aws-sdk-securityagent 1.17.0 → 1.18.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eae54b3ba11b0f4836327afe62abb61f3d33265830f4bb7bc7cf3fac15a0214a
-  data.tar.gz: 106cf10c9d45280f1bbd077c6404473fe8da4f1b5d5c70d988b195f20a13a040
+  metadata.gz: d5921d64f45ea422622f10d7df3c3328d92b4a338859a55594aaef480b825665
+  data.tar.gz: 16cd0b76519d1ec78b4f106498099b428d94415a609a68d9e42701ee598e859f
 SHA512:
-  metadata.gz: 05c7848d97e76e9f73cd3b888bb639395544d063caf72d8eb35397dae8bcacd17267030620b0a4f30fad1b338e0ce63de58ee0155289e8ee28c7caa8bbbddcd3
-  data.tar.gz: dd495fb1528cff93bc75bcfef765e293198d25a0f0d6bbddbda43364439b8bc909b4f76f1286b7dcaec50837adeb0dd4eca09c78ddfad2067b45c60d47809e5c
+  metadata.gz: 0d0b9ad3ceb3e8d3d0226a374be1b7de27da0e6973191f1e329e5a82becec35d8d1f5345957b4a9a6abc6e8527a0062b814c544a87fdf22ad941590852cec70a
+  data.tar.gz: af694a09301c5fd7d23dae1110a056c0a37f02952b8eabdc7a7f2e0ece0a0588cf87fdbe7f4010aa9ef9988ac2d160c02f5d54c45846a19c90310923c036b429

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.18.0 (2026-09-28)
+------------------
+
+* Feature - Run automated penetration tests directly from your CI-CD pipeline to scan code changes before they ship, gating deployments on the findings
+
 1.17.0 (2026-09-25)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.17.0
+1.18.0

