aws-sdk-securityagent 1.12.0 → 1.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c03189b02de83f4277708638aeb4323d3fbb5576d502887b4cc3ab985475971d
-  data.tar.gz: 481be2e542bd7325e15a8c8338d34d6b92073e6c07cd38e2bb7f4b0f467a160a
+  metadata.gz: e13f056c1ff17dc7448280b0d8e7d5bc4e38fb791be243efb083a26d15529a36
+  data.tar.gz: 5103eeb1120b982ae0b41ef1afbc455de77dce11d881c29d392a47c8c6f0442e
 SHA512:
-  metadata.gz: b5d41e9a4638e8582f84d2a9f23ab30bcd9fff656f24e30db608dff71f2eebef7ab7a1466aed2d3ec059e69493fb32451e89354f6664a3634dd9b4f2413bbc94
-  data.tar.gz: 84db496e5f34e8ebeac3ccb121a1bfc2a706c82f421b965fdf8b9e36449aeca0f41f28739df950abc181c9a1217e6c598e1f88be7bd9099ea86febd79daa6070
+  metadata.gz: b0be1223d552a621a3e727b45c5130aa8c756c2c191373c25b49f951dad7e2f2a1f740d401d528a2b82c15477fd8239536efd1f7cda78daa6f7b82e73aba9a33
+  data.tar.gz: 648b7c464b382b631d6a0ca57f1d9fbd64a29507909fbf49ce2cefa41a344602b0d023834bdbe7fc39ce11b62f03c2d9e192a6a17b1854c8d198f4ce53d603d7

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.13.0 (2026-08-24)
+------------------
+
+* Feature - Adding private and self-signed certificate configuration support for penetration tests
+
 1.12.0 (2026-08-13)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.12.0
+1.13.0

