS_180' | 'DAYS_3' | 'DAYS_7' — The rescan duration configured for image pull date.
    - `pullDateRescanMode` 'LAST_PULL_DATE' | 'LAST_IN_USE_AT' — The pull date for the re-scan mode.
  - `ec2Configuration` object — Enables agent-based scanning, which scans instances that are not managed by SSM.
    - `scanMode` 'EC2_SSM_AGENT_BASED' | 'EC2_HYBRID' — The scan method that is applied to the instance.
    - `activateVMScanner` boolean — Whether to activate Amazon Inspector VM scanner for Amazon EC2 scanning.
  - `updateConfigurationInheritance` object — The per-scan-type inheritance reset settings for the <code>UpdateConfiguration</code> operation. Each member is independently optional. Including a member in this structure resets that scan type's configuration to inherit from the delegated administrator.
    - `ec2Configuration` 'INHERIT_FROM_ADMIN' — The inheritance mode for Amazon EC2 scan configuration. Set to <code>INHERIT_FROM_ADMIN</code> to reset the member account's Amazon EC2 scan configuration to inherit from the delegated administrator. If omitted, the member account's existing Amazon EC2 scan configuration is not changed.
    - `ecrConfiguration` 'INHERIT_FROM_ADMIN' — The inheritance mode for Amazon ECR scan configuration. Set to <code>INHERIT_FROM_ADMIN</code> to reset the member account's Amazon ECR scan configuration to inherit from the delegated administrator. If omitted, the member account's existing Amazon ECR scan configuration is not changed.

## Response `200`

Success

- UpdateConfigurationResponse

## Other responses

- `480` — ValidationException
- `481` — AccessDeniedException
- `482` — ThrottlingException
- `483` — InternalServerException

---

[API](https://skmtc.net/aws/apis/inspector2.md) · [All operations](https://skmtc.net/aws/apis/inspector2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/inspector2/versions/c51110c7cd43/schema)