data/lib/aws-sdk-securityagent/client.rb

@@ -702,6 +702,7 @@ module Aws::SecurityAgent
     #   resp.deleted[0].report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.deleted[0].report_filters.annotation_notes #=> Boolean
     #   resp.deleted[0].report_filters.compliance_report #=> Boolean
+    #   resp.deleted[0].cicd_configuration.enabled #=> Boolean
     #   resp.deleted[0].created_at #=> Time
     #   resp.deleted[0].updated_at #=> Time
     #   resp.failed #=> Array
@@ -1330,13 +1331,23 @@ module Aws::SecurityAgent
     #   resp.pentest_jobs[0].disable_managed_skills #=> Array
     #   resp.pentest_jobs[0].disable_managed_skills[0] #=> String, one of "FINDING_PERSONALIZATION", "LOGIN_OPTIMIZATION"
     #   resp.pentest_jobs[0].max_task_hours #=> Float
-    #   resp.pentest_jobs[0].job_type #=> String, one of "FULL", "REVALIDATION"
+    #   resp.pentest_jobs[0].job_type #=> String, one of "FULL", "REVALIDATION", "CICD"
     #   resp.pentest_jobs[0].selected_finding_ids #=> Array
     #   resp.pentest_jobs[0].selected_finding_ids[0] #=> String
     #   resp.pentest_jobs[0].report_destination.integration_id #=> String
     #   resp.pentest_jobs[0].report_destination.container_id #=> String
     #   resp.pentest_jobs[0].report_destination.parent_id #=> String
     #   resp.pentest_jobs[0].report_destination.document_id #=> String
+    #   resp.pentest_jobs[0].report_url #=> String
+    #   resp.pentest_jobs[0].scope_result.decision #=> String, one of "IN_SCOPE", "SCOPED_OUT", "SCOPE_CONFLICT"
+    #   resp.pentest_jobs[0].scope_result.reason #=> String
+    #   resp.pentest_jobs[0].scope_changes #=> Array
+    #   resp.pentest_jobs[0].scope_changes[0].integration_id #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].provider_resource_id #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].base_commit_sha #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].head_commit_sha #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].trigger_run_id #=> String
+    #   resp.pentest_jobs[0].cicd_configuration.enabled #=> Boolean
     #   resp.pentest_jobs[0].created_at #=> Time
     #   resp.pentest_jobs[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -1443,6 +1454,7 @@ module Aws::SecurityAgent
     #   resp.pentests[0].report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.pentests[0].report_filters.annotation_notes #=> Boolean
     #   resp.pentests[0].report_filters.compliance_report #=> Boolean
+    #   resp.pentests[0].cicd_configuration.enabled #=> Boolean
     #   resp.pentests[0].created_at #=> Time
     #   resp.pentests[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -2385,6 +2397,9 @@ module Aws::SecurityAgent
     # @option params [Types::ReportFilters] :report_filters
     #   The report-generation filters applied when the report is exported.
     #
+    # @option params [Types::CiCdConfiguration] :cicd_configuration
+    #   The CI/CD pentesting configuration to apply to the pentest.
+    #
     # @return [Types::CreatePentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreatePentestOutput#pentest_id #pentest_id} => String
@@ -2398,6 +2413,7 @@ module Aws::SecurityAgent
     #   * {Types::CreatePentestOutput#agent_space_id #agent_space_id} => String
     #   * {Types::CreatePentestOutput#report_destination #report_destination} => Types::ReportDestination
     #   * {Types::CreatePentestOutput#report_filters #report_filters} => Types::ReportFilters
+    #   * {Types::CreatePentestOutput#cicd_configuration #cicd_configuration} => Types::CiCdConfiguration
     #
     # @example Request syntax with placeholder values
     #
@@ -2500,6 +2516,9 @@ module Aws::SecurityAgent
     #       annotation_notes: false,
     #       compliance_report: false,
     #     },
+    #     cicd_configuration: {
+    #       enabled: false,
+    #     },
     #   })
     #
     # @example Response structure
@@ -2558,6 +2577,7 @@ module Aws::SecurityAgent
     #   resp.report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.report_filters.annotation_notes #=> Boolean
     #   resp.report_filters.compliance_report #=> Boolean
+    #   resp.cicd_configuration.enabled #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreatePentest AWS API Documentation
     #
@@ -4397,6 +4417,10 @@ module Aws::SecurityAgent
     #   request. For subsequent calls, use the nextToken value returned from
     #   the previous request.
     #
+    # @option params [String] :job_type
+    #   Filters the returned pentest jobs to only those of the specified job
+    #   type.
+    #
     # @return [Types::ListPentestJobsForPentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ListPentestJobsForPentestOutput#pentest_job_summaries #pentest_job_summaries} => Array<Types::PentestJobSummary>
@@ -4411,6 +4435,7 @@ module Aws::SecurityAgent
     #     pentest_id: "String", # required
     #     agent_space_id: "String", # required
     #     next_token: "NextToken",
+    #     job_type: "FULL", # accepts FULL, REVALIDATION, CICD
     #   })
     #
     # @example Response structure
@@ -4422,6 +4447,8 @@ module Aws::SecurityAgent
     #   resp.pentest_job_summaries[0].status #=> String, one of "IN_PROGRESS", "STOPPING", "STOPPED", "FAILED", "COMPLETED"
     #   resp.pentest_job_summaries[0].created_at #=> Time
     #   resp.pentest_job_summaries[0].updated_at #=> Time
+    #   resp.pentest_job_summaries[0].job_type #=> String, one of "FULL", "REVALIDATION", "CICD"
+    #   resp.pentest_job_summaries[0].report_url #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ListPentestJobsForPentest AWS API Documentation
@@ -5013,15 +5040,21 @@ module Aws::SecurityAgent
     #   The unique identifier of the pentest to start a job for.
     #
     # @option params [String] :job_type
-    #   The type of pentest job to start. Valid values are FULL and
-    #   REVALIDATION. When set to REVALIDATION, the selectedFindingIds
-    #   parameter is required.
+    #   The type of pentest job to start. Valid values are FULL, REVALIDATION,
+    #   and CICD. When set to REVALIDATION, the selectedFindingIds parameter
+    #   is required. When set to CICD, the scopeChanges parameter defines the
+    #   code changes to test.
     #
     # @option params [Array<String>] :selected_finding_ids
     #   The list of finding identifiers to revalidate. Required when jobType
     #   is REVALIDATION. Each finding must belong to the same agent space and
     #   pentest.
     #
+    # @option params [Array<Types::ScopeChange>] :scope_changes
+    #   The code changes that define the scope of a CI/CD pentest job. Provide
+    #   this when starting a job with jobType CICD to test only the changes in
+    #   the current pipeline run.
+    #
     # @return [Types::StartPentestJobOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::StartPentestJobOutput#title #title} => String
@@ -5037,8 +5070,17 @@ module Aws::SecurityAgent
     #   resp = client.start_pentest_job({
     #     agent_space_id: "String", # required
     #     pentest_id: "String", # required
-    #     job_type: "FULL", # accepts FULL, REVALIDATION
+    #     job_type: "FULL", # accepts FULL, REVALIDATION, CICD
     #     selected_finding_ids: ["String"],
+    #     scope_changes: [
+    #       {
+    #         integration_id: "String", # required
+    #         provider_resource_id: "String", # required
+    #         base_commit_sha: "String",
+    #         head_commit_sha: "String", # required
+    #         trigger_run_id: "String",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -5762,6 +5804,9 @@ module Aws::SecurityAgent
     # @option params [Types::ReportFilters] :report_filters
     #   The report-generation filters applied when the report is exported.
     #
+    # @option params [Types::CiCdConfiguration] :cicd_configuration
+    #   The updated CI/CD pentesting configuration to apply to the pentest.
+    #
     # @return [Types::UpdatePentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdatePentestOutput#pentest_id #pentest_id} => String
@@ -5775,6 +5820,7 @@ module Aws::SecurityAgent
     #   * {Types::UpdatePentestOutput#agent_space_id #agent_space_id} => String
     #   * {Types::UpdatePentestOutput#report_destination #report_destination} => Types::ReportDestination
     #   * {Types::UpdatePentestOutput#report_filters #report_filters} => Types::ReportFilters
+    #   * {Types::UpdatePentestOutput#cicd_configuration #cicd_configuration} => Types::CiCdConfiguration
     #
     # @example Request syntax with placeholder values
     #
@@ -5878,6 +5924,9 @@ module Aws::SecurityAgent
     #       annotation_notes: false,
     #       compliance_report: false,
     #     },
+    #     cicd_configuration: {
+    #       enabled: false,
+    #     },
     #   })
     #
     # @example Response structure
@@ -5936,6 +5985,7 @@ module Aws::SecurityAgent
     #   resp.report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.report_filters.annotation_notes #=> Boolean
     #   resp.report_filters.compliance_report #=> Boolean
+    #   resp.cicd_configuration.enabled #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdatePentest AWS API Documentation
     #
@@ -6484,7 +6534,7 @@ module Aws::SecurityAgent
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityagent'
-      context[:gem_version] = '1.17.0'
+      context[:gem_version] = '1.18.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityagent/client_api.rb

