aws-sdk-securityagent 1.26.0 → 1.28.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 95c4c2731dbf78a0709f70b3f6bd8fb2474860b8694ae1f1b097c4ea50eba187
-  data.tar.gz: bd02abf4a6c4f5dfb1049001e1c44dcc074630b4bb98b76f504cb6e152e7315e
+  metadata.gz: e646103951df625ab421982bc438941d1751a0af5c3d00b6ec43b2b613a45cbd
+  data.tar.gz: 9d343d2ca18b39639d4569d83b4cdc4fb25ea2b0c60954dd56f16189d9ad07e0
 SHA512:
-  metadata.gz: c91006f1c4ce06654923f63f653276a9de1c9f2f25f29763a8a22658e57ceab654b1c76d29c9b3a3f4594ce5aafaec13d123d4f6022d97243e00c92f0489c1d2
-  data.tar.gz: b888e84ccb9845ff8302e2ebd1c08fe32e8529bc23002972af587d8d2c1ce8553ac76280f6666072d4de6403d5c32bc81e29bd1c947a941149f5a5b4e1f6d1bf
+  metadata.gz: 43f2122cbf4dfc51712f0e235d253305219094b531cbfae18ef9065f443b6850ebe5eececf6739fa09af03da9047d9078d4851a217a598e6edd988097bee831c
+  data.tar.gz: b62cc955915ee77613a460ebdf7ec2bb03de75e5765d1e7ddc4668a7b789699352f85e9a6e20af9b801ac7feaed168846a51a1a17c0de724e78fff4fd9c98815

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.28.0 (2026-10-29)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.27.0 (2026-10-28)
+------------------
+
+* Feature - Adds support for attaching client certificates for mutual TLS (mTLS) authentication to penetration test target endpoints via the new ClientCertificates field on Assets, enabling pentesting of endpoints that require client certificate authentication.
+
 1.26.0 (2026-10-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.26.0
+1.28.0