data/lib/aws-sdk-securityagent/client.rb

@@ -658,6 +658,10 @@ module Aws::SecurityAgent
     #   resp.deleted[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.deleted[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.deleted[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.deleted[0].assets.trusted_ca_certificates #=> Array
+    #   resp.deleted[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.deleted[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.deleted[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.deleted[0].exclude_risk_types #=> Array
     #   resp.deleted[0].exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.deleted[0].service_role #=> String
@@ -1038,6 +1042,10 @@ module Aws::SecurityAgent
     #   resp.code_reviews[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.code_reviews[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.code_reviews[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.code_reviews[0].assets.trusted_ca_certificates #=> Array
+    #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.code_reviews[0].service_role #=> String
     #   resp.code_reviews[0].log_config.log_group #=> String
     #   resp.code_reviews[0].log_config.log_stream #=> String
@@ -1273,6 +1281,10 @@ module Aws::SecurityAgent
     #   resp.pentest_jobs[0].integrated_repositories[0].integration_id #=> String
     #   resp.pentest_jobs[0].integrated_repositories[0].provider_resource_id #=> String
     #   resp.pentest_jobs[0].integrated_repositories[0].branch #=> String
+    #   resp.pentest_jobs[0].trusted_ca_certificates #=> Array
+    #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.pentest_jobs[0].code_remediation_strategy #=> String, one of "AUTOMATIC", "DISABLED"
     #   resp.pentest_jobs[0].clean_up_strategy #=> String, one of "BEST_EFFORT_DELETE", "RETAIN_ALL"
     #   resp.pentest_jobs[0].disable_managed_skills #=> Array
@@ -1343,6 +1355,10 @@ module Aws::SecurityAgent
     #   resp.pentests[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.pentests[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.pentests[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.pentests[0].assets.trusted_ca_certificates #=> Array
+    #   resp.pentests[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.pentests[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.pentests[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.pentests[0].exclude_risk_types #=> Array
     #   resp.pentests[0].exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.pentests[0].service_role #=> String
@@ -1632,6 +1648,10 @@ module Aws::SecurityAgent
     #   resp.threat_models[0].assets.integrated_repositories[0].integration_id #=> String
     #   resp.threat_models[0].assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.threat_models[0].assets.integrated_repositories[0].branch #=> String
+    #   resp.threat_models[0].assets.trusted_ca_certificates #=> Array
+    #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.threat_models[0].scope_docs #=> Array
     #   resp.threat_models[0].scope_docs[0].s3_location #=> String
     #   resp.threat_models[0].scope_docs[0].artifact_id #=> String
@@ -2009,6 +2029,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     service_role: "ServiceRole",
     #     log_config: {
@@ -2048,6 +2077,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.service_role #=> String
     #   resp.log_config.log_group #=> String
     #   resp.log_config.log_stream #=> String
@@ -2290,6 +2323,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     exclude_risk_types: ["CROSS_SITE_SCRIPTING"], # accepts CROSS_SITE_SCRIPTING, DEFAULT_CREDENTIALS, INSECURE_DIRECT_OBJECT_REFERENCE, PRIVILEGE_ESCALATION, SERVER_SIDE_TEMPLATE_INJECTION, COMMAND_INJECTION, CODE_INJECTION, SQL_INJECTION, ARBITRARY_FILE_UPLOAD, INSECURE_DESERIALIZATION, LOCAL_FILE_INCLUSION, INFORMATION_DISCLOSURE, PATH_TRAVERSAL, SERVER_SIDE_REQUEST_FORGERY, JSON_WEB_TOKEN_VULNERABILITIES, XML_EXTERNAL_ENTITY, FILE_DELETION, OTHER, GRAPHQL_VULNERABILITIES, BUSINESS_LOGIC_VULNERABILITIES, CRYPTOGRAPHIC_VULNERABILITIES, DENIAL_OF_SERVICE, FILE_ACCESS, FILE_CREATION, DATABASE_MODIFICATION, DATABASE_ACCESS, OUTBOUND_SERVICE_REQUEST, UNKNOWN
     #     service_role: "ServiceRole",
@@ -2350,6 +2392,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.exclude_risk_types #=> Array
     #   resp.exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.service_role #=> String
@@ -2784,6 +2830,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     scope_docs: [
     #       {
@@ -2836,6 +2891,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.scope_docs #=> Array
     #   resp.scope_docs[0].s3_location #=> String
     #   resp.scope_docs[0].artifact_id #=> String
@@ -5190,6 +5249,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     service_role: "ServiceRole",
     #     log_config: {
@@ -5229,6 +5297,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.service_role #=> String
     #   resp.log_config.log_group #=> String
     #   resp.log_config.log_stream #=> String
@@ -5481,6 +5553,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     exclude_risk_types: ["CROSS_SITE_SCRIPTING"], # accepts CROSS_SITE_SCRIPTING, DEFAULT_CREDENTIALS, INSECURE_DIRECT_OBJECT_REFERENCE, PRIVILEGE_ESCALATION, SERVER_SIDE_TEMPLATE_INJECTION, COMMAND_INJECTION, CODE_INJECTION, SQL_INJECTION, ARBITRARY_FILE_UPLOAD, INSECURE_DESERIALIZATION, LOCAL_FILE_INCLUSION, INFORMATION_DISCLOSURE, PATH_TRAVERSAL, SERVER_SIDE_REQUEST_FORGERY, JSON_WEB_TOKEN_VULNERABILITIES, XML_EXTERNAL_ENTITY, FILE_DELETION, OTHER, GRAPHQL_VULNERABILITIES, BUSINESS_LOGIC_VULNERABILITIES, CRYPTOGRAPHIC_VULNERABILITIES, DENIAL_OF_SERVICE, FILE_ACCESS, FILE_CREATION, DATABASE_MODIFICATION, DATABASE_ACCESS, OUTBOUND_SERVICE_REQUEST, UNKNOWN
     #     service_role: "ServiceRole",
@@ -5541,6 +5622,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.exclude_risk_types #=> Array
     #   resp.exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.service_role #=> String
@@ -5942,6 +6027,15 @@ module Aws::SecurityAgent
     #           branch: "String",
     #         },
     #       ],
+    #       trusted_ca_certificates: [
+    #         {
+    #           source: { # required
+    #             inline_pem: "CaCertificatePem",
+    #             artifact_id: "String",
+    #             s3_location: "String",
+    #           },
+    #         },
+    #       ],
     #     },
     #     scope_docs: [
     #       {
@@ -5988,6 +6082,10 @@ module Aws::SecurityAgent
     #   resp.assets.integrated_repositories[0].integration_id #=> String
     #   resp.assets.integrated_repositories[0].provider_resource_id #=> String
     #   resp.assets.integrated_repositories[0].branch #=> String
+    #   resp.assets.trusted_ca_certificates #=> Array
+    #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
+    #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
     #   resp.scope_docs #=> Array
     #   resp.scope_docs[0].s3_location #=> String
     #   resp.scope_docs[0].artifact_id #=> String
@@ -6067,7 +6165,7 @@ module Aws::SecurityAgent
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityagent'
-      context[:gem_version] = '1.12.0'
+      context[:gem_version] = '1.13.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityagent/client_api.rb