@@ -108,6 +108,7 @@ module Aws::SecurityAgent
     Category = Shapes::StructureShape.new(name: 'Category')
     CategoryList = Shapes::ListShape.new(name: 'CategoryList')
     CertificateChain = Shapes::StringShape.new(name: 'CertificateChain')
+    CiCdConfiguration = Shapes::StructureShape.new(name: 'CiCdConfiguration')
     CleanUpStrategy = Shapes::StringShape.new(name: 'CleanUpStrategy')
     CloudWatchLog = Shapes::StructureShape.new(name: 'CloudWatchLog')
     CodeLocation = Shapes::StructureShape.new(name: 'CodeLocation')
@@ -383,6 +384,10 @@ module Aws::SecurityAgent
     RoleArn = Shapes::StringShape.new(name: 'RoleArn')
     S3BucketArn = Shapes::StringShape.new(name: 'S3BucketArn')
     S3BucketArns = Shapes::ListShape.new(name: 'S3BucketArns')
+    ScopeChange = Shapes::StructureShape.new(name: 'ScopeChange')
+    ScopeChangeList = Shapes::ListShape.new(name: 'ScopeChangeList')
+    ScopeDecision = Shapes::StringShape.new(name: 'ScopeDecision')
+    ScopeResult = Shapes::StructureShape.new(name: 'ScopeResult')
     SecretArn = Shapes::StringShape.new(name: 'SecretArn')
     SecretArns = Shapes::ListShape.new(name: 'SecretArns')
     SecurityGroupArn = Shapes::StringShape.new(name: 'SecurityGroupArn')
@@ -868,6 +873,9 @@ module Aws::SecurityAgent
 
     CategoryList.member = Shapes::ShapeRef.new(shape: Category)
 
+    CiCdConfiguration.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "enabled"))
+    CiCdConfiguration.struct_class = Types::CiCdConfiguration
+
     CloudWatchLog.add_member(:log_group, Shapes::ShapeRef.new(shape: String, location_name: "logGroup"))
     CloudWatchLog.add_member(:log_stream, Shapes::ShapeRef.new(shape: String, location_name: "logStream"))
     CloudWatchLog.struct_class = Types::CloudWatchLog
@@ -1107,6 +1115,7 @@ module Aws::SecurityAgent
     CreatePentestInput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     CreatePentestInput.add_member(:report_destination, Shapes::ShapeRef.new(shape: ReportDestination, location_name: "reportDestination"))
     CreatePentestInput.add_member(:report_filters, Shapes::ShapeRef.new(shape: ReportFilters, location_name: "reportFilters"))
+    CreatePentestInput.add_member(:cicd_configuration, Shapes::ShapeRef.new(shape: CiCdConfiguration, location_name: "cicdConfiguration"))
     CreatePentestInput.struct_class = Types::CreatePentestInput
 
     CreatePentestOutput.add_member(:pentest_id, Shapes::ShapeRef.new(shape: String, location_name: "pentestId"))
@@ -1120,6 +1129,7 @@ module Aws::SecurityAgent
     CreatePentestOutput.add_member(:agent_space_id, Shapes::ShapeRef.new(shape: String, location_name: "agentSpaceId"))
     CreatePentestOutput.add_member(:report_destination, Shapes::ShapeRef.new(shape: ReportDestination, location_name: "reportDestination"))
     CreatePentestOutput.add_member(:report_filters, Shapes::ShapeRef.new(shape: ReportFilters, location_name: "reportFilters"))
+    CreatePentestOutput.add_member(:cicd_configuration, Shapes::ShapeRef.new(shape: CiCdConfiguration, location_name: "cicdConfiguration"))
     CreatePentestOutput.struct_class = Types::CreatePentestOutput
 