data/lib/aws-sdk-securityagent/client.rb

@@ -669,6 +669,11 @@ module Aws::SecurityAgent
     #   resp.deleted[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.deleted[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.deleted[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.deleted[0].assets.client_certificates #=> Array
+    #   resp.deleted[0].assets.client_certificates[0].name #=> String
+    #   resp.deleted[0].assets.client_certificates[0].secret_arn #=> String
+    #   resp.deleted[0].assets.client_certificates[0].origins #=> Array
+    #   resp.deleted[0].assets.client_certificates[0].origins[0] #=> String
     #   resp.deleted[0].exclude_risk_types #=> Array
     #   resp.deleted[0].exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.deleted[0].service_role #=> String
@@ -1187,6 +1192,11 @@ module Aws::SecurityAgent
     #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.code_reviews[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.code_reviews[0].assets.client_certificates #=> Array
+    #   resp.code_reviews[0].assets.client_certificates[0].name #=> String
+    #   resp.code_reviews[0].assets.client_certificates[0].secret_arn #=> String
+    #   resp.code_reviews[0].assets.client_certificates[0].origins #=> Array
+    #   resp.code_reviews[0].assets.client_certificates[0].origins[0] #=> String
     #   resp.code_reviews[0].service_role #=> String
     #   resp.code_reviews[0].log_config.log_group #=> String
     #   resp.code_reviews[0].log_config.log_stream #=> String
@@ -1452,6 +1462,11 @@ module Aws::SecurityAgent
     #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.pentest_jobs[0].trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.pentest_jobs[0].client_certificates #=> Array
+    #   resp.pentest_jobs[0].client_certificates[0].name #=> String
+    #   resp.pentest_jobs[0].client_certificates[0].secret_arn #=> String
+    #   resp.pentest_jobs[0].client_certificates[0].origins #=> Array
+    #   resp.pentest_jobs[0].client_certificates[0].origins[0] #=> String
     #   resp.pentest_jobs[0].code_remediation_strategy #=> String, one of "AUTOMATIC", "DISABLED"
     #   resp.pentest_jobs[0].clean_up_strategy #=> String, one of "BEST_EFFORT_DELETE", "RETAIN_ALL"
     #   resp.pentest_jobs[0].disable_managed_skills #=> Array
@@ -1541,6 +1556,11 @@ module Aws::SecurityAgent
     #   resp.pentests[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.pentests[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.pentests[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.pentests[0].assets.client_certificates #=> Array
+    #   resp.pentests[0].assets.client_certificates[0].name #=> String
+    #   resp.pentests[0].assets.client_certificates[0].secret_arn #=> String
+    #   resp.pentests[0].assets.client_certificates[0].origins #=> Array
+    #   resp.pentests[0].assets.client_certificates[0].origins[0] #=> String
     #   resp.pentests[0].exclude_risk_types #=> Array
     #   resp.pentests[0].exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.pentests[0].service_role #=> String
@@ -1858,6 +1878,11 @@ module Aws::SecurityAgent
     #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.threat_models[0].assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.threat_models[0].assets.client_certificates #=> Array
+    #   resp.threat_models[0].assets.client_certificates[0].name #=> String
+    #   resp.threat_models[0].assets.client_certificates[0].secret_arn #=> String
+    #   resp.threat_models[0].assets.client_certificates[0].origins #=> Array
+    #   resp.threat_models[0].assets.client_certificates[0].origins[0] #=> String
     #   resp.threat_models[0].scope_docs #=> Array
     #   resp.threat_models[0].scope_docs[0].s3_location #=> String
     #   resp.threat_models[0].scope_docs[0].artifact_id #=> String
@@ -2257,6 +2282,13 @@ module Aws::SecurityAgent
     #           },
     #         },
     #       ],
+    #       client_certificates: [
+    #         {
+    #           name: "ClientCertificateName", # required
+    #           secret_arn: "String", # required
+    #           origins: ["String"], # required
+    #         },
+    #       ],
     #     },
     #     service_role: "ServiceRole",
     #     log_config: {
@@ -2316,6 +2348,11 @@ module Aws::SecurityAgent
     #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.assets.client_certificates #=> Array
+    #   resp.assets.client_certificates[0].name #=> String
+    #   resp.assets.client_certificates[0].secret_arn #=> String
+    #   resp.assets.client_certificates[0].origins #=> Array
+    #   resp.assets.client_certificates[0].origins[0] #=> String
     #   resp.service_role #=> String
     #   resp.log_config.log_group #=> String
     #   resp.log_config.log_stream #=> String
@@ -2618,6 +2655,13 @@ module Aws::SecurityAgent
     #           },
     #         },
     #       ],
+    #       client_certificates: [
+    #         {
+    #           name: "ClientCertificateName", # required
+    #           secret_arn: "String", # required
+    #           origins: ["String"], # required
+    #         },
+    #       ],
     #     },
     #     exclude_risk_types: ["CROSS_SITE_SCRIPTING"], # accepts CROSS_SITE_SCRIPTING, DEFAULT_CREDENTIALS, INSECURE_DIRECT_OBJECT_REFERENCE, PRIVILEGE_ESCALATION, SERVER_SIDE_TEMPLATE_INJECTION, COMMAND_INJECTION, CODE_INJECTION, SQL_INJECTION, ARBITRARY_FILE_UPLOAD, INSECURE_DESERIALIZATION, LOCAL_FILE_INCLUSION, INFORMATION_DISCLOSURE, PATH_TRAVERSAL, SERVER_SIDE_REQUEST_FORGERY, JSON_WEB_TOKEN_VULNERABILITIES, XML_EXTERNAL_ENTITY, FILE_DELETION, OTHER, GRAPHQL_VULNERABILITIES, BUSINESS_LOGIC_VULNERABILITIES, CRYPTOGRAPHIC_VULNERABILITIES, DENIAL_OF_SERVICE, FILE_ACCESS, FILE_CREATION, DATABASE_MODIFICATION, DATABASE_ACCESS, OUTBOUND_SERVICE_REQUEST, UNKNOWN
     #     service_role: "ServiceRole",
@@ -2704,6 +2748,11 @@ module Aws::SecurityAgent
     #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.assets.client_certificates #=> Array
