@aws-sdk/client-securityagent 3.1141.0 → 3.1142.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/index.js +60 -19
- package/dist-es/index.js +1 -0
- package/dist-es/models/enums.js +6 -0
- package/dist-es/models/models_1.js +1 -0
- package/dist-es/schemas/schemas_0.js +49 -18
- package/dist-types/commands/BatchDeletePentestsCommand.d.ts +3 -0
- package/dist-types/commands/BatchGetPentestJobsCommand.d.ts +18 -1
- package/dist-types/commands/BatchGetPentestsCommand.d.ts +3 -0
- package/dist-types/commands/CreatePentestCommand.d.ts +6 -0
- package/dist-types/commands/ListPentestJobsForPentestCommand.d.ts +3 -0
- package/dist-types/commands/StartPentestJobCommand.d.ts +10 -1
- package/dist-types/commands/UpdatePentestCommand.d.ts +6 -0
- package/dist-types/commands/UpdateThreatModelCommand.d.ts +2 -1
- package/dist-types/commands/VerifyTargetDomainCommand.d.ts +1 -1
- package/dist-types/index.d.ts +1 -0
- package/dist-types/models/enums.d.ts +26 -0
- package/dist-types/models/models_0.d.ts +126 -116
- package/dist-types/models/models_1.d.ts +115 -0
- package/dist-types/schemas/schemas_0.d.ts +3 -0
- package/dist-types/ts3.4/commands/UpdateThreatModelCommand.d.ts +2 -1
- package/dist-types/ts3.4/commands/VerifyTargetDomainCommand.d.ts +1 -1
- package/dist-types/ts3.4/index.d.ts +1 -0
- package/dist-types/ts3.4/models/enums.d.ts +7 -0
- package/dist-types/ts3.4/models/models_0.d.ts +28 -25
- package/dist-types/ts3.4/models/models_1.d.ts +27 -0
- package/dist-types/ts3.4/schemas/schemas_0.d.ts +3 -0
- package/package.json +1 -1
|
@@ -541,6 +541,10 @@ export type ValidationStatus = (typeof ValidationStatus)[keyof typeof Validation
|
|
|
541
541
|
* @enum
|
|
542
542
|
*/
|
|
543
543
|
export declare const JobType: {
|
|
544
|
+
/**
|
|
545
|
+
* <p>A CI/CD pentest job that tests only the code changes in a single pipeline run, as determined by the scope changes supplied when the job is started.</p>
|
|
546
|
+
*/
|
|
547
|
+
readonly CICD: "CICD";
|
|
544
548
|
/**
|
|
545
549
|
* <p>A full pentest job that executes all phases including scanning, managed execution, and guided exploration.</p>
|
|
546
550
|
*/
|
|
@@ -554,6 +558,28 @@ export declare const JobType: {
|
|
|
554
558
|
* @public
|
|
555
559
|
*/
|
|
556
560
|
export type JobType = (typeof JobType)[keyof typeof JobType];
|
|
561
|
+
/**
|
|
562
|
+
* @public
|
|
563
|
+
* @enum
|
|
564
|
+
*/
|
|
565
|
+
export declare const ScopeDecision: {
|
|
566
|
+
/**
|
|
567
|
+
* <p>The code changes are in scope and are tested by the pentest job.</p>
|
|
568
|
+
*/
|
|
569
|
+
readonly IN_SCOPE: "IN_SCOPE";
|
|
570
|
+
/**
|
|
571
|
+
* <p>The code changes are out of scope and are not tested. No pentest is run for the changes.</p>
|
|
572
|
+
*/
|
|
573
|
+
readonly SCOPED_OUT: "SCOPED_OUT";
|
|
574
|
+
/**
|
|
575
|
+
* <p>The code changes could not be conclusively scoped because of a conflict in the scoping inputs.</p>
|
|
576
|
+
*/
|
|
577
|
+
readonly SCOPE_CONFLICT: "SCOPE_CONFLICT";
|
|
578
|
+
};
|
|
579
|
+
/**
|
|
580
|
+
