aws-sdk-securityagent 1.17.0 → 1.19.0

data/lib/aws-sdk-securityagent/types.rb

@@ -435,6 +435,116 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # Connection details for an Azure DevOps integration.
+    #
+    # @!attribute [rw] code
+    #   The OAuth 2.0 authorization code returned to your redirect URL after
+    #   the connection is authorized.
+    #   @return [String]
+    #
+    # @!attribute [rw] state
+    #   The CSRF state value returned by `InitiateProviderRegistration` and
+    #   echoed back on the authorization redirect.
+    #   @return [String]
+    #
+    # @!attribute [rw] organization_name
+    #   The name of the Azure DevOps organization to connect, for example
+    #   `my-org`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/AzureDevOpsIntegrationInput AWS API Documentation
+    #
+    class AzureDevOpsIntegrationInput < Struct.new(
+      :code,
+      :state,
+      :organization_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Metadata for an integrated Azure DevOps repository.
+    #
+    # @!attribute [rw] name
+    #   Name of the resource e.g. repository name, etc.
+    #   @return [String]
+    #
+    # @!attribute [rw] provider_resource_id
+    #   Provider Id of the resource e.g. GitHub repository id, etc.
+    #   @return [String]
+    #
+    # @!attribute [rw] organization
+    #   The name of the Azure DevOps organization that owns the repository.
+    #   @return [String]
+    #
+    # @!attribute [rw] project
+    #   The name of the Azure DevOps project that contains the repository.
+    #   @return [String]
+    #
+    # @!attribute [rw] project_id
+    #   The GUID of the Azure DevOps project that contains the repository.
+    #   @return [String]
+    #
+    # @!attribute [rw] access_type
+    #   Defines the visibility level of provider resources. PRIVATE
+    #   indicates restricted access, while PUBLIC indicates open access.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/AzureDevOpsRepositoryMetadata AWS API Documentation
+    #
+    class AzureDevOpsRepositoryMetadata < Struct.new(
+      :name,
+      :provider_resource_id,
+      :organization,
+      :project,
+      :project_id,
+      :access_type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An Azure DevOps repository integrated as a resource.
+    #
+    # @!attribute [rw] name
+    #   Name of the resource e.g. repository name, etc.
+    #   @return [String]
+    #
+    # @!attribute [rw] organization
+    #   The name of the Azure DevOps organization that owns the repository.
+    #   @return [String]
+    #
+    # @!attribute [rw] project
+    #   The name of the Azure DevOps project that contains the repository.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/AzureDevOpsRepositoryResource AWS API Documentation
+    #
+    class AzureDevOpsRepositoryResource < Struct.new(
+      :name,
+      :organization,
+      :project)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Capabilities for an integrated Azure DevOps repository.
+    #
+    # @!attribute [rw] leave_comments
+    #   Whether to post code review comments on pull requests.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] remediate_code
+    #   Whether to create pull requests with automated fixes.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/AzureDevOpsResourceCapabilities AWS API Documentation
+    #
+    class AzureDevOpsResourceCapabilities < Struct.new(
+      :leave_comments,
+      :remediate_code)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information about a successfully created security
     # requirement.
     #
@@ -1355,6 +1465,34 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # Connection details for a self-managed Bitbucket Data Center
+    # integration.
+    #
+    # @!attribute [rw] target_url
+    #   The HTTPS URL of your Bitbucket Data Center instance, for example
+    #   `https://bitbucket.example.com`.
+    #   @return [String]
+    #
+    # @!attribute [rw] code
+    #   The OAuth 2.0 authorization code returned to your redirect URL after
+    #   the connection is authorized.
+    #   @return [String]
+    #
+    # @!attribute [rw] state
+    #   The CSRF state value returned by `InitiateProviderRegistration` and
+    #   echoed back on the authorization redirect.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/BitbucketDataCenterIntegrationInput AWS API Documentation
+    #
+    class BitbucketDataCenterIntegrationInput < Struct.new(
+      :target_url,
+      :code,
+      :state)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The configuration for creating a Bitbucket integration.
     #
     # @!attribute [rw] installation_id
@@ -1509,6 +1647,21 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # The configuration that enables a pentest to run as part of a CI/CD
+    # pipeline, scoped to the code changes in each pipeline run.
+    #
+    # @!attribute [rw] enabled
+    #   Whether CI/CD pentesting is enabled for this pentest.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CiCdConfiguration AWS API Documentation
+    #
+    class CiCdConfiguration < Struct.new(
+      :enabled)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon CloudWatch Logs configuration for pentest job logging.
     #
     # @!attribute [rw] log_group
@@ -2450,7 +2603,7 @@ module Aws::SecurityAgent
     end
 