+    #   resp.assets.client_certificates[0].name #=> String
+    #   resp.assets.client_certificates[0].secret_arn #=> String
+    #   resp.assets.client_certificates[0].origins #=> Array
+    #   resp.assets.client_certificates[0].origins[0] #=> String
     #   resp.exclude_risk_types #=> Array
     #   resp.exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.service_role #=> String
@@ -3168,6 +3217,13 @@ module Aws::SecurityAgent
     #           },
     #         },
     #       ],
+    #       client_certificates: [
+    #         {
+    #           name: "ClientCertificateName", # required
+    #           secret_arn: "String", # required
+    #           origins: ["String"], # required
+    #         },
+    #       ],
     #     },
     #     scope_docs: [
     #       {
@@ -3224,6 +3280,11 @@ module Aws::SecurityAgent
     #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.assets.client_certificates #=> Array
+    #   resp.assets.client_certificates[0].name #=> String
+    #   resp.assets.client_certificates[0].secret_arn #=> String
+    #   resp.assets.client_certificates[0].origins #=> Array
+    #   resp.assets.client_certificates[0].origins[0] #=> String
     #   resp.scope_docs #=> Array
     #   resp.scope_docs[0].s3_location #=> String
     #   resp.scope_docs[0].artifact_id #=> String
@@ -5749,6 +5810,13 @@ module Aws::SecurityAgent
     #           },
     #         },
     #       ],
+    #       client_certificates: [
+    #         {
+    #           name: "ClientCertificateName", # required
+    #           secret_arn: "String", # required
+    #           origins: ["String"], # required
+    #         },
+    #       ],
     #     },
     #     service_role: "ServiceRole",
     #     log_config: {
@@ -5808,6 +5876,11 @@ module Aws::SecurityAgent
     #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.assets.client_certificates #=> Array
+    #   resp.assets.client_certificates[0].name #=> String
+    #   resp.assets.client_certificates[0].secret_arn #=> String
+    #   resp.assets.client_certificates[0].origins #=> Array
+    #   resp.assets.client_certificates[0].origins[0] #=> String
     #   resp.service_role #=> String
     #   resp.log_config.log_group #=> String
     #   resp.log_config.log_stream #=> String
@@ -6209,6 +6282,13 @@ module Aws::SecurityAgent
     #           },
     #         },
     #       ],
+    #       client_certificates: [
+    #         {
+    #           name: "ClientCertificateName", # required
+    #           secret_arn: "String", # required
+    #           origins: ["String"], # required
+    #         },
+    #       ],
     #     },
     #     exclude_risk_types: ["CROSS_SITE_SCRIPTING"], # accepts CROSS_SITE_SCRIPTING, DEFAULT_CREDENTIALS, INSECURE_DIRECT_OBJECT_REFERENCE, PRIVILEGE_ESCALATION, SERVER_SIDE_TEMPLATE_INJECTION, COMMAND_INJECTION, CODE_INJECTION, SQL_INJECTION, ARBITRARY_FILE_UPLOAD, INSECURE_DESERIALIZATION, LOCAL_FILE_INCLUSION, INFORMATION_DISCLOSURE, PATH_TRAVERSAL, SERVER_SIDE_REQUEST_FORGERY, JSON_WEB_TOKEN_VULNERABILITIES, XML_EXTERNAL_ENTITY, FILE_DELETION, OTHER, GRAPHQL_VULNERABILITIES, BUSINESS_LOGIC_VULNERABILITIES, CRYPTOGRAPHIC_VULNERABILITIES, DENIAL_OF_SERVICE, FILE_ACCESS, FILE_CREATION, DATABASE_MODIFICATION, DATABASE_ACCESS, OUTBOUND_SERVICE_REQUEST, UNKNOWN
     #     service_role: "ServiceRole",
@@ -6295,6 +6375,11 @@ module Aws::SecurityAgent
     #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.assets.client_certificates #=> Array
+    #   resp.assets.client_certificates[0].name #=> String
+    #   resp.assets.client_certificates[0].secret_arn #=> String
+    #   resp.assets.client_certificates[0].origins #=> Array
+    #   resp.assets.client_certificates[0].origins[0] #=> String
     #   resp.exclude_risk_types #=> Array
     #   resp.exclude_risk_types[0] #=> String, one of "CROSS_SITE_SCRIPTING", "DEFAULT_CREDENTIALS", "INSECURE_DIRECT_OBJECT_REFERENCE", "PRIVILEGE_ESCALATION", "SERVER_SIDE_TEMPLATE_INJECTION", "COMMAND_INJECTION", "CODE_INJECTION", "SQL_INJECTION", "ARBITRARY_FILE_UPLOAD", "INSECURE_DESERIALIZATION", "LOCAL_FILE_INCLUSION", "INFORMATION_DISCLOSURE", "PATH_TRAVERSAL", "SERVER_SIDE_REQUEST_FORGERY", "JSON_WEB_TOKEN_VULNERABILITIES", "XML_EXTERNAL_ENTITY", "FILE_DELETION", "OTHER", "GRAPHQL_VULNERABILITIES", "BUSINESS_LOGIC_VULNERABILITIES", "CRYPTOGRAPHIC_VULNERABILITIES", "DENIAL_OF_SERVICE", "FILE_ACCESS", "FILE_CREATION", "DATABASE_MODIFICATION", "DATABASE_ACCESS", "OUTBOUND_SERVICE_REQUEST", "UNKNOWN"
     #   resp.service_role #=> String
@@ -6730,6 +6815,13 @@ module Aws::SecurityAgent
     #           },
     #         },
     #       ],
+    #       client_certificates: [
+    #         {
+    #           name: "ClientCertificateName", # required
+    #           secret_arn: "String", # required
+    #           origins: ["String"], # required
+    #         },
+    #       ],
     #     },
     #     scope_docs: [
     #       {
@@ -6786,6 +6878,11 @@ module Aws::SecurityAgent
     #   resp.assets.trusted_ca_certificates[0].source.inline_pem #=> String
     #   resp.assets.trusted_ca_certificates[0].source.artifact_id #=> String
     #   resp.assets.trusted_ca_certificates[0].source.s3_location #=> String
+    #   resp.assets.client_certificates #=> Array
+    #   resp.assets.client_certificates[0].name #=> String
+    #   resp.assets.client_certificates[0].secret_arn #=> String
+    #   resp.assets.client_certificates[0].origins #=> Array
+    #   resp.assets.client_certificates[0].origins[0] #=> String
     #   resp.scope_docs #=> Array
     #   resp.scope_docs[0].s3_location #=> String
     #   resp.scope_docs[0].artifact_id #=> String
@@ -6869,7 +6966,7 @@ module Aws::SecurityAgent
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityagent'
-      context[:gem_version] = '1.26.0'
+      context[:gem_version] = '1.28.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityagent/client_api.rb