@@ -101,6 +101,8 @@ module Aws::SecurityAgent
     BitbucketWorkspace = Shapes::StringShape.new(name: 'BitbucketWorkspace')
     Blob = Shapes::BlobShape.new(name: 'Blob')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
+    CaCertificatePem = Shapes::StringShape.new(name: 'CaCertificatePem')
+    CaCertificateSource = Shapes::UnionShape.new(name: 'CaCertificateSource')
     Category = Shapes::StructureShape.new(name: 'Category')
     CategoryList = Shapes::ListShape.new(name: 'CategoryList')
     CertificateChain = Shapes::StringShape.new(name: 'CertificateChain')
@@ -470,6 +472,8 @@ module Aws::SecurityAgent
     ThreatSummary = Shapes::StructureShape.new(name: 'ThreatSummary')
     ThreatSummaryList = Shapes::ListShape.new(name: 'ThreatSummaryList')
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
+    TrustedCaCertificate = Shapes::StructureShape.new(name: 'TrustedCaCertificate')
+    TrustedCaCertificateList = Shapes::ListShape.new(name: 'TrustedCaCertificateList')
     UntagResourceInput = Shapes::StructureShape.new(name: 'UntagResourceInput')
     UntagResourceOutput = Shapes::StructureShape.new(name: 'UntagResourceOutput')
     UpdateAgentSpaceInput = Shapes::StructureShape.new(name: 'UpdateAgentSpaceInput')
@@ -602,6 +606,7 @@ module Aws::SecurityAgent
     Assets.add_member(:documents, Shapes::ShapeRef.new(shape: DocumentList, location_name: "documents"))
     Assets.add_member(:source_code, Shapes::ShapeRef.new(shape: SourceCodeRepositoryList, location_name: "sourceCode"))
     Assets.add_member(:integrated_repositories, Shapes::ShapeRef.new(shape: IntegratedRepositoryList, location_name: "integratedRepositories"))
+    Assets.add_member(:trusted_ca_certificates, Shapes::ShapeRef.new(shape: TrustedCaCertificateList, location_name: "trustedCaCertificates"))
     Assets.struct_class = Types::Assets
 
     Authentication.add_member(:provider_type, Shapes::ShapeRef.new(shape: AuthenticationProviderType, location_name: "providerType"))
@@ -824,6 +829,16 @@ module Aws::SecurityAgent
     BitbucketResourceCapabilities.add_member(:remediate_code, Shapes::ShapeRef.new(shape: Boolean, location_name: "remediateCode"))
     BitbucketResourceCapabilities.struct_class = Types::BitbucketResourceCapabilities
 
