aws-sdk-securityagent 1.11.0 → 1.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 349abb0d9c1b1e58aad973302675d2e40d94931420912486f27c1eaccc33e684
-  data.tar.gz: ac6608bdeca586a93d68a5581d6ada31855596109f2f9831629f9008ccbc0c43
+  metadata.gz: e13f056c1ff17dc7448280b0d8e7d5bc4e38fb791be243efb083a26d15529a36
+  data.tar.gz: 5103eeb1120b982ae0b41ef1afbc455de77dce11d881c29d392a47c8c6f0442e
 SHA512:
-  metadata.gz: 928d06f3141bc609dd79ce7610c24651969aa792c1fcce069298121221a760f7131466fe9e6977346691d737e29e3afb8c0eac85899c2aa6eed71eae1faf65f4
-  data.tar.gz: 79e519f2956af61a5384a77a95fc34f41ae70a46b5ad614e0577bf49d9ca096f1a7f572c14384bc1568ea30b4a740bc52f28977d8656e2f06f1037adf5fba4f4
+  metadata.gz: b0be1223d552a621a3e727b45c5130aa8c756c2c191373c25b49f951dad7e2f2a1f740d401d528a2b82c15477fd8239536efd1f7cda78daa6f7b82e73aba9a33
+  data.tar.gz: 648b7c464b382b631d6a0ca57f1d9fbd64a29507909fbf49ce2cefa41a344602b0d023834bdbe7fc39ce11b62f03c2d9e192a6a17b1854c8d198f4ce53d603d7

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.13.0 (2026-08-24)
+------------------
+
+* Feature - Adding private and self-signed certificate configuration support for penetration tests
+
+1.12.0 (2026-08-13)
+------------------
+
+* Feature - Add support for setting a maximum task-hour budget cap on penetration tests and code reviews, and for revalidating previously reported findings via a new REVALIDATION job type.
+
 1.11.0 (2026-08-07)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.11.0
+1.13.0

