aws-sdk-securityagent 1.17.0 → 1.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eae54b3ba11b0f4836327afe62abb61f3d33265830f4bb7bc7cf3fac15a0214a
-  data.tar.gz: 106cf10c9d45280f1bbd077c6404473fe8da4f1b5d5c70d988b195f20a13a040
+  metadata.gz: 59805d9b7f6aad7b60dfd98d4e7a115a5a9e2a01df878aaa9ab255bfb8f23625
+  data.tar.gz: 8d3c15cf8892f19b36cf18f7472d6f10761f689141af5880a7fea249709f5d62
 SHA512:
-  metadata.gz: 05c7848d97e76e9f73cd3b888bb639395544d063caf72d8eb35397dae8bcacd17267030620b0a4f30fad1b338e0ce63de58ee0155289e8ee28c7caa8bbbddcd3
-  data.tar.gz: dd495fb1528cff93bc75bcfef765e293198d25a0f0d6bbddbda43364439b8bc909b4f76f1286b7dcaec50837adeb0dd4eca09c78ddfad2067b45c60d47809e5c
+  metadata.gz: f7b8f009d8873c93bc7ccbf0564d388569bbbae7556670ff1a301b671c55f7a4d2fde04cd5fb072b7b4870cb664657cf5f656b4f9bc633172b444ad0af32c1c8
+  data.tar.gz: b96c6c9443aa0d1410c56823bd42c2eb45a5ef87358a3980fa2efe546f2106ad49e5d20ab324f3d92b9fb6993b40d72afa440be15c7437cff73862e8f076b8e4

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.19.0 (2026-09-29)
+------------------
+
+* Feature - Adds support for Azure DevOps and Bitbucket Data Center integration providers.
+
+1.18.0 (2026-09-28)
+------------------
+
+* Feature - Run automated penetration tests directly from your CI-CD pipeline to scan code changes before they ship, gating deployments on the findings
+
 1.17.0 (2026-09-25)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.17.0
+1.19.0

data/lib/aws-sdk-securityagent/client.rb

@@ -702,6 +702,7 @@ module Aws::SecurityAgent
     #   resp.deleted[0].report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.deleted[0].report_filters.annotation_notes #=> Boolean
     #   resp.deleted[0].report_filters.compliance_report #=> Boolean
+    #   resp.deleted[0].cicd_configuration.enabled #=> Boolean
     #   resp.deleted[0].created_at #=> Time
     #   resp.deleted[0].updated_at #=> Time
     #   resp.failed #=> Array
@@ -1330,13 +1331,23 @@ module Aws::SecurityAgent
     #   resp.pentest_jobs[0].disable_managed_skills #=> Array
     #   resp.pentest_jobs[0].disable_managed_skills[0] #=> String, one of "FINDING_PERSONALIZATION", "LOGIN_OPTIMIZATION"
     #   resp.pentest_jobs[0].max_task_hours #=> Float
-    #   resp.pentest_jobs[0].job_type #=> String, one of "FULL", "REVALIDATION"
+    #   resp.pentest_jobs[0].job_type #=> String, one of "FULL", "REVALIDATION", "CICD"
     #   resp.pentest_jobs[0].selected_finding_ids #=> Array
     #   resp.pentest_jobs[0].selected_finding_ids[0] #=> String
     #   resp.pentest_jobs[0].report_destination.integration_id #=> String
     #   resp.pentest_jobs[0].report_destination.container_id #=> String
     #   resp.pentest_jobs[0].report_destination.parent_id #=> String
     #   resp.pentest_jobs[0].report_destination.document_id #=> String
+    #   resp.pentest_jobs[0].report_url #=> String
+    #   resp.pentest_jobs[0].scope_result.decision #=> String, one of "IN_SCOPE", "SCOPED_OUT", "SCOPE_CONFLICT"
+    #   resp.pentest_jobs[0].scope_result.reason #=> String
+    #   resp.pentest_jobs[0].scope_changes #=> Array
+    #   resp.pentest_jobs[0].scope_changes[0].integration_id #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].provider_resource_id #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].base_commit_sha #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].head_commit_sha #=> String
+    #   resp.pentest_jobs[0].scope_changes[0].trigger_run_id #=> String
+    #   resp.pentest_jobs[0].cicd_configuration.enabled #=> Boolean
     #   resp.pentest_jobs[0].created_at #=> Time
     #   resp.pentest_jobs[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -1443,6 +1454,7 @@ module Aws::SecurityAgent
     #   resp.pentests[0].report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.pentests[0].report_filters.annotation_notes #=> Boolean