     # @!attribute [rw] provider
-    #   The integration provider. Currently, only GITHUB is supported.
+    #   The integration provider.
     #   @return [String]
     #
     # @!attribute [rw] input
@@ -2603,6 +2756,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration to apply to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreatePentestInput AWS API Documentation
     #
     class CreatePentestInput < Struct.new(
@@ -2618,7 +2775,8 @@ module Aws::SecurityAgent
       :disable_managed_skills,
       :max_task_hours,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2670,6 +2828,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration applied to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/CreatePentestOutput AWS API Documentation
     #
     class CreatePentestOutput < Struct.new(
@@ -2683,7 +2845,8 @@ module Aws::SecurityAgent
       :log_config,
       :agent_space_id,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4212,6 +4375,11 @@ module Aws::SecurityAgent
     #   absent for SaaS integrations.
     #   @return [String]
     #
+    # @!attribute [rw] webhook_url
+    #   The payload URL of the integration's webhook, once it has been
+    #   created. The signing secret is never returned on a read.
+    #   @return [String]
+    #
     # @!attribute [rw] private_connection_name
     #   The name of the private connection used to reach the integration's
     #   self-hosted instance over private networking, if one is configured.
@@ -4227,6 +4395,7 @@ module Aws::SecurityAgent
       :display_name,
       :kms_key_id,
       :target_url,
+      :webhook_url,
       :private_connection_name)
       SENSITIVE = []
       include Aws::Structure
@@ -4614,15 +4783,37 @@ module Aws::SecurityAgent
     end
 
     # @!attribute [rw] provider
-    #   The provider to initiate registration with. Currently, only GITHUB
-    #   is supported.
+    #   The provider to initiate registration with.
+    #   @return [String]
+    #
+    # @!attribute [rw] target_url
+    #   The HTTPS URL of a self-managed provider instance. Omit for SaaS
+    #   providers.
+    #   @return [String]
+    #
+    # @!attribute [rw] organization_name
+    #   The name of the organization to connect.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_id
+    #   The client ID of the OAuth application registered on your
+    #   self-managed provider instance.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_secret
+    #   The client secret of the OAuth application registered on your
+    #   self-managed provider instance.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/InitiateProviderRegistrationInput AWS API Documentation
     #
     class InitiateProviderRegistrationInput < Struct.new(
-      :provider)
-      SENSITIVE = []
+      :provider,
+      :target_url,
+      :organization_name,
+      :client_id,
+      :client_secret)
+      SENSITIVE = [:client_secret]
       include Aws::Structure
     end
 
@@ -4712,6 +4903,10 @@ module Aws::SecurityAgent
     #   A Confluence document (page) integrated as a resource.
     #   @return [Types::ConfluenceDocumentResource]
     #
+    # @!attribute [rw] azure_dev_ops_repository
+    #   The Azure DevOps repository resource information.
+    #   @return [Types::AzureDevOpsRepositoryResource]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/IntegratedResource AWS API Documentation
     #
     class IntegratedResource < Struct.new(
@@ -4719,6 +4914,7 @@ module Aws::SecurityAgent
       :gitlab_repository,
       :bitbucket_repository,
       :confluence_document,
+      :azure_dev_ops_repository,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -4728,6 +4924,7 @@ module Aws::SecurityAgent
       class GitlabRepository < IntegratedResource; end
       class BitbucketRepository < IntegratedResource; end
       class ConfluenceDocument < IntegratedResource; end
+      class AzureDevOpsRepository < IntegratedResource; end
       class Unknown < IntegratedResource; end
     end
 