* @public
|
|
581
|
+
*/
|
|
582
|
+
export type ScopeDecision = (typeof ScopeDecision)[keyof typeof ScopeDecision];
|
|
557
583
|
/**
|
|
558
584
|
* @public
|
|
559
585
|
* @enum
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type { AccessType, ArtifactType, AuthenticationProviderType, CleanUpStrategy, CodeRemediationStrategy, CodeRemediationTaskStatus, ConfidenceLevel, ContextType, DNSRecordType, DomainVerificationMethod, ErrorCode, FindingStatus, GitLabTokenType, IpAddressType, JobStatus, JobType, LogType, ManagementType, MembershipType, MembershipTypeFilter, NetworkTrafficRuleEffect, NetworkTrafficRuleType, PrivateConnectionStatus, PrivateConnectionType, Provider, ProviderType, ResourceConfigDnsResolution, ResourceType, RiskLevel, RiskType, SecurityRequirementArtifactFormat, SecurityRequirementPackImportStatus, SecurityRequirementPackStatus, SkillType, StepName, StepStatus, StrideCategory, TargetDomainStatus, TaskExecutionStatus, ThreatActor, ThreatSeverity, ThreatStatus, UserRole, ValidationMode, ValidationStatus } from "./enums";
|
|
1
|
+
import type { AccessType, ArtifactType, AuthenticationProviderType, CleanUpStrategy, CodeRemediationStrategy, CodeRemediationTaskStatus, ConfidenceLevel, ContextType, DNSRecordType, DomainVerificationMethod, ErrorCode, FindingStatus, GitLabTokenType, IpAddressType, JobStatus, JobType, LogType, ManagementType, MembershipType, MembershipTypeFilter, NetworkTrafficRuleEffect, NetworkTrafficRuleType, PrivateConnectionStatus, PrivateConnectionType, Provider, ProviderType, ResourceConfigDnsResolution, ResourceType, RiskLevel, RiskType, ScopeDecision, SecurityRequirementArtifactFormat, SecurityRequirementPackImportStatus, SecurityRequirementPackStatus, SkillType, StepName, StepStatus, StrideCategory, TargetDomainStatus, TaskExecutionStatus, ThreatActor, ThreatSeverity, ThreatStatus, UserRole, ValidationMode, ValidationStatus } from "./enums";
|
|
2
2
|
/**
|
|
3
3
|
* <p>The authentication configuration for an actor, specifying the provider type and credentials.</p>
|
|
4
4
|
* @public
|
|
@@ -1166,6 +1166,17 @@ export interface BatchDeletePentestsInput {
|
|
|
1166
1166
|
*/
|
|
1167
1167
|
agentSpaceId: string | undefined;
|
|
1168
1168
|
}
|
|
1169
|
+
/**
|
|
1170
|
+
* <p>The configuration that enables a pentest to run as part of a CI/CD pipeline, scoped to the code changes in each pipeline run.</p>
|
|
1171
|
+
* @public
|
|
1172
|
+
*/
|
|
1173
|
+
export interface CiCdConfiguration {
|
|
1174
|
+
/**
|
|
1175
|
+
* <p>Whether CI/CD pentesting is enabled for this pentest.</p>
|
|
1176
|
+
* @public
|
|
1177
|
+
*/
|
|
1178
|
+
enabled?: boolean | undefined;
|
|
1179
|
+
}
|
|
1169
1180
|
/**
|
|
1170
1181
|
* <p>The Amazon CloudWatch Logs configuration for pentest job logging.</p>
|
|
1171
1182
|
* @public
|
|
@@ -1387,6 +1398,11 @@ export interface Pentest {
|
|
|
1387
1398
|
* @public
|
|
1388
1399
|
*/
|
|
1389
1400
|
reportFilters?: ReportFilters | undefined;
|
|
1401
|
+
/**
|
|
1402
|
+