     #   resp.pentests[0].report_filters.compliance_report #=> Boolean
+    #   resp.pentests[0].cicd_configuration.enabled #=> Boolean
     #   resp.pentests[0].created_at #=> Time
     #   resp.pentests[0].updated_at #=> Time
     #   resp.not_found #=> Array
@@ -2215,7 +2227,7 @@ module Aws::SecurityAgent
     # for code review and remediation.
     #
     # @option params [required, String] :provider
-    #   The integration provider. Currently, only GITHUB is supported.
+    #   The integration provider.
     #
     # @option params [required, Types::ProviderInput] :input
     #   The provider-specific input required to create the integration.
@@ -2242,7 +2254,7 @@ module Aws::SecurityAgent
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_integration({
-    #     provider: "GITHUB", # required, accepts GITHUB, GITLAB, BITBUCKET, CONFLUENCE
+    #     provider: "GITHUB", # required, accepts GITHUB, GITLAB, BITBUCKET, CONFLUENCE, AZURE_DEVOPS
     #     input: { # required
     #       github: {
     #         code: "AuthCode", # required
@@ -2269,6 +2281,16 @@ module Aws::SecurityAgent
     #         state: "CsrfState", # required
     #         site_url: "ConfluenceSiteUrl", # required
     #       },
+    #       azure_dev_ops: {
+    #         code: "AuthCode", # required
+    #         state: "CsrfState", # required
+    #         organization_name: "String", # required
+    #       },
+    #       bitbucket_data_center: {
+    #         target_url: "TargetUrl", # required
+    #         code: "AuthCode", # required
+    #         state: "CsrfState", # required
+    #       },
     #     },
     #     integration_display_name: "String", # required
     #     kms_key_id: "KmsKeyId",
@@ -2385,6 +2407,9 @@ module Aws::SecurityAgent
     # @option params [Types::ReportFilters] :report_filters
     #   The report-generation filters applied when the report is exported.
     #
+    # @option params [Types::CiCdConfiguration] :cicd_configuration
+    #   The CI/CD pentesting configuration to apply to the pentest.
+    #
     # @return [Types::CreatePentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreatePentestOutput#pentest_id #pentest_id} => String
@@ -2398,6 +2423,7 @@ module Aws::SecurityAgent
     #   * {Types::CreatePentestOutput#agent_space_id #agent_space_id} => String
     #   * {Types::CreatePentestOutput#report_destination #report_destination} => Types::ReportDestination
     #   * {Types::CreatePentestOutput#report_filters #report_filters} => Types::ReportFilters
+    #   * {Types::CreatePentestOutput#cicd_configuration #cicd_configuration} => Types::CiCdConfiguration
     #
     # @example Request syntax with placeholder values
     #
@@ -2500,6 +2526,9 @@ module Aws::SecurityAgent
     #       annotation_notes: false,
     #       compliance_report: false,
     #     },
+    #     cicd_configuration: {
+    #       enabled: false,
+    #     },
     #   })
     #
     # @example Response structure
@@ -2558,6 +2587,7 @@ module Aws::SecurityAgent
     #   resp.report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.report_filters.annotation_notes #=> Boolean
     #   resp.report_filters.compliance_report #=> Boolean
+    #   resp.cicd_configuration.enabled #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreatePentest AWS API Documentation
     #
@@ -3455,6 +3485,7 @@ module Aws::SecurityAgent
     #   * {Types::GetIntegrationOutput#display_name #display_name} => String
     #   * {Types::GetIntegrationOutput#kms_key_id #kms_key_id} => String
     #   * {Types::GetIntegrationOutput#target_url #target_url} => String
+    #   * {Types::GetIntegrationOutput#webhook_url #webhook_url} => String
     #   * {Types::GetIntegrationOutput#private_connection_name #private_connection_name} => String
     #
     # @example Request syntax with placeholder values
@@ -3467,11 +3498,12 @@ module Aws::SecurityAgent
     #
     #   resp.integration_id #=> String
     #   resp.installation_id #=> String
-    #   resp.provider #=> String, one of "GITHUB", "GITLAB", "BITBUCKET", "CONFLUENCE"
+    #   resp.provider #=> String, one of "GITHUB", "GITLAB", "BITBUCKET", "CONFLUENCE", "AZURE_DEVOPS"
     #   resp.provider_type #=> String, one of "SOURCE_CODE", "DOCUMENTATION"
     #   resp.display_name #=> String
     #   resp.kms_key_id #=> String
     #   resp.target_url #=> String
+    #   resp.webhook_url #=> String
     #   resp.private_connection_name #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/GetIntegration AWS API Documentation