+    CaCertificateSource.add_member(:inline_pem, Shapes::ShapeRef.new(shape: CaCertificatePem, location_name: "inlinePem"))
+    CaCertificateSource.add_member(:artifact_id, Shapes::ShapeRef.new(shape: String, location_name: "artifactId"))
+    CaCertificateSource.add_member(:s3_location, Shapes::ShapeRef.new(shape: String, location_name: "s3Location"))
+    CaCertificateSource.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    CaCertificateSource.add_member_subclass(:inline_pem, Types::CaCertificateSource::InlinePem)
+    CaCertificateSource.add_member_subclass(:artifact_id, Types::CaCertificateSource::ArtifactId)
+    CaCertificateSource.add_member_subclass(:s3_location, Types::CaCertificateSource::S3Location)
+    CaCertificateSource.add_member_subclass(:unknown, Types::CaCertificateSource::Unknown)
+    CaCertificateSource.struct_class = Types::CaCertificateSource
+
     Category.add_member(:name, Shapes::ShapeRef.new(shape: String, location_name: "name"))
     Category.add_member(:is_primary, Shapes::ShapeRef.new(shape: Boolean, location_name: "isPrimary"))
     Category.struct_class = Types::Category
@@ -1882,6 +1897,7 @@ module Aws::SecurityAgent
     PentestJob.add_member(:network_traffic_config, Shapes::ShapeRef.new(shape: NetworkTrafficConfig, location_name: "networkTrafficConfig"))
     PentestJob.add_member(:error_information, Shapes::ShapeRef.new(shape: ErrorInformation, location_name: "errorInformation"))
     PentestJob.add_member(:integrated_repositories, Shapes::ShapeRef.new(shape: IntegratedRepositoryList, location_name: "integratedRepositories"))
+    PentestJob.add_member(:trusted_ca_certificates, Shapes::ShapeRef.new(shape: TrustedCaCertificateList, location_name: "trustedCaCertificates"))
     PentestJob.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     PentestJob.add_member(:clean_up_strategy, Shapes::ShapeRef.new(shape: CleanUpStrategy, location_name: "cleanUpStrategy"))
     PentestJob.add_member(:disable_managed_skills, Shapes::ShapeRef.new(shape: SkillTypeList, location_name: "disableManagedSkills"))
@@ -2330,6 +2346,11 @@ module Aws::SecurityAgent
     ThrottlingException.add_member(:quota_code, Shapes::ShapeRef.new(shape: String, location_name: "quotaCode"))
     ThrottlingException.struct_class = Types::ThrottlingException
 
+    TrustedCaCertificate.add_member(:source, Shapes::ShapeRef.new(shape: CaCertificateSource, required: true, location_name: "source"))
+    TrustedCaCertificate.struct_class = Types::TrustedCaCertificate
+
+    TrustedCaCertificateList.member = Shapes::ShapeRef.new(shape: TrustedCaCertificate)
+
     UntagResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location: "uri", location_name: "resourceArn"))
     UntagResourceInput.add_member(:tag_keys, Shapes::ShapeRef.new(shape: TagKeyList, required: true, location: "querystring", location_name: "tagKeys"))
     UntagResourceInput.struct_class = Types::UntagResourceInput

data/lib/aws-sdk-securityagent/types.rb

@@ -363,6 +363,13 @@ module Aws::SecurityAgent
     #   The list of integrated repositories associated with the pentest.
     #   @return [Array<Types::IntegratedRepository>]
     #
+    # @!attribute [rw] trusted_ca_certificates
+    #   The trust anchors used to validate target endpoint TLS certificates.
+    #   Provide these for endpoints served by a private or internal
+    #   certificate authority (CA), an intermediate CA, or a self-signed
+    #   certificate.
+    #   @return [Array<Types::TrustedCaCertificate>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/Assets AWS API Documentation
     #
     class Assets < Struct.new(
@@ -370,8 +377,9 @@ module Aws::SecurityAgent
       :actors,
       :documents,
       :source_code,
-      :integrated_repositories)
-      SENSITIVE = []
+      :integrated_repositories,
+      :trusted_ca_certificates)
+      SENSITIVE = [:trusted_ca_certificates]
       include Aws::Structure
     end
 
@@ -1416,6 +1424,42 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # The source of a trusted CA certificate. Exactly one member must be
+    # set.
+    #
+    # @note CaCertificateSource is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note CaCertificateSource is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of CaCertificateSource corresponding to the set member.
+    #
+    # @!attribute [rw] inline_pem
+    #   A PEM-encoded X.509 certificate supplied inline.
+    #   @return [String]
+    #
+    # @!attribute [rw] artifact_id
+    #   The artifact ID of an uploaded certificate file.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_location
+    #   The Amazon S3 location URI of a customer-staged certificate.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CaCertificateSource AWS API Documentation
+    #
+    class CaCertificateSource < Struct.new(
+      :inline_pem,
+      :artifact_id,
+      :s3_location,
+      :unknown)
+      SENSITIVE = [:inline_pem]
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class InlinePem < CaCertificateSource; end
+      class ArtifactId < CaCertificateSource; end
+      class S3Location < CaCertificateSource; end
+      class Unknown < CaCertificateSource; end
+    end
+
     # Represents a category assigned to a security testing task.
     #
     # @!attribute [rw] name
@@ -6288,6 +6332,11 @@ module Aws::SecurityAgent
     #   The list of integrated repositories associated with the pentest job.
     #   @return [Array<Types::IntegratedRepository>]
     #
+    # @!attribute [rw] trusted_ca_certificates
+    #   The trust anchors used to validate target endpoint TLS certificates
+    #   during the pentest job.
+    #   @return [Array<Types::TrustedCaCertificate>]
+    #
     # @!attribute [rw] code_remediation_strategy
     #   The code remediation strategy for the pentest job.
     #   @return [String]
@@ -6347,6 +6396,7 @@ module Aws::SecurityAgent
       :network_traffic_config,
       :error_information,
       :integrated_repositories,
+      :trusted_ca_certificates,
       :code_remediation_strategy,
       :clean_up_strategy,
       :disable_managed_skills,
@@ -6355,7 +6405,7 @@ module Aws::SecurityAgent
       :selected_finding_ids,
       :created_at,
       :updated_at)
-      SENSITIVE = []
+      SENSITIVE = [:trusted_ca_certificates]
       include Aws::Structure
     end
 