     CreatePrivateConnectionInput.add_member(:private_connection_name, Shapes::ShapeRef.new(shape: PrivateConnectionName, required: true, location_name: "privateConnectionName"))
@@ -1767,6 +1777,7 @@ module Aws::SecurityAgent
     ListPentestJobsForPentestInput.add_member(:pentest_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "pentestId"))
     ListPentestJobsForPentestInput.add_member(:agent_space_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "agentSpaceId"))
     ListPentestJobsForPentestInput.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
+    ListPentestJobsForPentestInput.add_member(:job_type, Shapes::ShapeRef.new(shape: JobType, location_name: "jobType"))
     ListPentestJobsForPentestInput.struct_class = Types::ListPentestJobsForPentestInput
 
     ListPentestJobsForPentestOutput.add_member(:pentest_job_summaries, Shapes::ShapeRef.new(shape: PentestJobSummaryList, location_name: "pentestJobSummaries"))
@@ -1923,6 +1934,7 @@ module Aws::SecurityAgent
     Pentest.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     Pentest.add_member(:report_destination, Shapes::ShapeRef.new(shape: ReportDestination, location_name: "reportDestination"))
     Pentest.add_member(:report_filters, Shapes::ShapeRef.new(shape: ReportFilters, location_name: "reportFilters"))
+    Pentest.add_member(:cicd_configuration, Shapes::ShapeRef.new(shape: CiCdConfiguration, location_name: "cicdConfiguration"))
     Pentest.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     Pentest.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
     Pentest.struct_class = Types::Pentest
@@ -1957,6 +1969,10 @@ module Aws::SecurityAgent
     PentestJob.add_member(:job_type, Shapes::ShapeRef.new(shape: JobType, location_name: "jobType"))
     PentestJob.add_member(:selected_finding_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "selectedFindingIds"))
     PentestJob.add_member(:report_destination, Shapes::ShapeRef.new(shape: ReportDestination, location_name: "reportDestination"))
+    PentestJob.add_member(:report_url, Shapes::ShapeRef.new(shape: String, location_name: "reportUrl"))
+    PentestJob.add_member(:scope_result, Shapes::ShapeRef.new(shape: ScopeResult, location_name: "scopeResult"))
+    PentestJob.add_member(:scope_changes, Shapes::ShapeRef.new(shape: ScopeChangeList, location_name: "scopeChanges"))
+    PentestJob.add_member(:cicd_configuration, Shapes::ShapeRef.new(shape: CiCdConfiguration, location_name: "cicdConfiguration"))
     PentestJob.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     PentestJob.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
     PentestJob.struct_class = Types::PentestJob
@@ -1971,6 +1987,8 @@ module Aws::SecurityAgent
     PentestJobSummary.add_member(:status, Shapes::ShapeRef.new(shape: JobStatus, location_name: "status"))
     PentestJobSummary.add_member(:created_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "createdAt"))
     PentestJobSummary.add_member(:updated_at, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "updatedAt"))
+    PentestJobSummary.add_member(:job_type, Shapes::ShapeRef.new(shape: JobType, location_name: "jobType"))
+    PentestJobSummary.add_member(:report_url, Shapes::ShapeRef.new(shape: String, location_name: "reportUrl"))
     PentestJobSummary.struct_class = Types::PentestJobSummary
 
     PentestJobSummaryList.member = Shapes::ShapeRef.new(shape: PentestJobSummary)
@@ -2068,6 +2086,19 @@ module Aws::SecurityAgent
 
     S3BucketArns.member = Shapes::ShapeRef.new(shape: S3BucketArn)
 
+    ScopeChange.add_member(:integration_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "integrationId"))
+    ScopeChange.add_member(:provider_resource_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "providerResourceId"))
+    ScopeChange.add_member(:base_commit_sha, Shapes::ShapeRef.new(shape: String, location_name: "baseCommitSha"))
+    ScopeChange.add_member(:head_commit_sha, Shapes::ShapeRef.new(shape: String, required: true, location_name: "headCommitSha"))
+    ScopeChange.add_member(:trigger_run_id, Shapes::ShapeRef.new(shape: String, location_name: "triggerRunId"))
+    ScopeChange.struct_class = Types::ScopeChange
+
+    ScopeChangeList.member = Shapes::ShapeRef.new(shape: ScopeChange)
+
+    ScopeResult.add_member(:decision, Shapes::ShapeRef.new(shape: ScopeDecision, required: true, location_name: "decision"))
+    ScopeResult.add_member(:reason, Shapes::ShapeRef.new(shape: String, required: true, location_name: "reason"))
+    ScopeResult.struct_class = Types::ScopeResult
+
     SecretArns.member = Shapes::ShapeRef.new(shape: SecretArn)
 