@@ -3581,8 +3613,22 @@ module Aws::SecurityAgent
     # authorization.
     #
     # @option params [required, String] :provider
-    #   The provider to initiate registration with. Currently, only GITHUB is
-    #   supported.
+    #   The provider to initiate registration with.
+    #
+    # @option params [String] :target_url
+    #   The HTTPS URL of a self-managed provider instance. Omit for SaaS
+    #   providers.
+    #
+    # @option params [String] :organization_name
+    #   The name of the organization to connect.
+    #
+    # @option params [String] :client_id
+    #   The client ID of the OAuth application registered on your self-managed
+    #   provider instance.
+    #
+    # @option params [String] :client_secret
+    #   The client secret of the OAuth application registered on your
+    #   self-managed provider instance.
     #
     # @return [Types::InitiateProviderRegistrationOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -3592,7 +3638,11 @@ module Aws::SecurityAgent
     # @example Request syntax with placeholder values
     #
     #   resp = client.initiate_provider_registration({
-    #     provider: "GITHUB", # required, accepts GITHUB, GITLAB, BITBUCKET, CONFLUENCE
+    #     provider: "GITHUB", # required, accepts GITHUB, GITLAB, BITBUCKET, CONFLUENCE, AZURE_DEVOPS
+    #     target_url: "TargetUrl",
+    #     organization_name: "String",
+    #     client_id: "ClientId",
+    #     client_secret: "ClientSecret",
     #   })
     #
     # @example Response structure
@@ -4174,6 +4224,12 @@ module Aws::SecurityAgent
     #   resp.integrated_resource_summaries[0].resource.confluence_document.page_id #=> String
     #   resp.integrated_resource_summaries[0].resource.confluence_document.title #=> String
     #   resp.integrated_resource_summaries[0].resource.confluence_document.space_title #=> String
+    #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.name #=> String
+    #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.provider_resource_id #=> String
+    #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.organization #=> String
+    #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.project #=> String
+    #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.project_id #=> String
+    #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.access_type #=> String, one of "PRIVATE", "PUBLIC"
     #   resp.integrated_resource_summaries[0].capabilities.github.leave_comments #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.github.remediate_code #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.gitlab.leave_comments #=> Boolean
@@ -4183,6 +4239,8 @@ module Aws::SecurityAgent
     #   resp.integrated_resource_summaries[0].capabilities.confluence.fetch_document #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.confluence.create_document #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.confluence.update_document #=> Boolean
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.leave_comments #=> Boolean
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.remediate_code #=> Boolean
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ListIntegratedResources AWS API Documentation
@@ -4220,7 +4278,7 @@ module Aws::SecurityAgent
     #
     #   resp = client.list_integrations({
     #     filter: {
-    #       provider: "GITHUB", # accepts GITHUB, GITLAB, BITBUCKET, CONFLUENCE
+    #       provider: "GITHUB", # accepts GITHUB, GITLAB, BITBUCKET, CONFLUENCE, AZURE_DEVOPS
     #       provider_type: "SOURCE_CODE", # accepts SOURCE_CODE, DOCUMENTATION
     #     },
     #     next_token: "NextToken",
@@ -4232,10 +4290,11 @@ module Aws::SecurityAgent
     #   resp.integration_summaries #=> Array
     #   resp.integration_summaries[0].integration_id #=> String
     #   resp.integration_summaries[0].installation_id #=> String
-    #   resp.integration_summaries[0].provider #=> String, one of "GITHUB", "GITLAB", "BITBUCKET", "CONFLUENCE"
+    #   resp.integration_summaries[0].provider #=> String, one of "GITHUB", "GITLAB", "BITBUCKET", "CONFLUENCE", "AZURE_DEVOPS"