data/lib/aws-sdk-securityagent/client.rb

@@ -658,6 +658,10 @@ module Aws::SecurityAgent
     #   resp.deleted[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.deleted[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.deleted[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.deleted[0].assets.trusted_ca_certificates #=> Array
+    #   resp.deleted[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.deleted[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.deleted[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.deleted[0].exclude_risk_types #=> Array
     #   resp.deleted[0].exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.deleted[0].service_role #=> String
@@ -679,6 +683,7 @@ module Aws::SecurityAgent
     #   resp.deleted[0].clean_up_strategy #=> String, one of "BEST_EFFORT_DELETE", "RETAIN_ALL"
     #   resp.deleted[0].disable_managed_skills #=> Array
     #   resp.deleted[0].disable_managed_skills[0] #=> String, one of "FINDING_PERSONALIZATION", "LOGIN_OPTIMIZATION"
+    #   resp.deleted[0].max_task_hours #=> Float
     #   resp.deleted[0].created_at #=> Time
     #   resp.deleted[0].updated_at #=> Time
     #   resp.failed #=> Array
@@ -972,6 +977,7 @@ module Aws::SecurityAgent
     #   resp.code_review_jobs[0].integrated_repositories[0].provider_resource_id #=> String
     #   resp.code_review_jobs[0].integrated_repositories[0].branch #=> String
     #   resp.code_review_jobs[0].code_remediation_strategy #=> String, one of "AUTOMATIC", "DISABLED"
+    #   resp.code_review_jobs[0].max_task_hours #=> Float
     #   resp.code_review_jobs[0].created_at #=> Time
     #   resp.code_review_jobs[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -1036,11 +1042,16 @@ module Aws::SecurityAgent
     #   resp.code_reviews[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.code_reviews[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.code_reviews[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.code_reviews[0].assets.trusted_ca_certificates #=> Array
+    #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.code_reviews[0].service_role #=> String
     #   resp.code_reviews[0].log_config.log_group #=> String
     #   resp.code_reviews[0].log_config.log_stream #=> String
     #   resp.code_reviews[0].code_remediation_strategy #=> String, one of "AUTOMATIC", "DISABLED"
     #   resp.code_reviews[0].validation_mode #=> String, one of "DISABLED", "SIMULATED"
+    #   resp.code_reviews[0].max_task_hours #=> Float
     #   resp.code_reviews[0].created_at #=> Time
     #   resp.code_reviews[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -1116,6 +1127,9 @@ module Aws::SecurityAgent
     #   resp.findings[0].verification_script.env_vars[0].name #=> String
     #   resp.findings[0].verification_script.env_vars[0].value #=> String
     #   resp.findings[0].alignment_rationale #=> String
+    #   resp.findings[0].revalidation_job_ids #=> Array
+    #   resp.findings[0].revalidation_job_ids[0] #=> String
+    #   resp.findings[0].original_finding_id #=> String
     #   resp.findings[0].created_at #=> Time
     #   resp.findings[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -1267,10 +1281,18 @@ module Aws::SecurityAgent
     #   resp.pentest_jobs[0].integrated_repositories[0].integration_id #=> String
     #   resp.pentest_jobs[0].integrated_repositories[0].provider_resource_id #=> String
     #   resp.pentest_jobs[0].integrated_repositories[0].branch #=> String
+    #   resp.pentest_jobs[0].trusted_ca_certificates #=> Array
+    #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.pentest_jobs[0].code_remediation_strategy #=> String, one of "AUTOMATIC", "DISABLED"
     #   resp.pentest_jobs[0].clean_up_strategy #=> String, one of "BEST_EFFORT_DELETE", "RETAIN_ALL"
     #   resp.pentest_jobs[0].disable_managed_skills #=> Array
     #   resp.pentest_jobs[0].disable_managed_skills[0] #=> String, one of "FINDING_PERSONALIZATION", "LOGIN_OPTIMIZATION"
+    #   resp.pentest_jobs[0].max_task_hours #=> Float
+    #   resp.pentest_jobs[0].job_type #=> String, one of "FULL", "REVALIDATION"
+    #   resp.pentest_jobs[0].selected_finding_ids #=> Array
+    #   resp.pentest_jobs[0].selected_finding_ids[0] #=> String
     #   resp.pentest_jobs[0].created_at #=> Time
     #   resp.pentest_jobs[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -1333,6 +1355,10 @@ module Aws::SecurityAgent
     #   resp.pentests[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.pentests[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.pentests[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.pentests[0].assets.trusted_ca_certificates #=> Array
+    #   resp.pentests[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.pentests[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.pentests[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.pentests[0].exclude_risk_types #=> Array
     #   resp.pentests[0].exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.pentests[0].service_role #=> String
@@ -1354,6 +1380,7 @@ module Aws::SecurityAgent
     #   resp.pentests[0].clean_up_strategy #=> String, one of "BEST_EFFORT_DELETE", "RETAIN_ALL"
     #   resp.pentests[0].disable_managed_skills #=> Array
     #   resp.pentests[0].disable_managed_skills[0] #=> String, one of "FINDING_PERSONALIZATION", "LOGIN_OPTIMIZATION"
+    #   resp.pentests[0].max_task_hours #=> Float
     #   resp.pentests[0].created_at #=> Time
     #   resp.pentests[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -1621,6 +1648,10 @@ module Aws::SecurityAgent
     #   resp.threat_models[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.threat_models[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.threat_models[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.threat_models[0].assets.trusted_ca_certificates #=> Array
+    #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.threat_models[0].scope_docs #=> Array
     #   resp.threat_models[0].scope_docs[0].s3_location #=> String
     #   resp.threat_models[0].scope_docs[0].artifact_id #=> String
@@ -1933,6 +1964,11 @@ module Aws::SecurityAgent
     #   The validation mode for the code review. Valid values are SIMULATED
     #   and DISABLED.
     #
+    # @option params [Float] :max_task_hours
+    #   The maximum number of billable task hours allowed for jobs started
+    #   from this code review. Must be a positive number. If not set, jobs run
+    #   to completion with no budget cap.
+    #
     # @return [Types::CreateCodeReviewOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateCodeReviewOutput#code_review_id #code_review_id} => String
@@ -1945,6 +1981,7 @@ module Aws::SecurityAgent
     #   * {Types::CreateCodeReviewOutput#agent_space_id #agent_space_id} => String
     #   * {Types::CreateCodeReviewOutput#code_remediation_strategy #code_remediation_strategy} => String
     #   * {Types::CreateCodeReviewOutput#validation_mode #validation_mode} => String
+    #   * {Types::CreateCodeReviewOutput#max_task_hours #max_task_hours} => Float
     #
     # @example Request syntax with placeholder values
     #
@@ -1992,6 +2029,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     service_role: "ServiceRole",
     #     log_config: {
@@ -2000,6 +2046,7 @@ module Aws::SecurityAgent
     #     },
     #     code_remediation_strategy: "AUTOMATIC", # accepts AUTOMATIC, DISABLED
     #     validation_mode: "DISABLED", # accepts DISABLED, SIMULATED
+    #     max_task_hours: 1.0,
     #   })
     #
     # @example Response structure
@@ -2030,12 +2077,17 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.service_role #=> String
     #   resp.log_config.log_group #=> String
     #   resp.log_config.log_stream #=> String
     #   resp.agent_space_id #=> String
     #   resp.code_remediation_strategy #=> String, one of "AUTOMATIC", "DISABLED"
     #   resp.validation_mode #=> String, one of "DISABLED", "SIMULATED"
+    #   resp.max_task_hours #=> Float
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreateCodeReview AWS API Documentation
     #
@@ -2208,6 +2260,11 @@ module Aws::SecurityAgent
     #   A list of managed skills to disable for this pentest. Valid values
     #   include FINDING\_PERSONALIZATION and LOGIN\_OPTIMIZATION.
     #
+    # @option params [Float] :max_task_hours
+    #   The maximum number of billable task hours allowed for jobs started
+    #   from this pentest. Must be a positive number. If not set, jobs run to
+    #   completion with no budget cap.
+    #
     # @return [Types::CreatePentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreatePentestOutput#pentest_id #pentest_id} => String
@@ -2266,6 +2323,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     exclude_risk_types: ["CROSS_SITE_SCRIPTING"], # accepts CROSS_SITE_SCRIPTING, DEFAULT_CREDENTIALS, INSECURE_DIRECT_OBJECT_REFERENCE, PRIVILEGE_ESCALATION, SERVER_SIDE_TEMPLATE_INJECTION, COMMAND_INJECTION, CODE_INJECTION, SQL_INJECTION, ARBITRARY_FILE_UPLOAD, INSECURE_DESERIALIZATION, LOCAL_FILE_INCLUSION, INFORMATION_DISCLOSURE, PATH_TRAVERSAL, SERVER_SIDE_REQUEST_FORGERY, JSON_WEB_TOKEN_VULNERABILITIES, XML_EXTERNAL_ENTITY, FILE_DELETION, OTHER, GRAPHQL_VULNERABILITIES, BUSINESS_LOGIC_VULNERABILITIES, CRYPTOGRAPHIC_VULNERABILITIES, DENIAL_OF_SERVICE, FILE_ACCESS, FILE_CREATION, DATABASE_MODIFICATION, DATABASE_ACCESS, OUTBOUND_SERVICE_REQUEST, UNKNOWN
     #     service_role: "ServiceRole",
@@ -2295,6 +2361,7 @@ module Aws::SecurityAgent
     #     },
     #     code_remediation_strategy: "AUTOMATIC", # accepts AUTOMATIC, DISABLED
     #     disable_managed_skills: ["FINDING_PERSONALIZATION"], # accepts FINDING_PERSONALIZATION, LOGIN_OPTIMIZATION
+    #     max_task_hours: 1.0,
     #   })
     #
     # @example Response structure
@@ -2325,6 +2392,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.exclude_risk_types #=> Array
     #   resp.exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.service_role #=> String
@@ -2759,6 +2830,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     scope_docs: [
     #       {
@@ -2811,6 +2891,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.scope_docs #=> Array
     #   resp.scope_docs[0].s3_location #=> String
     #   resp.scope_docs[0].artifact_id #=> String
@@ -4710,6 +4794,16 @@ module Aws::SecurityAgent
     # @option params [required, String] :pentest_id
     #   The unique identifier of the pentest to start a job for.
     #
+    # @option params [String] :job_type
+    #   The type of pentest job to start. Valid values are FULL and
+    #   REVALIDATION. When set to REVALIDATION, the selectedFindingIds
+    #   parameter is required.
+    #
+    # @option params [Array<String>] :selected_finding_ids
+    #   The list of finding identifiers to revalidate. Required when jobType
+    #   is REVALIDATION. Each finding must belong to the same agent space and
+    #   pentest.
+    #
     # @return [Types::StartPentestJobOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::StartPentestJobOutput#title #title} => String
@@ -4725,6 +4819,8 @@ module Aws::SecurityAgent
     #   resp = client.start_pentest_job({
     #     agent_space_id: "String", # required
     #     pentest_id: "String", # required
+    #     job_type: "FULL", # accepts FULL, REVALIDATION
+    #     selected_finding_ids: ["String"],
     #   })
     #
     # @example Response structure
@@ -5088,6 +5184,10 @@ module Aws::SecurityAgent
     #   The updated validation mode for the code review. Valid values are
     #   SIMULATED and DISABLED.
     #
+    # @option params [Float] :max_task_hours
+    #   The updated maximum number of billable task hours allowed for jobs
+    #   started from this code review.
+    #
     # @return [Types::UpdateCodeReviewOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateCodeReviewOutput#code_review_id #code_review_id} => String
@@ -5100,6 +5200,7 @@ module Aws::SecurityAgent
     #   * {Types::UpdateCodeReviewOutput#agent_space_id #agent_space_id} => String
     #   * {Types::UpdateCodeReviewOutput#code_remediation_strategy #code_remediation_strategy} => String
     #   * {Types::UpdateCodeReviewOutput#validation_mode #validation_mode} => String
+    #   * {Types::UpdateCodeReviewOutput#max_task_hours #max_task_hours} => Float
     #
     # @example Request syntax with placeholder values
     #
@@ -5148,6 +5249,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     service_role: "ServiceRole",
     #     log_config: {
@@ -5156,6 +5266,7 @@ module Aws::SecurityAgent
     #     },
     #     code_remediation_strategy: "AUTOMATIC", # accepts AUTOMATIC, DISABLED
     #     validation_mode: "DISABLED", # accepts DISABLED, SIMULATED
+    #     max_task_hours: 1.0,
     #   })
     #
     # @example Response structure
@@ -5186,12 +5297,17 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.service_role #=> String
     #   resp.log_config.log_group #=> String
     #   resp.log_config.log_stream #=> String
     #   resp.agent_space_id #=> String
     #   resp.code_remediation_strategy #=> String, one of "AUTOMATIC", "DISABLED"
     #   resp.validation_mode #=> String, one of "DISABLED", "SIMULATED"
+    #   resp.max_task_hours #=> Float
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdateCodeReview AWS API Documentation
     #
@@ -5374,6 +5490,10 @@ module Aws::SecurityAgent
     #   The updated list of managed skills to disable for this pentest. Valid
     #   values include FINDING\_PERSONALIZATION and LOGIN\_OPTIMIZATION.
     #
+    # @option params [Float] :max_task_hours
+    #   The updated maximum number of billable task hours allowed for jobs
+    #   started from this pentest.
+    #
     # @return [Types::UpdatePentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdatePentestOutput#pentest_id #pentest_id} => String
@@ -5433,6 +5553,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     exclude_risk_types: ["CROSS_SITE_SCRIPTING"], # accepts CROSS_SITE_SCRIPTING, DEFAULT_CREDENTIALS, INSECURE_DIRECT_OBJECT_REFERENCE, PRIVILEGE_ESCALATION, SERVER_SIDE_TEMPLATE_INJECTION, COMMAND_INJECTION, CODE_INJECTION, SQL_INJECTION, ARBITRARY_FILE_UPLOAD, INSECURE_DESERIALIZATION, LOCAL_FILE_INCLUSION, INFORMATION_DISCLOSURE, PATH_TRAVERSAL, SERVER_SIDE_REQUEST_FORGERY, JSON_WEB_TOKEN_VULNERABILITIES, XML_EXTERNAL_ENTITY, FILE_DELETION, OTHER, GRAPHQL_VULNERABILITIES, BUSINESS_LOGIC_VULNERABILITIES, CRYPTOGRAPHIC_VULNERABILITIES, DENIAL_OF_SERVICE, FILE_ACCESS, FILE_CREATION, DATABASE_MODIFICATION, DATABASE_ACCESS, OUTBOUND_SERVICE_REQUEST, UNKNOWN
     #     service_role: "ServiceRole",
@@ -5462,6 +5591,7 @@ module Aws::SecurityAgent
     #     },
     #     code_remediation_strategy: "AUTOMATIC", # accepts AUTOMATIC, DISABLED
     #     disable_managed_skills: ["FINDING_PERSONALIZATION"], # accepts FINDING_PERSONALIZATION, LOGIN_OPTIMIZATION
+    #     max_task_hours: 1.0,
     #   })
     #
     # @example Response structure
@@ -5492,6 +5622,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.exclude_risk_types #=> Array
     #   resp.exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.service_role #=> String
@@ -5893,6 +6027,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     scope_docs: [
     #       {
@@ -5939,6 +6082,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.scope_docs #=> Array
     #   resp.scope_docs[0].s3_location #=> String
     #   resp.scope_docs[0].artifact_id #=> String
@@ -6018,7 +6165,7 @@ module Aws::SecurityAgent
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityagent'
-      context[:gem_version] = '1.11.0'
+      context[:gem_version] = '1.13.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityagent/client_api.rb