* <p>The CI/CD pentesting configuration for this pentest. Present when the pentest is set up to run from a CI/CD pipeline.</p>
|
|
1403
|
+
* @public
|
|
1404
|
+
*/
|
|
1405
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
1390
1406
|
/**
|
|
1391
1407
|
* <p>The date and time the pentest was created, in UTC format.</p>
|
|
1392
1408
|
* @public
|
|
@@ -2256,6 +2272,53 @@ export interface BatchGetPentestJobsInput {
|
|
|
2256
2272
|
*/
|
|
2257
2273
|
agentSpaceId: string | undefined;
|
|
2258
2274
|
}
|
|
2275
|
+
/**
|
|
2276
|
+
* <p>A code change in a CI/CD pipeline run that defines what a CI/CD pentest job tests. Each scope change identifies an integrated repository and the commit range for the change.</p>
|
|
2277
|
+
* @public
|
|
2278
|
+
*/
|
|
2279
|
+
export interface ScopeChange {
|
|
2280
|
+
/**
|
|
2281
|
+
* <p>The identifier of the integration for the source-code provider that hosts the repository.</p>
|
|
2282
|
+
* @public
|
|
2283
|
+
*/
|
|
2284
|
+
integrationId: string | undefined;
|
|
2285
|
+
/**
|
|
2286
|
+
* <p>The provider-specific identifier of the repository the change belongs to.</p>
|
|
2287
|
+
* @public
|
|
2288
|
+
*/
|
|
2289
|
+
providerResourceId: string | undefined;
|
|
2290
|
+
/**
|
|
2291
|
+
* <p>The commit SHA that the change is compared against. When omitted, the change is evaluated against the head commit alone.</p>
|
|
2292
|
+
* @public
|
|
2293
|
+
*/
|
|
2294
|
+
baseCommitSha?: string | undefined;
|
|
2295
|
+
/**
|
|
2296
|
+
* <p>The commit SHA at the tip of the change to be tested.</p>
|
|
2297
|
+
* @public
|
|
2298
|
+
*/
|
|
2299
|
+
headCommitSha: string | undefined;
|
|
2300
|
+
/**
|
|
2301
|
+
* <p>The identifier of the CI/CD pipeline run that triggered this pentest job.</p>
|
|
2302
|
+
* @public
|
|
2303
|
+
*/
|
|
2304
|
+
triggerRunId?: string | undefined;
|
|
2305
|
+
}
|
|
2306
|
+
/**
|
|
2307
|
+
* <p>The outcome of scoping a CI/CD pentest job's code changes, including the decision and the reason for it.</p>
|
|
2308
|
+
* @public
|
|
2309
|
+
*/
|
|
2310
|
+
export interface ScopeResult {
|
|
2311
|
+
/**
|
|
2312
|
+
* <p>The scoping decision for the job's code changes.</p>
|
|
2313
|
+
* @public
|
|
2314
|
+
*/
|
|
2315
|
+
decision: ScopeDecision | undefined;
|
|
2316
|
+
/**
|
|
2317
|
+
* <p>A human-readable explanation of the scoping decision.</p>
|
|
2318
|
+
* @public
|
|
2319
|
+
*/
|
|
2320
|
+
reason: string | undefined;
|
|
2321
|
+
}
|
|
2259
2322
|
/**
|
|
2260
2323
|
* <p>Represents a pentest job, which is an execution instance of a pentest. A pentest job progresses through preflight, static analysis, pentest, and finalizing steps.</p>
|
|
2261
2324
|
* @public
|
|
@@ -2387,7 +2450,7 @@ export interface PentestJob {
|
|
|
2387
2450
|
*/
|
|
2388
2451
|
maxTaskHours?: number | undefined;
|
|
2389
2452
|
/**
|
|
2390
|
-
* <p>The type of the pentest job. Valid values are FULL and
|
|
2453
|
+
* <p>The type of the pentest job. Valid values are FULL, REVALIDATION, and CICD.</p>
|
|
2391
2454
|
* @public
|
|
2392
2455
|
*/
|
|
2393
2456
|