     SecurityGroupArns.member = Shapes::ShapeRef.new(shape: SecurityGroupArn)
@@ -2153,6 +2184,7 @@ module Aws::SecurityAgent
     StartPentestJobInput.add_member(:pentest_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "pentestId"))
     StartPentestJobInput.add_member(:job_type, Shapes::ShapeRef.new(shape: JobType, location_name: "jobType"))
     StartPentestJobInput.add_member(:selected_finding_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "selectedFindingIds"))
+    StartPentestJobInput.add_member(:scope_changes, Shapes::ShapeRef.new(shape: ScopeChangeList, location_name: "scopeChanges"))
     StartPentestJobInput.struct_class = Types::StartPentestJobInput
 
     StartPentestJobOutput.add_member(:title, Shapes::ShapeRef.new(shape: String, location_name: "title"))
@@ -2520,6 +2552,7 @@ module Aws::SecurityAgent
     UpdatePentestInput.add_member(:max_task_hours, Shapes::ShapeRef.new(shape: Double, location_name: "maxTaskHours"))
     UpdatePentestInput.add_member(:report_destination, Shapes::ShapeRef.new(shape: ReportDestination, location_name: "reportDestination"))
     UpdatePentestInput.add_member(:report_filters, Shapes::ShapeRef.new(shape: ReportFilters, location_name: "reportFilters"))
+    UpdatePentestInput.add_member(:cicd_configuration, Shapes::ShapeRef.new(shape: CiCdConfiguration, location_name: "cicdConfiguration"))
     UpdatePentestInput.struct_class = Types::UpdatePentestInput
 
     UpdatePentestOutput.add_member(:pentest_id, Shapes::ShapeRef.new(shape: String, location_name: "pentestId"))
@@ -2533,6 +2566,7 @@ module Aws::SecurityAgent
     UpdatePentestOutput.add_member(:agent_space_id, Shapes::ShapeRef.new(shape: String, location_name: "agentSpaceId"))
     UpdatePentestOutput.add_member(:report_destination, Shapes::ShapeRef.new(shape: ReportDestination, location_name: "reportDestination"))
     UpdatePentestOutput.add_member(:report_filters, Shapes::ShapeRef.new(shape: ReportFilters, location_name: "reportFilters"))
+    UpdatePentestOutput.add_member(:cicd_configuration, Shapes::ShapeRef.new(shape: CiCdConfiguration, location_name: "cicdConfiguration"))
     UpdatePentestOutput.struct_class = Types::UpdatePentestOutput
 
     UpdatePrivateConnectionCertificateInput.add_member(:private_connection_name, Shapes::ShapeRef.new(shape: PrivateConnectionName, required: true, location_name: "privateConnectionName"))