@@ -101,6 +101,8 @@ module Aws::SecurityAgent
     BitbucketWorkspace = Shapes::StringShape.new(name: 'BitbucketWorkspace')
     Blob = Shapes::BlobShape.new(name: 'Blob')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
+    CaCertificatePem = Shapes::StringShape.new(name: 'CaCertificatePem')
+    CaCertificateSource = Shapes::UnionShape.new(name: 'CaCertificateSource')
     Category = Shapes::StructureShape.new(name: 'Category')
     CategoryList = Shapes::ListShape.new(name: 'CategoryList')
     CertificateChain = Shapes::StringShape.new(name: 'CertificateChain')
@@ -256,6 +258,7 @@ module Aws::SecurityAgent
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
     IpAddressType = Shapes::StringShape.new(name: 'IpAddressType')
     JobStatus = Shapes::StringShape.new(name: 'JobStatus')
+    JobType = Shapes::StringShape.new(name: 'JobType')
     KmsKeyId = Shapes::StringShape.new(name: 'KmsKeyId')
     LambdaFunctionArn = Shapes::StringShape.new(name: 'LambdaFunctionArn')
     LambdaFunctionArns = Shapes::ListShape.new(name: 'LambdaFunctionArns')
@@ -469,6 +472,8 @@ module Aws::SecurityAgent
     ThreatSummary = Shapes::StructureShape.new(name: 'ThreatSummary')
     ThreatSummaryList = Shapes::ListShape.new(name: 'ThreatSummaryList')
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
+    TrustedCaCertificate = Shapes::StructureShape.new(name: 'TrustedCaCertificate')
+    TrustedCaCertificateList = Shapes::ListShape.new(name: 'TrustedCaCertificateList')
     UntagResourceInput = Shapes::StructureShape.new(name: 'UntagResourceInput')
     UntagResourceOutput = Shapes::StructureShape.new(name: 'UntagResourceOutput')
     UpdateAgentSpaceInput = Shapes::StructureShape.new(name: 'UpdateAgentSpaceInput')
@@ -601,6 +606,7 @@ module Aws::SecurityAgent
     Assets.add_member(:documents, Shapes::ShapeRef.new(shape: DocumentList, location_name: "documents"))
     Assets.add_member(:source_code, Shapes::ShapeRef.new(shape: SourceCodeRepositoryList, location_name: "sourceCode"))
     Assets.add_member(:integrated_repositories, Shapes::ShapeRef.new(shape: IntegratedRepositoryList, location_name: "integratedRepositories"))
+    Assets.add_member(:trusted_ca_certificates, Shapes::ShapeRef.new(shape: TrustedCaCertificateList, location_name: "trustedCaCertificates"))
     Assets.struct_class = Types::Assets
 