@@ -128,6 +128,10 @@ module Aws::SecurityAgent
     CertificateChain = Shapes::StringShape.new(name: 'CertificateChain')
     CiCdConfiguration = Shapes::StructureShape.new(name: 'CiCdConfiguration')
     CleanUpStrategy = Shapes::StringShape.new(name: 'CleanUpStrategy')
+    ClientCertificate = Shapes::StructureShape.new(name: 'ClientCertificate')
+    ClientCertificateList = Shapes::ListShape.new(name: 'ClientCertificateList')
+    ClientCertificateName = Shapes::StringShape.new(name: 'ClientCertificateName')
+    ClientCertificateOriginList = Shapes::ListShape.new(name: 'ClientCertificateOriginList')
     ClientId = Shapes::StringShape.new(name: 'ClientId')
     ClientSecret = Shapes::StringShape.new(name: 'ClientSecret')
     CloudWatchLog = Shapes::StructureShape.new(name: 'CloudWatchLog')
@@ -681,6 +685,7 @@ module Aws::SecurityAgent
     Assets.add_member(:source_code, Shapes::ShapeRef.new(shape: SourceCodeRepositoryList, location_name: "sourceCode"))
     Assets.add_member(:integrated_repositories, Shapes::ShapeRef.new(shape: IntegratedRepositoryList, location_name: "integratedRepositories"))
     Assets.add_member(:trusted_ca_certificates, Shapes::ShapeRef.new(shape: TrustedCaCertificateList, location_name: "trustedCaCertificates"))
+    Assets.add_member(:client_certificates, Shapes::ShapeRef.new(shape: ClientCertificateList, location_name: "clientCertificates"))
     Assets.struct_class = Types::Assets
 