@@ -4772,6 +4969,10 @@ module Aws::SecurityAgent
     #   Metadata for an integrated Confluence document.
     #   @return [Types::ConfluenceDocumentMetadata]
     #
+    # @!attribute [rw] azure_dev_ops_repository
+    #   The Azure DevOps repository metadata.
+    #   @return [Types::AzureDevOpsRepositoryMetadata]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/IntegratedResourceMetadata AWS API Documentation
     #
     class IntegratedResourceMetadata < Struct.new(
@@ -4779,6 +4980,7 @@ module Aws::SecurityAgent
       :gitlab_repository,
       :bitbucket_repository,
       :confluence_document,
+      :azure_dev_ops_repository,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -4788,6 +4990,7 @@ module Aws::SecurityAgent
       class GitlabRepository < IntegratedResourceMetadata; end
       class BitbucketRepository < IntegratedResourceMetadata; end
       class ConfluenceDocument < IntegratedResourceMetadata; end
+      class AzureDevOpsRepository < IntegratedResourceMetadata; end
       class Unknown < IntegratedResourceMetadata; end
     end
 
@@ -4872,6 +5075,11 @@ module Aws::SecurityAgent
     #   absent for SaaS integrations.
     #   @return [String]
     #
+    # @!attribute [rw] webhook_url
+    #   The payload URL of the integration's webhook, once it has been
+    #   created. The signing secret is never returned on a read.
+    #   @return [String]
+    #
     # @!attribute [rw] private_connection_name
     #   The name of the private connection used to reach the integration's
     #   self-hosted instance over private networking, if one is configured.
@@ -4886,6 +5094,7 @@ module Aws::SecurityAgent
       :provider_type,
       :display_name,
       :target_url,
+      :webhook_url,
       :private_connection_name)
       SENSITIVE = []
       include Aws::Structure
@@ -5649,13 +5858,19 @@ module Aws::SecurityAgent
     #   the previous request.
     #   @return [String]
     #
+    # @!attribute [rw] job_type
+    #   Filters the returned pentest jobs to only those of the specified job
+    #   type.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ListPentestJobsForPentestInput AWS API Documentation
     #
     class ListPentestJobsForPentestInput < Struct.new(
       :max_results,
       :pentest_id,
       :agent_space_id,
-      :next_token)
+      :next_token,
+      :job_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6379,6 +6594,11 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration for this pentest. Present when
+    #   the pentest is set up to run from a CI/CD pipeline.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @!attribute [rw] created_at
     #   The date and time the pentest was created, in UTC format.
     #   @return [Time]
@@ -6405,6 +6625,7 @@ module Aws::SecurityAgent
       :max_task_hours,
       :report_destination,
       :report_filters,
+      :cicd_configuration,
       :created_at,
       :updated_at)
       SENSITIVE = []
@@ -6521,7 +6742,8 @@ module Aws::SecurityAgent
     #   @return [Float]
     #
     # @!attribute [rw] job_type
-    #   The type of the pentest job. Valid values are FULL and REVALIDATION.
+    #   The type of the pentest job. Valid values are FULL, REVALIDATION,
+    #   and CICD.
     #   @return [String]
     #
     # @!attribute [rw] selected_finding_ids