     Authentication.add_member(:provider_type, Shapes::ShapeRef.new(shape: AuthenticationProviderType, location_name: "providerType"))
@@ -823,6 +829,16 @@ module Aws::SecurityAgent
     BitbucketResourceCapabilities.add_member(:remediate_code, Shapes::ShapeRef.new(shape: Boolean, location_name: "remediateCode"))
     BitbucketResourceCapabilities.struct_class = Types::BitbucketResourceCapabilities
 
+    CaCertificateSource.add_member(:inline_pem, Shapes::ShapeRef.new(shape: CaCertificatePem, location_name: "inlinePem"))
+    CaCertificateSource.add_member(:artifact_id, Shapes::ShapeRef.new(shape: String, location_name: "artifactId"))
+    CaCertificateSource.add_member(:s3_location, Shapes::ShapeRef.new(shape: String, location_name: "s3Location"))
+    CaCertificateSource.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    CaCertificateSource.add_member_subclass(:inline_pem, Types::CaCertificateSource::InlinePem)
+    CaCertificateSource.add_member_subclass(:artifact_id, Types::CaCertificateSource::ArtifactId)
+    CaCertificateSource.add_member_subclass(:s3_location, Types::CaCertificateSource::S3Location)
+    CaCertificateSource.add_member_subclass(:unknown, Types::CaCertificateSource::Unknown)
+    CaCertificateSource.struct_class = Types::CaCertificateSource
+
     Category.add_member(:name, Shapes::ShapeRef.new(shape: String, location_name: "name"))
     Category.add_member(:is_primary, Shapes::ShapeRef.new(shape: Boolean, location_name: "isPrimary"))
     Category.struct_class = Types::Category
@@ -861,6 +877,7 @@ module Aws::SecurityAgent
     CodeReview.add_member(:log_config, Shapes::ShapeRef.new(shape: CloudWatchLog, location_name: "logConfig"))
     CodeReview.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     CodeReview.add_member(:validation_mode, Shapes::ShapeRef.new(shape: ValidationMode, location_name: "validationMode"))
+    CodeReview.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     CodeReview.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     CodeReview.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
     CodeReview.struct_class = Types::CodeReview
@@ -881,6 +898,7 @@ module Aws::SecurityAgent
     CodeReviewJob.add_member(:error_information, Shapes::ShapeRef.new(shape: ErrorInformation, location_name: "errorInformation"))
     CodeReviewJob.add_member(:integrated_repositories, Shapes::ShapeRef.new(shape: IntegratedRepositoryList, location_name: "integratedRepositories"))
     CodeReviewJob.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
+    CodeReviewJob.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     CodeReviewJob.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     CodeReviewJob.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
     CodeReviewJob.struct_class = Types::CodeReviewJob
@@ -1008,6 +1026,7 @@ module Aws::SecurityAgent
     CreateCodeReviewInput.add_member(:log_config, Shapes::ShapeRef.new(shape: CloudWatchLog, location_name: "logConfig"))
     CreateCodeReviewInput.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     CreateCodeReviewInput.add_member(:validation_mode, Shapes::ShapeRef.new(shape: ValidationMode, location_name: "validationMode"))
+    CreateCodeReviewInput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     CreateCodeReviewInput.struct_class = Types::CreateCodeReviewInput
 
     CreateCodeReviewOutput.add_member(:code_review_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "codeReviewId"))
@@ -1020,6 +1039,7 @@ module Aws::SecurityAgent
     CreateCodeReviewOutput.add_member(:agent_space_id, Shapes::ShapeRef.new(shape: String, location_name: "agentSpaceId"))
     CreateCodeReviewOutput.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     CreateCodeReviewOutput.add_member(:validation_mode, Shapes::ShapeRef.new(shape: ValidationMode, location_name: "validationMode"))
+    CreateCodeReviewOutput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     CreateCodeReviewOutput.struct_class = Types::CreateCodeReviewOutput
 
     CreateIntegrationInput.add_member(:provider, Shapes::ShapeRef.new(shape: Provider, required: true, location_name: "provider"))
@@ -1052,6 +1072,7 @@ module Aws::SecurityAgent
     CreatePentestInput.add_member(:network_traffic_config, Shapes::ShapeRef.new(shape: NetworkTrafficConfig, location_name: "networkTrafficConfig"))
     CreatePentestInput.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     CreatePentestInput.add_member(:disable_managed_skills, Shapes::ShapeRef.new(shape: SkillTypeList, location_name: "disableManagedSkills"))
+    CreatePentestInput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     CreatePentestInput.struct_class = Types::CreatePentestInput
 