     Authentication.add_member(:provider_type, Shapes::ShapeRef.new(shape: AuthenticationProviderType, location_name: "providerType"))
@@ -991,6 +996,15 @@ module Aws::SecurityAgent
     CiCdConfiguration.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "enabled"))
     CiCdConfiguration.struct_class = Types::CiCdConfiguration
 
+    ClientCertificate.add_member(:name, Shapes::ShapeRef.new(shape: ClientCertificateName, required: true, location_name: "name"))
+    ClientCertificate.add_member(:secret_arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "secretArn"))
+    ClientCertificate.add_member(:origins, Shapes::ShapeRef.new(shape: ClientCertificateOriginList, required: true, location_name: "origins"))
+    ClientCertificate.struct_class = Types::ClientCertificate
+
+    ClientCertificateList.member = Shapes::ShapeRef.new(shape: ClientCertificate)
+
+    ClientCertificateOriginList.member = Shapes::ShapeRef.new(shape: String)
+
     CloudWatchLog.add_member(:log_group, Shapes::ShapeRef.new(shape: String, location_name: "logGroup"))
     CloudWatchLog.add_member(:log_stream, Shapes::ShapeRef.new(shape: String, location_name: "logStream"))
     CloudWatchLog.struct_class = Types::CloudWatchLog
@@ -2135,6 +2149,7 @@ module Aws::SecurityAgent
     PentestJob.add_member(:error_information, Shapes::ShapeRef.new(shape: ErrorInformation, location_name: "errorInformation"))
     PentestJob.add_member(:integrated_repositories, Shapes::ShapeRef.new(shape: IntegratedRepositoryList, location_name: "integratedRepositories"))
     PentestJob.add_member(:trusted_ca_certificates, Shapes::ShapeRef.new(shape: TrustedCaCertificateList, location_name: "trustedCaCertificates"))
+    PentestJob.add_member(:client_certificates, Shapes::ShapeRef.new(shape: ClientCertificateList, location_name: "clientCertificates"))
     PentestJob.add_member(:code_remediation_strategy, Shapes::ShapeRef.new(shape: CodeRemediationStrategy, location_name: "codeRemediationStrategy"))
     PentestJob.add_member(:clean_up_strategy, Shapes::ShapeRef.new(shape: CleanUpStrategy, location_name: "cleanUpStrategy"))
     PentestJob.add_member(:disable_managed_skills, Shapes::ShapeRef.new(shape: SkillTypeList, location_name: "disableManagedSkills"))