     #   resp.integration_summaries[0].provider_type #=> String, one of "SOURCE_CODE", "DOCUMENTATION"
     #   resp.integration_summaries[0].display_name #=> String
     #   resp.integration_summaries[0].target_url #=> String
+    #   resp.integration_summaries[0].webhook_url #=> String
     #   resp.integration_summaries[0].private_connection_name #=> String
     #   resp.next_token #=> String
     #
@@ -4397,6 +4456,10 @@ module Aws::SecurityAgent
     #   request. For subsequent calls, use the nextToken value returned from
     #   the previous request.
     #
+    # @option params [String] :job_type
+    #   Filters the returned pentest jobs to only those of the specified job
+    #   type.
+    #
     # @return [Types::ListPentestJobsForPentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ListPentestJobsForPentestOutput#pentest_job_summaries #pentest_job_summaries} => Array<Types::PentestJobSummary>
@@ -4411,6 +4474,7 @@ module Aws::SecurityAgent
     #     pentest_id: "String", # required
     #     agent_space_id: "String", # required
     #     next_token: "NextToken",
+    #     job_type: "FULL", # accepts FULL, REVALIDATION, CICD
     #   })
     #
     # @example Response structure
@@ -4422,6 +4486,8 @@ module Aws::SecurityAgent
     #   resp.pentest_job_summaries[0].status #=> String, one of "IN_PROGRESS", "STOPPING", "STOPPED", "FAILED", "COMPLETED"
     #   resp.pentest_job_summaries[0].created_at #=> Time
     #   resp.pentest_job_summaries[0].updated_at #=> Time
+    #   resp.pentest_job_summaries[0].job_type #=> String, one of "FULL", "REVALIDATION", "CICD"
+    #   resp.pentest_job_summaries[0].report_url #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ListPentestJobsForPentest AWS API Documentation
@@ -5013,15 +5079,21 @@ module Aws::SecurityAgent
     #   The unique identifier of the pentest to start a job for.
     #
     # @option params [String] :job_type
-    #   The type of pentest job to start. Valid values are FULL and
-    #   REVALIDATION. When set to REVALIDATION, the selectedFindingIds
-    #   parameter is required.
+    #   The type of pentest job to start. Valid values are FULL, REVALIDATION,
+    #   and CICD. When set to REVALIDATION, the selectedFindingIds parameter
+    #   is required. When set to CICD, the scopeChanges parameter defines the
+    #   code changes to test.
     #
     # @option params [Array<String>] :selected_finding_ids
     #   The list of finding identifiers to revalidate. Required when jobType
     #   is REVALIDATION. Each finding must belong to the same agent space and
     #   pentest.
     #
+    # @option params [Array<Types::ScopeChange>] :scope_changes
+    #   The code changes that define the scope of a CI/CD pentest job. Provide
+    #   this when starting a job with jobType CICD to test only the changes in
+    #   the current pipeline run.