     CreatePentestOutput.add_member(:pentest_id, Shapes::ShapeRef.new(shape: String, location_name: "pentestId"))
@@ -1344,6 +1365,8 @@ module Aws::SecurityAgent
     Finding.add_member(:code_locations, Shapes::ShapeRef.new(shape: CodeLocationList, location_name: "codeLocations"))
     Finding.add_member(:verification_script, Shapes::ShapeRef.new(shape: VerificationScript, location_name: "verificationScript"))
     Finding.add_member(:alignment_rationale, Shapes::ShapeRef.new(shape: String, location_name: "alignmentRationale"))
+    Finding.add_member(:revalidation_job_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "revalidationJobIds"))
+    Finding.add_member(:original_finding_id, Shapes::ShapeRef.new(shape: String, location_name: "originalFindingId"))
     Finding.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     Finding.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
     Finding.struct_class = Types::Finding
@@ -1847,6 +1870,7 @@ module Aws::SecurityAgent
     Pentest.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     Pentest.add_member(:clean_up_strategy, Shapes::ShapeRef.new(shape: CleanUpStrategy, location_name: "cleanUpStrategy"))
     Pentest.add_member(:disable_managed_skills, Shapes::ShapeRef.new(shape: SkillTypeList, location_name: "disableManagedSkills"))
+    Pentest.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     Pentest.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     Pentest.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
     Pentest.struct_class = Types::Pentest
@@ -1873,9 +1897,13 @@ module Aws::SecurityAgent
     PentestJob.add_member(:network_traffic_config, Shapes::ShapeRef.new(shape: NetworkTrafficConfig, location_name: "networkTrafficConfig"))
     PentestJob.add_member(:error_information, Shapes::ShapeRef.new(shape: ErrorInformation, location_name: "errorInformation"))
     PentestJob.add_member(:integrated_repositories, Shapes::ShapeRef.new(shape: IntegratedRepositoryList, location_name: "integratedRepositories"))
+    PentestJob.add_member(:trusted_ca_certificates, Shapes::ShapeRef.new(shape: TrustedCaCertificateList, location_name: "trustedCaCertificates"))
     PentestJob.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     PentestJob.add_member(:clean_up_strategy, Shapes::ShapeRef.new(shape: CleanUpStrategy, location_name: "cleanUpStrategy"))
     PentestJob.add_member(:disable_managed_skills, Shapes::ShapeRef.new(shape: SkillTypeList, location_name: "disableManagedSkills"))
+    PentestJob.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
+    PentestJob.add_member(:job_type, Shapes::ShapeRef.new(shape: JobType, location_name: "jobType"))
+    PentestJob.add_member(:selected_finding_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "selectedFindingIds"))
     PentestJob.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     PentestJob.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
     PentestJob.struct_class = Types::PentestJob
@@ -2054,6 +2082,8 @@ module Aws::SecurityAgent
 
     StartPentestJobInput.add_member(:agent_space_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "agentSpaceId"))
     StartPentestJobInput.add_member(:pentest_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "pentestId"))
+    StartPentestJobInput.add_member(:job_type, Shapes::ShapeRef.new(shape: JobType, location_name: "jobType"))
+    StartPentestJobInput.add_member(:selected_finding_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "selectedFindingIds"))
     StartPentestJobInput.struct_class = Types::StartPentestJobInput
 
     StartPentestJobOutput.add_member(:title, Shapes::ShapeRef.new(shape: String, location_name: "title"))
@@ -2316,6 +2346,11 @@ module Aws::SecurityAgent
     ThrottlingException.add_member(:quota_code, Shapes::ShapeRef.new(shape: String, location_name: "quotaCode"))
     ThrottlingException.struct_class = Types::ThrottlingException
 
+    TrustedCaCertificate.add_member(:source, Shapes::ShapeRef.new(shape: CaCertificateSource, required: true, location_name: "source"))
+    TrustedCaCertificate.struct_class = Types::TrustedCaCertificate
+
+    TrustedCaCertificateList.member = Shapes::ShapeRef.new(shape: TrustedCaCertificate)
+
     UntagResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location: "uri", location_name: "resourceArn"))
     UntagResourceInput.add_member(:tag_keys, Shapes::ShapeRef.new(shape: TagKeyList, required: true, location: "querystring", location_name: "tagKeys"))
     UntagResourceInput.struct_class = Types::UntagResourceInput
@@ -2356,6 +2391,7 @@ module Aws::SecurityAgent
     UpdateCodeReviewInput.add_member(:log_config, Shapes::ShapeRef.new(shape: CloudWatchLog, location_name: "logConfig"))
     UpdateCodeReviewInput.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     UpdateCodeReviewInput.add_member(:validation_mode, Shapes::ShapeRef.new(shape: ValidationMode, location_name: "validationMode"))
+    UpdateCodeReviewInput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     UpdateCodeReviewInput.struct_class = Types::UpdateCodeReviewInput
 
     UpdateCodeReviewOutput.add_member(:code_review_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "codeReviewId"))
@@ -2368,6 +2404,7 @@ module Aws::SecurityAgent
     UpdateCodeReviewOutput.add_member(:agent_space_id, Shapes::ShapeRef.new(shape: String, location_name: "agentSpaceId"))
     UpdateCodeReviewOutput.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     UpdateCodeReviewOutput.add_member(:validation_mode, Shapes::ShapeRef.new(shape: ValidationMode, location_name: "validationMode"))
+    UpdateCodeReviewOutput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     UpdateCodeReviewOutput.struct_class = Types::UpdateCodeReviewOutput
 
     UpdateFindingInput.add_member(:finding_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "findingId"))
@@ -2403,6 +2440,7 @@ module Aws::SecurityAgent
     UpdatePentestInput.add_member(:network_traffic_config, Shapes::ShapeRef.new(shape: NetworkTrafficConfig, location_name: "networkTrafficConfig"))
     UpdatePentestInput.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     UpdatePentestInput.add_member(:disable_managed_skills, Shapes::ShapeRef.new(shape: SkillTypeList, location_name: "disableManagedSkills"))
+    UpdatePentestInput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     UpdatePentestInput.struct_class = Types::UpdatePentestInput
 
     UpdatePentestOutput.add_member(:pentest_id, Shapes::ShapeRef.new(shape: String, location_name: "pentestId"))

data/lib/aws-sdk-securityagent/types.rb

@@ -363,6 +363,13 @@ module Aws::SecurityAgent
     #   The list of integrated repositories associated with the pentest.
     #   @return [Array<Types::IntegratedRepository>]
     #
+    # @!attribute [rw] trusted_ca_certificates
+    #   The trust anchors used to validate target endpoint TLS certificates.
+    #   Provide these for endpoints served by a private or internal
+    #   certificate authority (CA), an intermediate CA, or a self-signed
+    #   certificate.
+    #   @return [Array<Types::TrustedCaCertificate>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/Assets AWS API Documentation
     #
     class Assets < Struct.new(
@@ -370,8 +377,9 @@ module Aws::SecurityAgent
       :actors,
       :documents,
       :source_code,
-      :integrated_repositories)
-      SENSITIVE = []
+      :integrated_repositories,
+      :trusted_ca_certificates)
+      SENSITIVE = [:trusted_ca_certificates]
       include Aws::Structure
     end
 