data/lib/aws-sdk-securityagent/types.rb

@@ -1509,6 +1509,21 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # The configuration that enables a pentest to run as part of a CI/CD
+    # pipeline, scoped to the code changes in each pipeline run.
+    #
+    # @!attribute [rw] enabled
+    #   Whether CI/CD pentesting is enabled for this pentest.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CiCdConfiguration AWS API Documentation
+    #
+    class CiCdConfiguration < Struct.new(
+      :enabled)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon CloudWatch Logs configuration for pentest job logging.
     #
     # @!attribute [rw] log_group
@@ -2603,6 +2618,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration to apply to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreatePentestInput AWS API Documentation
     #
     class CreatePentestInput < Struct.new(
@@ -2618,7 +2637,8 @@ module Aws::SecurityAgent
       :disable_managed_skills,
       :max_task_hours,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2670,6 +2690,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration applied to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreatePentestOutput AWS API Documentation
     #
     class CreatePentestOutput < Struct.new(
@@ -2683,7 +2707,8 @@ module Aws::SecurityAgent
       :log_config,
       :agent_space_id,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5649,13 +5674,19 @@ module Aws::SecurityAgent
     #   the previous request.
     #   @return [String]
     #
+    # @!attribute [rw] job_type
+    #   Filters the returned pentest jobs to only those of the specified job
+    #   type.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ListPentestJobsForPentestInput AWS API Documentation
     #
     class ListPentestJobsForPentestInput < Struct.new(
       :max_results,
       :pentest_id,
       :agent_space_id,
-      :next_token)
+      :next_token,
+      :job_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6379,6 +6410,11 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration for this pentest. Present when
+    #   the pentest is set up to run from a CI/CD pipeline.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @!attribute [rw] created_at
     #   The date and time the pentest was created, in UTC format.
     #   @return [Time]
@@ -6405,6 +6441,7 @@ module Aws::SecurityAgent
       :max_task_hours,
       :report_destination,
       :report_filters,
+      :cicd_configuration,
       :created_at,
       :updated_at)
       SENSITIVE = []
@@ -6521,7 +6558,8 @@ module Aws::SecurityAgent
     #   @return [Float]
     #
     # @!attribute [rw] job_type
-    #   The type of the pentest job. Valid values are FULL and REVALIDATION.
+    #   The type of the pentest job. Valid values are FULL, REVALIDATION,
+    #   and CICD.
     #   @return [String]
     #
     # @!attribute [rw] selected_finding_ids
@@ -6534,6 +6572,25 @@ module Aws::SecurityAgent
     #   document provider.
     #   @return [Types::ReportDestination]
     #
+    # @!attribute [rw] report_url
+    #   The URL to view this pentest job's findings report in the console.
+    #   @return [String]
+    #
+    # @!attribute [rw] scope_result
+    #   The scoping outcome for this CI/CD pentest job. Present only for
+    #   jobs of type CICD.
+    #   @return [Types::ScopeResult]
+    #
+    # @!attribute [rw] scope_changes
+    #   The code changes that defined the scope of this CI/CD pentest job.
+    #   Present only for jobs of type CICD.
+    #   @return [Array<Types::ScopeChange>]
+    #
+    # @!attribute [rw] cicd_configuration
+    #   The configuration that enables a pentest to run as part of a CI/CD
+    #   pipeline, scoped to the code changes in each pipeline run.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @!attribute [rw] created_at
     #   The date and time the pentest job was created, in UTC format.
     #   @return [Time]
@@ -6573,6 +6630,10 @@ module Aws::SecurityAgent
       :job_type,
       :selected_finding_ids,
       :report_destination,
+      :report_url,
+      :scope_result,
+      :scope_changes,
+      :cicd_configuration,
       :created_at,
       :updated_at)
       SENSITIVE = [:trusted_ca_certificates]
@@ -6605,6 +6666,15 @@ module Aws::SecurityAgent
     #   The date and time the pentest job was last updated, in UTC format.
     #   @return [Time]
     #
+    # @!attribute [rw] job_type
+    #   The type of the pentest job. Valid values are FULL, REVALIDATION,
+    #   and CICD.
+    #   @return [String]
+    #
+    # @!attribute [rw] report_url
+    #   The URL to view this pentest job's findings report in the console.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/PentestJobSummary AWS API Documentation
     #
     class PentestJobSummary < Struct.new(
@@ -6613,7 +6683,9 @@ module Aws::SecurityAgent
       :title,
       :status,
       :created_at,
-      :updated_at)
+      :updated_at,
+      :job_type,
+      :report_url)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6930,6 +7002,66 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # A code change in a CI/CD pipeline run that defines what a CI/CD
+    # pentest job tests. Each scope change identifies an integrated
+    # repository and the commit range for the change.
+    #
+    # @!attribute [rw] integration_id
+    #   The identifier of the integration for the source-code provider that
+    #   hosts the repository.
+    #   @return [String]
+    #
+    # @!attribute [rw] provider_resource_id
+    #   The provider-specific identifier of the repository the change
+    #   belongs to.
+    #   @return [String]
+    #
+    # @!attribute [rw] base_commit_sha
+    #   The commit SHA that the change is compared against. When omitted,
+    #   the change is evaluated against the head commit alone.
+    #   @return [String]
+    #
+    # @!attribute [rw] head_commit_sha
+    #   The commit SHA at the tip of the change to be tested.
+    #   @return [String]
+    #
+    # @!attribute [rw] trigger_run_id
+    #   The identifier of the CI/CD pipeline run that triggered this pentest
+    #   job.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ScopeChange AWS API Documentation
+    #
+    class ScopeChange < Struct.new(
+      :integration_id,
+      :provider_resource_id,
+      :base_commit_sha,
+      :head_commit_sha,
+      :trigger_run_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The outcome of scoping a CI/CD pentest job's code changes, including
+    # the decision and the reason for it.
+    #
+    # @!attribute [rw] decision
+    #   The scoping decision for the job's code changes.
+    #   @return [String]
+    #
+    # @!attribute [rw] reason
+    #   A human-readable explanation of the scoping decision.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ScopeResult AWS API Documentation
+    #
+    class ScopeResult < Struct.new(
+      :decision,
+      :reason)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A document used as source material for importing security
     # requirements.
     #
@@ -7267,9 +7399,10 @@ module Aws::SecurityAgent
     #   @return [String]
     #
     # @!attribute [rw] job_type
-    #   The type of pentest job to start. Valid values are FULL and
-    #   REVALIDATION. When set to REVALIDATION, the selectedFindingIds
-    #   parameter is required.
+    #   The type of pentest job to start. Valid values are FULL,
+    #   REVALIDATION, and CICD. When set to REVALIDATION, the
+    #   selectedFindingIds parameter is required. When set to CICD, the
+    #   scopeChanges parameter defines the code changes to test.
     #   @return [String]
     #
     # @!attribute [rw] selected_finding_ids
@@ -7278,13 +7411,20 @@ module Aws::SecurityAgent
     #   and pentest.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] scope_changes
+    #   The code changes that define the scope of a CI/CD pentest job.
+    #   Provide this when starting a job with jobType CICD to test only the
+    #   changes in the current pipeline run.
+    #   @return [Array<Types::ScopeChange>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/StartPentestJobInput AWS API Documentation
     #
     class StartPentestJobInput < Struct.new(
       :agent_space_id,
       :pentest_id,
       :job_type,
-      :selected_finding_ids)
+      :selected_finding_ids,
+      :scope_changes)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8810,6 +8950,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The updated CI/CD pentesting configuration to apply to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdatePentestInput AWS API Documentation
     #
     class UpdatePentestInput < Struct.new(
@@ -8826,7 +8970,8 @@ module Aws::SecurityAgent
       :disable_managed_skills,
       :max_task_hours,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8878,6 +9023,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration applied to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdatePentestOutput AWS API Documentation
     #
     class UpdatePentestOutput < Struct.new(
@@ -8891,7 +9040,8 @@ module Aws::SecurityAgent
       :log_config,
       :agent_space_id,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-securityagent.rb