@@ -8059,6 +8109,21 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # A trust anchor used when validating a target endpoint's TLS
+    # certificate.
+    #
+    # @!attribute [rw] source
+    #   The source that AWS Security Agent reads the certificate from.
+    #   @return [Types::CaCertificateSource]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/TrustedCaCertificate AWS API Documentation
+    #
+    class TrustedCaCertificate < Struct.new(
+      :source)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Input for UntagResource operation.
     #
     # @!attribute [rw] resource_arn

data/lib/aws-sdk-securityagent.rb

@@ -55,7 +55,7 @@ module Aws::SecurityAgent
   autoload :EndpointProvider, 'aws-sdk-securityagent/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityagent/endpoints'
 
-  GEM_VERSION = '1.12.0'
+  GEM_VERSION = '1.13.0'
 
 end
 

data/sig/params.rbs

@@ -46,6 +46,15 @@ module Aws
           provider_resource_id: ::String,
           branch: ::String?
         }
+      ]?,
+      trusted_ca_certificates: Array[
+        {
+          source: {
+            inline_pem: ::String?,
+            artifact_id: ::String?,
+            s3_location: ::String?
+          }
+        }
       ]?
     }
 

data/sig/types.rbs

@@ -102,6 +102,7 @@ module Aws::SecurityAgent
       attr_accessor documents: ::Array[Types::DocumentInfo]
       attr_accessor source_code: ::Array[Types::SourceCodeRepository]
       attr_accessor integrated_repositories: ::Array[Types::IntegratedRepository]
+      attr_accessor trusted_ca_certificates: ::Array[Types::TrustedCaCertificate]
       SENSITIVE: []
     end
 
@@ -419,6 +420,23 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class CaCertificateSource
+      attr_accessor inline_pem: ::String
+      attr_accessor artifact_id: ::String
+      attr_accessor s3_location: ::String
+      attr_accessor unknown: untyped
+      SENSITIVE: [:inline_pem]
+
+      class InlinePem < CaCertificateSource
+      end
+      class ArtifactId < CaCertificateSource
+      end
+      class S3Location < CaCertificateSource
+      end
+      class Unknown < CaCertificateSource
+      end
+    end
+
     class Category
       attr_accessor name: ::String
       attr_accessor is_primary: bool
@@ -1747,6 +1765,7 @@ module Aws::SecurityAgent
       attr_accessor network_traffic_config: Types::NetworkTrafficConfig
       attr_accessor error_information: Types::ErrorInformation
       attr_accessor integrated_repositories: ::Array[Types::IntegratedRepository]
+      attr_accessor trusted_ca_certificates: ::Array[Types::TrustedCaCertificate]
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor clean_up_strategy: ("BEST_EFFORT_DELETE" | "RETAIN_ALL")
       attr_accessor disable_managed_skills: ::Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
@@ -2214,6 +2233,11 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class TrustedCaCertificate
+      attr_accessor source: Types::CaCertificateSource
+      SENSITIVE: []
+    end
+
     class UntagResourceInput
       attr_accessor resource_arn: ::String
       attr_accessor tag_keys: ::Array[::String]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityagent
 version: !ruby/object:Gem::Version
-  version: 1.12.0
+  version: 1.13.0
 platform: ruby
 authors:
 - Amazon Web Services