@@ -1416,6 +1424,42 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # The source of a trusted CA certificate. Exactly one member must be
+    # set.
+    #
+    # @note CaCertificateSource is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note CaCertificateSource is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of CaCertificateSource corresponding to the set member.
+    #
+    # @!attribute [rw] inline_pem
+    #   A PEM-encoded X.509 certificate supplied inline.
+    #   @return [String]
+    #
+    # @!attribute [rw] artifact_id
+    #   The artifact ID of an uploaded certificate file.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_location
+    #   The Amazon S3 location URI of a customer-staged certificate.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CaCertificateSource AWS API Documentation
+    #
+    class CaCertificateSource < Struct.new(
+      :inline_pem,
+      :artifact_id,
+      :s3_location,
+      :unknown)
+      SENSITIVE = [:inline_pem]
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class InlinePem < CaCertificateSource; end
+      class ArtifactId < CaCertificateSource; end
+      class S3Location < CaCertificateSource; end
+      class Unknown < CaCertificateSource; end
+    end
+
     # Represents a category assigned to a security testing task.
     #
     # @!attribute [rw] name
@@ -1574,6 +1618,13 @@ module Aws::SecurityAgent
     #   and DISABLED.
     #   @return [String]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours allowed for jobs started
+    #   from this code review. If a job reaches the configured limit, it is
+    #   gracefully stopped. If not set, jobs run to completion with no
+    #   budget cap.
+    #   @return [Float]
+    #
     # @!attribute [rw] created_at
     #   The date and time the code review was created, in UTC format.
     #   @return [Time]
@@ -1593,6 +1644,7 @@ module Aws::SecurityAgent
       :log_config,
       :code_remediation_strategy,
       :validation_mode,
+      :max_task_hours,
       :created_at,
       :updated_at)
       SENSITIVE = []
@@ -1661,6 +1713,12 @@ module Aws::SecurityAgent
     #   The code remediation strategy for the code review job.
     #   @return [String]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours allowed for this code
+    #   review job. If the cumulative task hours reach this limit, the job
+    #   is gracefully stopped.
+    #   @return [Float]
+    #
     # @!attribute [rw] created_at
     #   The date and time the code review job was created, in UTC format.
     #   @return [Time]
@@ -1687,6 +1745,7 @@ module Aws::SecurityAgent
       :error_information,
       :integrated_repositories,
       :code_remediation_strategy,
+      :max_task_hours,
       :created_at,
       :updated_at)
       SENSITIVE = []
@@ -2234,6 +2293,12 @@ module Aws::SecurityAgent
     #   and DISABLED.
     #   @return [String]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours allowed for jobs started
+    #   from this code review. Must be a positive number. If not set, jobs
+    #   run to completion with no budget cap.
+    #   @return [Float]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreateCodeReviewInput AWS API Documentation
     #
     class CreateCodeReviewInput < Struct.new(
@@ -2243,7 +2308,8 @@ module Aws::SecurityAgent
       :service_role,
       :log_config,
       :code_remediation_strategy,
-      :validation_mode)
+      :validation_mode,
+      :max_task_hours)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2291,6 +2357,11 @@ module Aws::SecurityAgent
     #   The validation mode for the code review.
     #   @return [String]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours configured for jobs
+    #   started from this code review. Null if no budget cap is set.
+    #   @return [Float]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreateCodeReviewOutput AWS API Documentation
     #
     class CreateCodeReviewOutput < Struct.new(
@@ -2303,7 +2374,8 @@ module Aws::SecurityAgent
       :log_config,
       :agent_space_id,
       :code_remediation_strategy,
-      :validation_mode)
+      :validation_mode,
+      :max_task_hours)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2447,6 +2519,12 @@ module Aws::SecurityAgent
     #   include FINDING\_PERSONALIZATION and LOGIN\_OPTIMIZATION.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours allowed for jobs started
+    #   from this pentest. Must be a positive number. If not set, jobs run
+    #   to completion with no budget cap.
+    #   @return [Float]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreatePentestInput AWS API Documentation
     #
     class CreatePentestInput < Struct.new(
@@ -2459,7 +2537,8 @@ module Aws::SecurityAgent
       :vpc_config,
       :network_traffic_config,
       :code_remediation_strategy,
-      :disable_managed_skills)
+      :disable_managed_skills,
+      :max_task_hours)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3759,6 +3838,16 @@ module Aws::SecurityAgent
     #   finding was adjusted based on customer preferences.
     #   @return [String]
     #
+    # @!attribute [rw] revalidation_job_ids
+    #   The list of pentest job identifiers for revalidation jobs that
+    #   retested this finding.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] original_finding_id
+    #   The identifier of the original finding that this revalidation
+    #   finding was produced from.
+    #   @return [String]
+    #
     # @!attribute [rw] created_at
     #   The date and time the finding was created, in UTC format.
     #   @return [Time]
@@ -3793,6 +3882,8 @@ module Aws::SecurityAgent
       :code_locations,
       :verification_script,
       :alignment_rationale,
+      :revalidation_job_ids,
+      :original_finding_id,
       :created_at,
       :updated_at)
       SENSITIVE = []
@@ -6119,6 +6210,13 @@ module Aws::SecurityAgent
     #   include FINDING\_PERSONALIZATION and LOGIN\_OPTIMIZATION.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours allowed for jobs started
+    #   from this pentest. If a job reaches the configured limit, it is
+    #   gracefully stopped. If not set, jobs run to completion with no
+    #   budget cap.
+    #   @return [Float]
+    #
     # @!attribute [rw] created_at
     #   The date and time the pentest was created, in UTC format.
     #   @return [Time]
@@ -6142,6 +6240,7 @@ module Aws::SecurityAgent
       :code_remediation_strategy,
       :clean_up_strategy,
       :disable_managed_skills,
+      :max_task_hours,
       :created_at,
       :updated_at)
       SENSITIVE = []
@@ -6233,6 +6332,11 @@ module Aws::SecurityAgent
     #   The list of integrated repositories associated with the pentest job.
     #   @return [Array<Types::IntegratedRepository>]
     #
+    # @!attribute [rw] trusted_ca_certificates
+    #   The trust anchors used to validate target endpoint TLS certificates
+    #   during the pentest job.
+    #   @return [Array<Types::TrustedCaCertificate>]
+    #
     # @!attribute [rw] code_remediation_strategy
     #   The code remediation strategy for the pentest job.
     #   @return [String]
@@ -6246,6 +6350,21 @@ module Aws::SecurityAgent
     #   include FINDING\_PERSONALIZATION and LOGIN\_OPTIMIZATION.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours allowed for this pentest
+    #   job. If the cumulative task hours reach this limit, the job is
+    #   gracefully stopped.
+    #   @return [Float]
+    #
+    # @!attribute [rw] job_type
+    #   The type of the pentest job. Valid values are FULL and REVALIDATION.
+    #   @return [String]
+    #
+    # @!attribute [rw] selected_finding_ids
+    #   The list of finding identifiers selected for revalidation. Present
+    #   only when jobType is REVALIDATION.
+    #   @return [Array<String>]
+    #
     # @!attribute [rw] created_at
     #   The date and time the pentest job was created, in UTC format.
     #   @return [Time]
@@ -6277,12 +6396,16 @@ module Aws::SecurityAgent
       :network_traffic_config,
       :error_information,
       :integrated_repositories,
+      :trusted_ca_certificates,
       :code_remediation_strategy,
       :clean_up_strategy,
       :disable_managed_skills,
+      :max_task_hours,
+      :job_type,
+      :selected_finding_ids,
       :created_at,
       :updated_at)
-      SENSITIVE = []
+      SENSITIVE = [:trusted_ca_certificates]
       include Aws::Structure
     end
 