@@ -6534,6 +6756,25 @@ module Aws::SecurityAgent
     #   document provider.
     #   @return [Types::ReportDestination]
     #
+    # @!attribute [rw] report_url
+    #   The URL to view this pentest job's findings report in the console.
+    #   @return [String]
+    #
+    # @!attribute [rw] scope_result
+    #   The scoping outcome for this CI/CD pentest job. Present only for
+    #   jobs of type CICD.
+    #   @return [Types::ScopeResult]
+    #
+    # @!attribute [rw] scope_changes
+    #   The code changes that defined the scope of this CI/CD pentest job.
+    #   Present only for jobs of type CICD.
+    #   @return [Array<Types::ScopeChange>]
+    #
+    # @!attribute [rw] cicd_configuration
+    #   The configuration that enables a pentest to run as part of a CI/CD
+    #   pipeline, scoped to the code changes in each pipeline run.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @!attribute [rw] created_at
     #   The date and time the pentest job was created, in UTC format.
     #   @return [Time]
@@ -6573,6 +6814,10 @@ module Aws::SecurityAgent
       :job_type,
       :selected_finding_ids,
       :report_destination,
+      :report_url,
+      :scope_result,
+      :scope_changes,
+      :cicd_configuration,
       :created_at,
       :updated_at)
       SENSITIVE = [:trusted_ca_certificates]
@@ -6605,6 +6850,15 @@ module Aws::SecurityAgent
     #   The date and time the pentest job was last updated, in UTC format.
     #   @return [Time]
     #
+    # @!attribute [rw] job_type
+    #   The type of the pentest job. Valid values are FULL, REVALIDATION,
+    #   and CICD.
+    #   @return [String]
+    #
+    # @!attribute [rw] report_url
+    #   The URL to view this pentest job's findings report in the console.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/PentestJobSummary AWS API Documentation
     #
     class PentestJobSummary < Struct.new(
@@ -6613,7 +6867,9 @@ module Aws::SecurityAgent
       :title,
       :status,
       :created_at,
-      :updated_at)
+      :updated_at,
+      :job_type,
+      :report_url)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6770,6 +7026,15 @@ module Aws::SecurityAgent
     #   The configuration for a Confluence integration.
     #   @return [Types::ConfluenceIntegrationInput]
     #
+    # @!attribute [rw] azure_dev_ops
+    #   The Azure DevOps-specific input for creating an integration.
+    #   @return [Types::AzureDevOpsIntegrationInput]
+    #
+    # @!attribute [rw] bitbucket_data_center
+    #   The Bitbucket Data Center-specific input for creating an
+    #   integration.
+    #   @return [Types::BitbucketDataCenterIntegrationInput]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ProviderInput AWS API Documentation
     #
     class ProviderInput < Struct.new(
@@ -6777,6 +7042,8 @@ module Aws::SecurityAgent
       :gitlab,
       :bitbucket,
       :confluence,
+      :azure_dev_ops,
+      :bitbucket_data_center,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -6786,6 +7053,8 @@ module Aws::SecurityAgent
       class Gitlab < ProviderInput; end
       class Bitbucket < ProviderInput; end
       class Confluence < ProviderInput; end
+      class AzureDevOps < ProviderInput; end
+      class BitbucketDataCenter < ProviderInput; end
       class Unknown < ProviderInput; end
     end
 