@@ -55,7 +55,7 @@ module Aws::SecurityAgent
   autoload :EndpointProvider, 'aws-sdk-securityagent/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityagent/endpoints'
 
-  GEM_VERSION = '1.17.0'
+  GEM_VERSION = '1.18.0'
 
 end
 

data/sig/client.rbs

@@ -506,6 +506,7 @@ module Aws
         def agent_space_id: () -> ::String
         def report_destination: () -> Types::ReportDestination
         def report_filters: () -> Types::ReportFilters
+        def cicd_configuration: () -> Types::CiCdConfiguration
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityAgent/Client.html#create_pentest-instance_method
       def create_pentest: (
@@ -533,7 +534,10 @@ module Aws
                               parent_id: ::String?,
                               document_id: ::String?
                             },
-                            ?report_filters: Params::report_filters
+                            ?report_filters: Params::report_filters,
+                            ?cicd_configuration: {
+                              enabled: bool?
+                            }
                           ) -> _CreatePentestResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreatePentestResponseSuccess
 
@@ -1105,7 +1109,8 @@ module Aws
                                            ?max_results: ::Integer,
                                            pentest_id: ::String,
                                            agent_space_id: ::String,
-                                           ?next_token: ::String
+                                           ?next_token: ::String,
+                                           ?job_type: ("FULL" | "REVALIDATION" | "CICD")
                                          ) -> _ListPentestJobsForPentestResponseSuccess
                                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListPentestJobsForPentestResponseSuccess
 
@@ -1286,8 +1291,17 @@ module Aws
       def start_pentest_job: (
                                agent_space_id: ::String,
                                pentest_id: ::String,
-                               ?job_type: ("FULL" | "REVALIDATION"),
-                               ?selected_finding_ids: Array[::String]
+                               ?job_type: ("FULL" | "REVALIDATION" | "CICD"),
+                               ?selected_finding_ids: Array[::String],
+                               ?scope_changes: Array[
+                                 {
+                                   integration_id: ::String,
+                                   provider_resource_id: ::String,
+                                   base_commit_sha: ::String?,
+                                   head_commit_sha: ::String,
+                                   trigger_run_id: ::String?
+                                 }
+                               ]
                              ) -> _StartPentestJobResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartPentestJobResponseSuccess
 
@@ -1521,6 +1535,7 @@ module Aws
         def agent_space_id: () -> ::String
         def report_destination: () -> Types::ReportDestination
         def report_filters: () -> Types::ReportFilters
+        def cicd_configuration: () -> Types::CiCdConfiguration
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityAgent/Client.html#update_pentest-instance_method
       def update_pentest: (
@@ -1549,7 +1564,10 @@ module Aws
                               parent_id: ::String?,
                               document_id: ::String?
                             },
-                            ?report_filters: Params::report_filters
+                            ?report_filters: Params::report_filters,
+                            ?cicd_configuration: {
+                              enabled: bool?
+                            }
                           ) -> _UpdatePentestResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdatePentestResponseSuccess
 

data/sig/types.rbs

@@ -451,6 +451,11 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class CiCdConfiguration
+      attr_accessor enabled: bool
+      SENSITIVE: []
+    end
+
     class CloudWatchLog
       attr_accessor log_group: ::String
       attr_accessor log_stream: ::String
@@ -720,6 +725,7 @@ module Aws::SecurityAgent
       attr_accessor max_task_hours: ::Float
       attr_accessor report_destination: Types::ReportDestination
       attr_accessor report_filters: Types::ReportFilters
+      attr_accessor cicd_configuration: Types::CiCdConfiguration
       SENSITIVE: []
     end
 