@@ -6923,11 +7046,25 @@ module Aws::SecurityAgent
     #   The unique identifier of the pentest to start a job for.
     #   @return [String]
     #
+    # @!attribute [rw] job_type
+    #   The type of pentest job to start. Valid values are FULL and
+    #   REVALIDATION. When set to REVALIDATION, the selectedFindingIds
+    #   parameter is required.
+    #   @return [String]
+    #
+    # @!attribute [rw] selected_finding_ids
+    #   The list of finding identifiers to revalidate. Required when jobType
+    #   is REVALIDATION. Each finding must belong to the same agent space
+    #   and pentest.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/StartPentestJobInput AWS API Documentation
     #
     class StartPentestJobInput < Struct.new(
       :agent_space_id,
-      :pentest_id)
+      :pentest_id,
+      :job_type,
+      :selected_finding_ids)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7972,6 +8109,21 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # A trust anchor used when validating a target endpoint's TLS
+    # certificate.
+    #
+    # @!attribute [rw] source
+    #   The source that AWS Security Agent reads the certificate from.
+    #   @return [Types::CaCertificateSource]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/TrustedCaCertificate AWS API Documentation
+    #
+    class TrustedCaCertificate < Struct.new(
+      :source)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Input for UntagResource operation.
     #
     # @!attribute [rw] resource_arn
@@ -8159,6 +8311,11 @@ module Aws::SecurityAgent
     #   SIMULATED and DISABLED.
     #   @return [String]
     #
+    # @!attribute [rw] max_task_hours
+    #   The updated maximum number of billable task hours allowed for jobs
+    #   started from this code review.
+    #   @return [Float]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdateCodeReviewInput AWS API Documentation
     #
     class UpdateCodeReviewInput < Struct.new(
@@ -8169,7 +8326,8 @@ module Aws::SecurityAgent
       :service_role,
       :log_config,
       :code_remediation_strategy,
-      :validation_mode)
+      :validation_mode,
+      :max_task_hours)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8217,6 +8375,11 @@ module Aws::SecurityAgent
     #   The validation mode for the code review.
     #   @return [String]
     #
+    # @!attribute [rw] max_task_hours
+    #   The maximum number of billable task hours configured for jobs
+    #   started from this code review. Null if no budget cap is set.
+    #   @return [Float]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdateCodeReviewOutput AWS API Documentation
     #
     class UpdateCodeReviewOutput < Struct.new(
@@ -8229,7 +8392,8 @@ module Aws::SecurityAgent
       :log_config,
       :agent_space_id,
       :code_remediation_strategy,
-      :validation_mode)
+      :validation_mode,
+      :max_task_hours)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8378,6 +8542,11 @@ module Aws::SecurityAgent
     #   LOGIN\_OPTIMIZATION.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] max_task_hours
+    #   The updated maximum number of billable task hours allowed for jobs
+    #   started from this pentest.
+    #   @return [Float]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdatePentestInput AWS API Documentation
     #
     class UpdatePentestInput < Struct.new(
@@ -8391,7 +8560,8 @@ module Aws::SecurityAgent
       :vpc_config,
       :network_traffic_config,
       :code_remediation_strategy,
-      :disable_managed_skills)
+      :disable_managed_skills,
+      :max_task_hours)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-securityagent.rb

@@ -55,7 +55,7 @@ module Aws::SecurityAgent
   autoload :EndpointProvider, 'aws-sdk-securityagent/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityagent/endpoints'
 
-  GEM_VERSION = '1.11.0'
+  GEM_VERSION = '1.13.0'
 
 end
 

data/sig/client.rbs

@@ -408,6 +408,7 @@ module Aws
         def agent_space_id: () -> ::String
         def code_remediation_strategy: () -> ("AUTOMATIC" | "DISABLED")
         def validation_mode: () -> ("DISABLED" | "SIMULATED")
+        def max_task_hours: () -> ::Float
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityAgent/Client.html#create_code_review-instance_method
       def create_code_review: (
@@ -420,7 +421,8 @@ module Aws
                                   log_stream: ::String?
                                 },
                                 ?code_remediation_strategy: ("AUTOMATIC" | "DISABLED"),
-                                ?validation_mode: ("DISABLED" | "SIMULATED")
+                                ?validation_mode: ("DISABLED" | "SIMULATED"),
+                                ?max_task_hours: ::Float
                               ) -> _CreateCodeReviewResponseSuccess
                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateCodeReviewResponseSuccess
 
@@ -512,7 +514,8 @@ module Aws
                             },
                             ?network_traffic_config: Params::network_traffic_config,
                             ?code_remediation_strategy: ("AUTOMATIC" | "DISABLED"),
-                            ?disable_managed_skills: Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
+                            ?disable_managed_skills: Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")],
+                            ?max_task_hours: ::Float
                           ) -> _CreatePentestResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreatePentestResponseSuccess
 
@@ -1248,7 +1251,9 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityAgent/Client.html#start_pentest_job-instance_method
       def start_pentest_job: (
                                agent_space_id: ::String,
-                               pentest_id: ::String
+                               pentest_id: ::String,
+                               ?job_type: ("FULL" | "REVALIDATION"),
+                               ?selected_finding_ids: Array[::String]
                              ) -> _StartPentestJobResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartPentestJobResponseSuccess
 
@@ -1368,6 +1373,7 @@ module Aws
         def agent_space_id: () -> ::String
         def code_remediation_strategy: () -> ("AUTOMATIC" | "DISABLED")
         def validation_mode: () -> ("DISABLED" | "SIMULATED")
+        def max_task_hours: () -> ::Float
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityAgent/Client.html#update_code_review-instance_method
       def update_code_review: (
@@ -1381,7 +1387,8 @@ module Aws
                                   log_stream: ::String?
                                 },
                                 ?code_remediation_strategy: ("AUTOMATIC" | "DISABLED"),
-                                ?validation_mode: ("DISABLED" | "SIMULATED")
+                                ?validation_mode: ("DISABLED" | "SIMULATED"),
+                                ?max_task_hours: ::Float
                               ) -> _UpdateCodeReviewResponseSuccess
                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateCodeReviewResponseSuccess
 