data/lib/aws-sdk-securityagent/types.rb

@@ -400,6 +400,12 @@ module Aws::SecurityAgent
     #   certificate.
     #   @return [Array<Types::TrustedCaCertificate>]
     #
+    # @!attribute [rw] client_certificates
+    #   The client certificates for mutual TLS (mTLS) authentication to
+    #   target hosts. Each certificate is stored in Secrets Manager and
+    #   scoped to specific target origins.
+    #   @return [Array<Types::ClientCertificate>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/Assets AWS API Documentation
     #
     class Assets < Struct.new(
@@ -408,7 +414,8 @@ module Aws::SecurityAgent
       :documents,
       :source_code,
       :integrated_repositories,
-      :trusted_ca_certificates)
+      :trusted_ca_certificates,
+      :client_certificates)
       SENSITIVE = [:trusted_ca_certificates]
       include Aws::Structure
     end
@@ -1850,6 +1857,35 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # A client certificate for mutual TLS (mTLS) authentication to target
+    # hosts.
+    #
+    # @!attribute [rw] name
+    #   A customer-chosen name for this client certificate, used in error
+    #   messages and console display.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_arn
+    #   The ARN of the Secrets Manager secret containing the certificate and
+    #   private key.
+    #   @return [String]
+    #
+    # @!attribute [rw] origins
+    #   The origins (scheme://host\[:port\]) this certificate applies to.
+    #   Paths are not supported. Each hostname can have at most one client
+    #   certificate.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/ClientCertificate AWS API Documentation
+    #
+    class ClientCertificate < Struct.new(
+      :name,
+      :secret_arn,
+      :origins)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon CloudWatch Logs configuration for pentest job logging.
     #
     # @!attribute [rw] log_group
@@ -7149,6 +7185,11 @@ module Aws::SecurityAgent
     #   during the pentest job.
     #   @return [Array<Types::TrustedCaCertificate>]
     #
+    # @!attribute [rw] client_certificates
+    #   The client certificates for mutual TLS (mTLS) authentication to
+    #   target hosts during the pentest job.
+    #   @return [Array<Types::ClientCertificate>]
+    #
     # @!attribute [rw] code_remediation_strategy
     #   The code remediation strategy for the pentest job.
     #   @return [String]
@@ -7238,6 +7279,7 @@ module Aws::SecurityAgent
       :error_information,
       :integrated_repositories,
       :trusted_ca_certificates,
+      :client_certificates,
       :code_remediation_strategy,
       :clean_up_strategy,
       :disable_managed_skills,

data/lib/aws-sdk-securityagent.rb

@@ -55,7 +55,7 @@ module Aws::SecurityAgent
   autoload :EndpointProvider, 'aws-sdk-securityagent/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityagent/endpoints'
 
-  GEM_VERSION = '1.26.0'
+  GEM_VERSION = '1.28.0'
 
 end
 

data/sig/params.rbs

@@ -55,6 +55,13 @@ module Aws
             s3_location: ::String?
           }
         }
+      ]?,
+      client_certificates: Array[
+        {
+          name: ::String,
+          secret_arn: ::String,
+          origins: Array[::String]
+        }
       ]?
     }
 

data/sig/types.rbs

@@ -111,6 +111,7 @@ module Aws::SecurityAgent
       attr_accessor source_code: ::Array[Types::SourceCodeRepository]
       attr_accessor integrated_repositories: ::Array[Types::IntegratedRepository]
       attr_accessor trusted_ca_certificates: ::Array[Types::TrustedCaCertificate]
+      attr_accessor client_certificates: ::Array[Types::ClientCertificate]
       SENSITIVE: []
     end
 
@@ -543,6 +544,13 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class ClientCertificate
+      attr_accessor name: ::String
+      attr_accessor secret_arn: ::String
+      attr_accessor origins: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class CloudWatchLog
       attr_accessor log_group: ::String
       attr_accessor log_stream: ::String
@@ -1973,6 +1981,7 @@ module Aws::SecurityAgent
       attr_accessor error_information: Types::ErrorInformation
       attr_accessor integrated_repositories: ::Array[Types::IntegratedRepository]
       attr_accessor trusted_ca_certificates: ::Array[Types::TrustedCaCertificate]
+      attr_accessor client_certificates: ::Array[Types::ClientCertificate]
       attr_accessor code_remediation_strategy: ("AUTOMATIC" | "DISABLED")
       attr_accessor clean_up_strategy: ("BEST_EFFORT_DELETE" | "RETAIN_ALL")
       attr_accessor disable_managed_skills: ::Array[("FINDING_PERSONALIZATION" | "LOGIN_OPTIMIZATION")]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityagent
 version: !ruby/object:Gem::Version
-  version: 1.26.0
+  version: 1.28.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.260.0
+        version: 3.263.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.260.0
+        version: 3.263.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement