Integrate Your AssetsCloudAWSServerless
AWS Serverless Integration Release Notes
Changes to the Lambda function and CloudFormation template in each release of the Mondoo serverless AWS integration.
This page lists user-visible changes in each release of the Mondoo serverless AWS integration. Each release covers two parts:
- Lambda: The Mondoo Lambda function that runs the scans. The Mondoo Updater Lambda installs new Lambda builds automatically, so you don't need to take any action for these changes.
- CloudFormation template: The template that creates the stack, roles, and permissions in your AWS account. Template changes reach your account only when you update the stack. To learn how updates work, read Updates.
v2.88.0
Released October 1, 2026
Lambda
- Scans no longer fail when AWS has no capacity for the scanner instance type in an availability zone. The scanner now tries other instance types and, if you use a custom VPC, the other tagged subnets in that VPC.
- Failed Windows scans, both EBS volume scans and scans through AWS Systems Manager (SSM), now show as failed instead of successful. You may see more failed Windows scans than before.
- Improved error messages.
- Dependency updates and internal code improvements.
CloudFormation template
- Allows the scanner to launch on the
t2.large,t3.medium,t3.large,t3a.medium,t3a.large, andt4g.largeinstance types, so it can fall back to them when AWS is out of capacity. Until you update the stack, the scanner only falls back to the instance types your stack already allows.
v2.87.0
Released September 18, 2026
Lambda
- New: The serverless scanner can now discover and scan accounts in additional AWS Organizations, not only the organization of the hub account. It reuses the cross-account scan roles you already deployed, so no new roles or trust changes are needed.
- Dependency updates and internal code improvements.
CloudFormation template
- Adds the role permissions needed to scan accounts in additional AWS Organizations.
- Removes Lambda permissions the scanner no longer uses.
v2.86.0
Released September 10, 2026
CloudFormation template
- Removes the deprecated
CustomTag1Key,CustomTag1Value,CustomTag2Key, andCustomTag2Valueparameters. To tag the resources Mondoo creates, add tags to the CloudFormation stack instead. - The AWS console now groups the template parameters, listing the required Mondoo integration parameters first.
v2.84.0
Released September 8, 2026
Lambda
- Scan status messages for new EC2 instances now include the instance ID, so you can tell apart instances that are unnamed or share a name.
- Dependency updates and internal code improvements.
v2.83.0
Released September 4, 2026
Lambda
- Account scans in large environments are now spread out over time instead of starting all at once. This reduces failed scans when many accounts are scanned together.
- Dependency updates and internal code improvements.
v2.81.0
Released September 1, 2026
Lambda
- New: Scan schedules can now run at a specific time of day or on specific days of the week, in addition to a fixed interval in hours.
v2.80.0
Released August 29, 2026
Lambda
- Updates the scanning engine to cnspec v13.36.0.
- Dependency updates and internal code improvements.
v2.79.0
Released August 28, 2026
Lambda
- Fixes EC2 instances scanned through AWS Systems Manager (SSM) losing their
mondoo.com/scan-typelabel between scans. - Internal code improvements.
v2.78.0
Released August 27, 2026
Lambda
- When no scan interval is configured, scans now run every 24 hours instead of every 6 hours.
- Account scans now scan fewer EC2 instances in parallel, which improves reliability.
- Internal code improvements.
CloudFormation template
- Adds an optional
MondooSourceBucketparameter for the S3 bucket the Lambda code is deployed from. Mondoo fills it in when it generates the stack. - Fixes automatic updates switching the Lambda from x86_64 to arm64 in regions where it runs on x86_64.
v2.77.2
Released August 27, 2026
- Internal improvements to release tooling. No changes to the Lambda or the CloudFormation template.
v2.77.1
Released August 25, 2026
- Internal improvements to release tooling. No changes to the Lambda or the CloudFormation template.
v2.77.0
Released August 24, 2026
Lambda
- Dependency updates.
v2.76.0
Released August 24, 2026
Lambda
- Reports the pinned version, if one is set, to Mondoo.
CloudFormation template
- New: Adds an optional
FixedVersionparameter that pins the Lambda to a specific release. When it's set, the Mondoo Updater Lambda isn't deployed and the Lambda doesn't update automatically. Clear the parameter to return to automatic updates.