@@ -1489,7 +1496,8 @@ module Aws
                             },
                             ?network_traffic_config: Params::network_traffic_config,
                             ?code_remediation_strategy: ("AUTOMATIC" | "DISABLED"),
-                            ?disable_managed_skills: Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
+                            ?disable_managed_skills: Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")],
+                            ?max_task_hours: ::Float
                           ) -> _UpdatePentestResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdatePentestResponseSuccess
 

data/sig/params.rbs

@@ -46,6 +46,15 @@ module Aws
           provider_resource_id: ::String,
           branch: ::String?
         }
+      ]?,
+      trusted_ca_certificates: Array[
+        {
+          source: {
+            inline_pem: ::String?,
+            artifact_id: ::String?,
+            s3_location: ::String?
+          }
+        }
       ]?
     }
 

data/sig/types.rbs

@@ -102,6 +102,7 @@ module Aws::SecurityAgent
       attr_accessor documents: ::Array[Types::DocumentInfo]
       attr_accessor source_code: ::Array[Types::SourceCodeRepository]
       attr_accessor integrated_repositories: ::Array[Types::IntegratedRepository]
+      attr_accessor trusted_ca_certificates: ::Array[Types::TrustedCaCertificate]
       SENSITIVE: []
     end
 
@@ -419,6 +420,23 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class CaCertificateSource
+      attr_accessor inline_pem: ::String
+      attr_accessor artifact_id: ::String
+      attr_accessor s3_location: ::String
+      attr_accessor unknown: untyped
+      SENSITIVE: [:inline_pem]
+
+      class InlinePem < CaCertificateSource
+      end
+      class ArtifactId < CaCertificateSource
+      end
+      class S3Location < CaCertificateSource
+      end
+      class Unknown < CaCertificateSource
+      end
+    end
+
     class Category
       attr_accessor name: ::String
       attr_accessor is_primary: bool
@@ -462,6 +480,7 @@ module Aws::SecurityAgent
       attr_accessor log_config: Types::CloudWatchLog
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor validation_mode: ("DISABLED" | "SIMULATED")
+      attr_accessor max_task_hours: ::Float
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
       SENSITIVE: []
@@ -482,6 +501,7 @@ module Aws::SecurityAgent
       attr_accessor error_information: Types::ErrorInformation
       attr_accessor integrated_repositories: ::Array[Types::IntegratedRepository]
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
+      attr_accessor max_task_hours: ::Float
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
       SENSITIVE: []
@@ -625,6 +645,7 @@ module Aws::SecurityAgent
       attr_accessor log_config: Types::CloudWatchLog
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor validation_mode: ("DISABLED" | "SIMULATED")
+      attr_accessor max_task_hours: ::Float
       SENSITIVE: []
     end
 
@@ -639,6 +660,7 @@ module Aws::SecurityAgent
       attr_accessor agent_space_id: ::String
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor validation_mode: ("DISABLED" | "SIMULATED")
+      attr_accessor max_task_hours: ::Float
       SENSITIVE: []
     end
 
@@ -680,6 +702,7 @@ module Aws::SecurityAgent
       attr_accessor network_traffic_config: Types::NetworkTrafficConfig
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor disable_managed_skills: ::Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
+      attr_accessor max_task_hours: ::Float
       SENSITIVE: []
     end
 
@@ -1035,6 +1058,8 @@ module Aws::SecurityAgent
       attr_accessor code_locations: ::Array[Types::CodeLocation]
       attr_accessor verification_script: Types::VerificationScript
       attr_accessor alignment_rationale: ::String
+      attr_accessor revalidation_job_ids: ::Array[::String]
+      attr_accessor original_finding_id: ::String
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
       SENSITIVE: []
@@ -1713,6 +1738,7 @@ module Aws::SecurityAgent
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor clean_up_strategy: ("BEST_EFFORT_DELETE" | "RETAIN_ALL")
       attr_accessor disable_managed_skills: ::Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
+      attr_accessor max_task_hours: ::Float
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
       SENSITIVE: []
@@ -1739,9 +1765,13 @@ module Aws::SecurityAgent
       attr_accessor network_traffic_config: Types::NetworkTrafficConfig
       attr_accessor error_information: Types::ErrorInformation
       attr_accessor integrated_repositories: ::Array[Types::IntegratedRepository]
+      attr_accessor trusted_ca_certificates: ::Array[Types::TrustedCaCertificate]
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor clean_up_strategy: ("BEST_EFFORT_DELETE" | "RETAIN_ALL")
       attr_accessor disable_managed_skills: ::Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
+      attr_accessor max_task_hours: ::Float
+      attr_accessor job_type: ("FULL" | "REVALIDATION")
+      attr_accessor selected_finding_ids: ::Array[::String]
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
       SENSITIVE: []
@@ -1937,6 +1967,8 @@ module Aws::SecurityAgent
     class StartPentestJobInput
       attr_accessor agent_space_id: ::String
       attr_accessor pentest_id: ::String
+      attr_accessor job_type: ("FULL" | "REVALIDATION")
+      attr_accessor selected_finding_ids: ::Array[::String]
       SENSITIVE: []
     end
 
@@ -2201,6 +2233,11 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class TrustedCaCertificate
+      attr_accessor source: Types::CaCertificateSource
+      SENSITIVE: []
+    end
+
     class UntagResourceInput
       attr_accessor resource_arn: ::String
       attr_accessor tag_keys: ::Array[::String]
@@ -2253,6 +2290,7 @@ module Aws::SecurityAgent
       attr_accessor log_config: Types::CloudWatchLog
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor validation_mode: ("DISABLED" | "SIMULATED")
+      attr_accessor max_task_hours: ::Float
       SENSITIVE: []
     end
 
@@ -2267,6 +2305,7 @@ module Aws::SecurityAgent
       attr_accessor agent_space_id: ::String
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor validation_mode: ("DISABLED" | "SIMULATED")
+      attr_accessor max_task_hours: ::Float
       SENSITIVE: []
     end
 
@@ -2310,6 +2349,7 @@ module Aws::SecurityAgent
       attr_accessor network_traffic_config: Types::NetworkTrafficConfig
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor disable_managed_skills: ::Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
+      attr_accessor max_task_hours: ::Float
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityagent
 version: !ruby/object:Gem::Version
-  version: 1.11.0
+  version: 1.13.0
 platform: ruby
 authors:
 - Amazon Web Services