@@ -6813,6 +7082,10 @@ module Aws::SecurityAgent
     #   Capabilities for an integrated Confluence space.
     #   @return [Types::ConfluenceResourceCapabilities]
     #
+    # @!attribute [rw] azure_dev_ops
+    #   The Azure DevOps-specific resource capabilities.
+    #   @return [Types::AzureDevOpsResourceCapabilities]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ProviderResourceCapabilities AWS API Documentation
     #
     class ProviderResourceCapabilities < Struct.new(
@@ -6820,6 +7093,7 @@ module Aws::SecurityAgent
       :gitlab,
       :bitbucket,
       :confluence,
+      :azure_dev_ops,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -6829,6 +7103,7 @@ module Aws::SecurityAgent
       class Gitlab < ProviderResourceCapabilities; end
       class Bitbucket < ProviderResourceCapabilities; end
       class Confluence < ProviderResourceCapabilities; end
+      class AzureDevOps < ProviderResourceCapabilities; end
       class Unknown < ProviderResourceCapabilities; end
     end
 
@@ -6930,6 +7205,66 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # A code change in a CI/CD pipeline run that defines what a CI/CD
+    # pentest job tests. Each scope change identifies an integrated
+    # repository and the commit range for the change.
+    #
+    # @!attribute [rw] integration_id
+    #   The identifier of the integration for the source-code provider that
+    #   hosts the repository.
+    #   @return [String]
+    #
+    # @!attribute [rw] provider_resource_id
+    #   The provider-specific identifier of the repository the change
+    #   belongs to.
+    #   @return [String]
+    #
+    # @!attribute [rw] base_commit_sha
+    #   The commit SHA that the change is compared against. When omitted,
+    #   the change is evaluated against the head commit alone.
+    #   @return [String]
+    #
+    # @!attribute [rw] head_commit_sha
+    #   The commit SHA at the tip of the change to be tested.
+    #   @return [String]
+    #
+    # @!attribute [rw] trigger_run_id
+    #   The identifier of the CI/CD pipeline run that triggered this pentest
+    #   job.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ScopeChange AWS API Documentation
+    #
+    class ScopeChange < Struct.new(
+      :integration_id,
+      :provider_resource_id,
+      :base_commit_sha,
+      :head_commit_sha,
+      :trigger_run_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The outcome of scoping a CI/CD pentest job's code changes, including
+    # the decision and the reason for it.
+    #
+    # @!attribute [rw] decision
+    #   The scoping decision for the job's code changes.
+    #   @return [String]
+    #
+    # @!attribute [rw] reason
+    #   A human-readable explanation of the scoping decision.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ScopeResult AWS API Documentation
+    #
+    class ScopeResult < Struct.new(
+      :decision,
+      :reason)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A document used as source material for importing security
     # requirements.
     #
@@ -7267,9 +7602,10 @@ module Aws::SecurityAgent
     #   @return [String]
     #
     # @!attribute [rw] job_type
-    #   The type of pentest job to start. Valid values are FULL and
-    #   REVALIDATION. When set to REVALIDATION, the selectedFindingIds
-    #   parameter is required.
+    #   The type of pentest job to start. Valid values are FULL,
+    #   REVALIDATION, and CICD. When set to REVALIDATION, the
+    #   selectedFindingIds parameter is required. When set to CICD, the
+    #   scopeChanges parameter defines the code changes to test.
     #   @return [String]
     #
     # @!attribute [rw] selected_finding_ids
@@ -7278,13 +7614,20 @@ module Aws::SecurityAgent
     #   and pentest.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] scope_changes
+    #   The code changes that define the scope of a CI/CD pentest job.
+    #   Provide this when starting a job with jobType CICD to test only the
+    #   changes in the current pipeline run.
+    #   @return [Array<Types::ScopeChange>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/StartPentestJobInput AWS API Documentation
     #
     class StartPentestJobInput < Struct.new(
       :agent_space_id,
       :pentest_id,
       :job_type,
-      :selected_finding_ids)
+      :selected_finding_ids,
+      :scope_changes)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8748,6 +9091,52 @@ module Aws::SecurityAgent
     #
     class UpdateIntegratedResourcesOutput < Aws::EmptyStructure; end
 
+    # Input for creating or rotating an integration's webhook.
+    #
+    # @!attribute [rw] integration_id
+    #   The ID of the integration whose webhook you want to create or
+    #   rotate.
+    #   @return [String]
+    #
+    # @!attribute [rw] webhook_action
+    #   The action to perform on the integration's webhook.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdateIntegrationInput AWS API Documentation
+    #
+    class UpdateIntegrationInput < Struct.new(
+      :integration_id,
+      :webhook_action)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Output for the UpdateIntegration operation.
+    #
+    # @!attribute [rw] integration_id
+    #   The ID of the integration.
+    #   @return [String]
+    #
+    # @!attribute [rw] webhook_url
+    #   The payload URL to configure on your provider instance. Returned
+    #   when a webhook is created; unchanged by a rotate.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret
+    #   The HMAC signing secret for the webhook. Returned only once, in this
+    #   response; it is never returned again.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdateIntegrationOutput AWS API Documentation
+    #
+    class UpdateIntegrationOutput < Struct.new(
+      :integration_id,
+      :webhook_url,
+      :secret)
+      SENSITIVE = [:secret]
+      include Aws::Structure
+    end
+
     # Input for updating an existing pentest.
     #
     # @!attribute [rw] pentest_id
@@ -8810,6 +9199,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The updated CI/CD pentesting configuration to apply to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdatePentestInput AWS API Documentation
     #
     class UpdatePentestInput < Struct.new(
@@ -8826,7 +9219,8 @@ module Aws::SecurityAgent
       :disable_managed_skills,
       :max_task_hours,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8878,6 +9272,10 @@ module Aws::SecurityAgent
     #   The report-generation filters applied when the report is exported.
     #   @return [Types::ReportFilters]
     #
+    # @!attribute [rw] cicd_configuration
+    #   The CI/CD pentesting configuration applied to the pentest.
+    #   @return [Types::CiCdConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/UpdatePentestOutput AWS API Documentation
     #
     class UpdatePentestOutput < Struct.new(
@@ -8891,7 +9289,8 @@ module Aws::SecurityAgent
       :log_config,
       :agent_space_id,
       :report_destination,
-      :report_filters)
+      :report_filters,
+      :cicd_configuration)
       SENSITIVE = []
       include Aws::Structure
     end