@@ -735,6 +741,7 @@ module Aws::SecurityAgent
       attr_accessor agent_space_id: ::String
       attr_accessor report_destination: Types::ReportDestination
       attr_accessor report_filters: Types::ReportFilters
+      attr_accessor cicd_configuration: Types::CiCdConfiguration
       SENSITIVE: []
     end
 
@@ -1562,6 +1569,7 @@ module Aws::SecurityAgent
       attr_accessor pentest_id: ::String
       attr_accessor agent_space_id: ::String
       attr_accessor next_token: ::String
+      attr_accessor job_type: ("FULL" | "REVALIDATION" | "CICD")
       SENSITIVE: []
     end
 
@@ -1776,6 +1784,7 @@ module Aws::SecurityAgent
       attr_accessor max_task_hours: ::Float
       attr_accessor report_destination: Types::ReportDestination
       attr_accessor report_filters: Types::ReportFilters
+      attr_accessor cicd_configuration: Types::CiCdConfiguration
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
       SENSITIVE: []
@@ -1807,9 +1816,13 @@ module Aws::SecurityAgent
       attr_accessor clean_up_strategy: ("BEST_EFFORT_DELETE" | "RETAIN_ALL")
       attr_accessor disable_managed_skills: ::Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]
       attr_accessor max_task_hours: ::Float
-      attr_accessor job_type: ("FULL" | "REVALIDATION")
+      attr_accessor job_type: ("FULL" | "REVALIDATION" | "CICD")
       attr_accessor selected_finding_ids: ::Array[::String]
       attr_accessor report_destination: Types::ReportDestination
+      attr_accessor report_url: ::String
+      attr_accessor scope_result: Types::ScopeResult
+      attr_accessor scope_changes: ::Array[Types::ScopeChange]
+      attr_accessor cicd_configuration: Types::CiCdConfiguration
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
       SENSITIVE: []
@@ -1822,6 +1835,8 @@ module Aws::SecurityAgent
       attr_accessor status: ("IN_PROGRESS" | "STOPPING" | "STOPPED" | "FAILED" | "COMPLETED")
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
+      attr_accessor job_type: ("FULL" | "REVALIDATION" | "CICD")
+      attr_accessor report_url: ::String
       SENSITIVE: []
     end
 
@@ -1928,6 +1943,21 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class ScopeChange
+      attr_accessor integration_id: ::String
+      attr_accessor provider_resource_id: ::String
+      attr_accessor base_commit_sha: ::String
+      attr_accessor head_commit_sha: ::String
+      attr_accessor trigger_run_id: ::String
+      SENSITIVE: []
+    end
+
+    class ScopeResult
+      attr_accessor decision: ("IN_SCOPE" | "SCOPED_OUT" | "SCOPE_CONFLICT")
+      attr_accessor reason: ::String
+      SENSITIVE: []
+    end
+
     class SecurityRequirementArtifact
       attr_accessor name: ::String
       attr_accessor format: ("MD" | "PDF" | "TXT" | "DOCX" | "DOC")
@@ -2017,8 +2047,9 @@ module Aws::SecurityAgent
     class StartPentestJobInput
       attr_accessor agent_space_id: ::String
       attr_accessor pentest_id: ::String
-      attr_accessor job_type: ("FULL" | "REVALIDATION")
+      attr_accessor job_type: ("FULL" | "REVALIDATION" | "CICD")
       attr_accessor selected_finding_ids: ::Array[::String]
+      attr_accessor scope_changes: ::Array[Types::ScopeChange]
       SENSITIVE: []
     end
 
@@ -2408,6 +2439,7 @@ module Aws::SecurityAgent
       attr_accessor max_task_hours: ::Float
       attr_accessor report_destination: Types::ReportDestination
       attr_accessor report_filters: Types::ReportFilters
+      attr_accessor cicd_configuration: Types::CiCdConfiguration
       SENSITIVE: []
     end
 
@@ -2423,6 +2455,7 @@ module Aws::SecurityAgent
       attr_accessor agent_space_id: ::String
       attr_accessor report_destination: Types::ReportDestination
       attr_accessor report_filters: Types::ReportFilters
+      attr_accessor cicd_configuration: Types::CiCdConfiguration
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityagent
 version: !ruby/object:Gem::Version
-  version: 1.17.0
+  version: 1.18.0
 platform: ruby
 authors:
 - Amazon Web Services