+    #
     # @return [Types::StartPentestJobOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::StartPentestJobOutput#title #title} => String
@@ -5037,8 +5109,17 @@ module Aws::SecurityAgent
     #   resp = client.start_pentest_job({
     #     agent_space_id: "String", # required
     #     pentest_id: "String", # required
-    #     job_type: "FULL", # accepts FULL, REVALIDATION
+    #     job_type: "FULL", # accepts FULL, REVALIDATION, CICD
     #     selected_finding_ids: ["String"],
+    #     scope_changes: [
+    #       {
+    #         integration_id: "String", # required
+    #         provider_resource_id: "String", # required
+    #         base_commit_sha: "String",
+    #         head_commit_sha: "String", # required
+    #         trigger_run_id: "String",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -5682,6 +5763,11 @@ module Aws::SecurityAgent
     #             title: "String",
     #             space_title: "String",
     #           },
+    #           azure_dev_ops_repository: {
+    #             name: "ProviderResourceName", # required
+    #             organization: "AzureDevOpsOrganization", # required
+    #             project: "String",
+    #           },
     #         },
     #         capabilities: {
     #           github: {
@@ -5701,6 +5787,10 @@ module Aws::SecurityAgent
     #             create_document: false,
     #             update_document: false,
     #           },
+    #           azure_dev_ops: {
+    #             leave_comments: false,
+    #             remediate_code: false,
+    #           },
     #         },
     #       },
     #     ],
@@ -5715,6 +5805,44 @@ module Aws::SecurityAgent
       req.send_request(options)
     end
 
+    # Creates an integration's webhook, or rotates the HMAC signing secret
+    # of an existing one. The secret is returned only once, in this
+    # response, and cannot be retrieved again.
+    #
+    # @option params [required, String] :integration_id
+    #   The ID of the integration whose webhook you want to create or rotate.
+    #
+    # @option params [required, String] :webhook_action
+    #   The action to perform on the integration's webhook.
+    #
+    # @return [Types::UpdateIntegrationOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateIntegrationOutput#integration_id #integration_id} => String
+    #   * {Types::UpdateIntegrationOutput#webhook_url #webhook_url} => String
+    #   * {Types::UpdateIntegrationOutput#secret #secret} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_integration({
+    #     integration_id: "IntegrationId", # required
+    #     webhook_action: "CREATE_IF_ABSENT", # required, accepts CREATE_IF_ABSENT, ROTATE
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.integration_id #=> String
+    #   resp.webhook_url #=> String
+    #   resp.secret #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdateIntegration AWS API Documentation
+    #
+    # @overload update_integration(params = {})
+    # @param [Hash] params ({})
+    def update_integration(params = {}, options = {})
+      req = build_request(:update_integration, params)
+      req.send_request(options)
+    end
+
     # Updates an existing pentest configuration.
     #
     # @option params [required, String] :pentest_id
@@ -5762,6 +5890,9 @@ module Aws::SecurityAgent
     # @option params [Types::ReportFilters] :report_filters
     #   The report-generation filters applied when the report is exported.
     #
+    # @option params [Types::CiCdConfiguration] :cicd_configuration
+    #   The updated CI/CD pentesting configuration to apply to the pentest.
+    #
     # @return [Types::UpdatePentestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdatePentestOutput#pentest_id #pentest_id} => String
@@ -5775,6 +5906,7 @@ module Aws::SecurityAgent
     #   * {Types::UpdatePentestOutput#agent_space_id #agent_space_id} => String
     #   * {Types::UpdatePentestOutput#report_destination #report_destination} => Types::ReportDestination
     #   * {Types::UpdatePentestOutput#report_filters #report_filters} => Types::ReportFilters
+    #   * {Types::UpdatePentestOutput#cicd_configuration #cicd_configuration} => Types::CiCdConfiguration
     #
     # @example Request syntax with placeholder values
     #
@@ -5878,6 +6010,9 @@ module Aws::SecurityAgent
     #       annotation_notes: false,
     #       compliance_report: false,
     #     },
+    #     cicd_configuration: {
+    #       enabled: false,
+    #     },
     #   })
     #
     # @example Response structure
@@ -5936,6 +6071,7 @@ module Aws::SecurityAgent
     #   resp.report_filters.task_statuses[0] #=> String, one of "IN_PROGRESS", "ABORTED", "COMPLETED", "INTERNAL_ERROR", "FAILED"
     #   resp.report_filters.annotation_notes #=> Boolean
     #   resp.report_filters.compliance_report #=> Boolean
+    #   resp.cicd_configuration.enabled #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdatePentest AWS API Documentation
     #
@@ -6484,7 +6620,7 @@ module Aws::SecurityAgent
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityagent'
-      context[:gem_version] = '1.17.0'
+      context[:gem_version] = '1.19.0'
       Seahorse::Client::Request.new(handlers, context)
     end