jobType?: JobType | undefined;
|
|
@@ -2401,6 +2464,26 @@ export interface PentestJob {
|
|
|
2401
2464
|
* @public
|
|
2402
2465
|
*/
|
|
2403
2466
|
reportDestination?: ReportDestination | undefined;
|
|
2467
|
+
/**
|
|
2468
|
+
* <p>The URL to view this pentest job's findings report in the console.</p>
|
|
2469
|
+
* @public
|
|
2470
|
+
*/
|
|
2471
|
+
reportUrl?: string | undefined;
|
|
2472
|
+
/**
|
|
2473
|
+
* <p>The scoping outcome for this CI/CD pentest job. Present only for jobs of type CICD.</p>
|
|
2474
|
+
* @public
|
|
2475
|
+
*/
|
|
2476
|
+
scopeResult?: ScopeResult | undefined;
|
|
2477
|
+
/**
|
|
2478
|
+
* <p>The code changes that defined the scope of this CI/CD pentest job. Present only for jobs of type CICD.</p>
|
|
2479
|
+
* @public
|
|
2480
|
+
*/
|
|
2481
|
+
scopeChanges?: ScopeChange[] | undefined;
|
|
2482
|
+
/**
|
|
2483
|
+
* <p>The configuration that enables a pentest to run as part of a CI/CD pipeline, scoped to the code changes in each pipeline run.</p>
|
|
2484
|
+
* @public
|
|
2485
|
+
*/
|
|
2486
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
2404
2487
|
/**
|
|
2405
2488
|
* <p>The date and time the pentest job was created, in UTC format.</p>
|
|
2406
2489
|
* @public
|
|
@@ -4081,6 +4164,11 @@ export interface CreatePentestInput {
|
|
|
4081
4164
|
* @public
|
|
4082
4165
|
*/
|
|
4083
4166
|
reportFilters?: ReportFilters | undefined;
|
|
4167
|
+
/**
|
|
4168
|
+
* <p>The CI/CD pentesting configuration to apply to the pentest.</p>
|
|
4169
|
+
* @public
|
|
4170
|
+
*/
|
|
4171
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
4084
4172
|
}
|
|
4085
4173
|
/**
|
|
4086
4174
|
* <p>Output for the CreatePentest operation.</p>
|
|
@@ -4142,6 +4230,11 @@ export interface CreatePentestOutput {
|
|
|
4142
4230
|
* @public
|
|
4143
4231
|
*/
|
|
4144
4232
|
reportFilters?: ReportFilters | undefined;
|
|
4233
|
+
/**
|
|
4234
|
+
* <p>The CI/CD pentesting configuration applied to the pentest.</p>
|
|
4235
|
+
* @public
|
|
4236
|
+
*/
|
|
4237
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
4145
4238
|
}
|
|
4146
4239
|
/**
|
|
4147
4240
|
* <p>The configuration for a self-managed private connection.</p>
|
|
@@ -6470,6 +6563,11 @@ export interface ListPentestJobsForPentestInput {
|
|
|
6470
6563
|
* @public
|
|
6471
6564
|
*/
|
|
6472
6565
|
nextToken?: string | undefined;
|
|
6566
|
+
/**
|
|
6567
|
+
* <p>Filters the returned pentest jobs to only those of the specified job type.</p>
|
|
6568
|
+
* @public
|
|
6569
|
+
*/
|
|
6570
|
+
jobType?: JobType | undefined;
|
|
6473
6571
|
}
|
|
6474
6572
|
/**
|
|
6475
6573
|
* <p>Contains summary information about a pentest job.</p>
|
|
@@ -6506,6 +6604,16 @@ export interface PentestJobSummary {
|
|
|
6506
6604
|
* @public
|
|
6507
6605
|
*/
|
|
6508
6606
|
updatedAt?: Date | undefined;
|
|
6607
|
+
/**
|
|
6608
|
+
* <p>The type of the pentest job. Valid values are FULL, REVALIDATION, and CICD.</p>
|
|
6609
|
+
* @public
|
|
6610
|
+
*/
|
|
6611
|
+
jobType?: JobType | undefined;
|
|
6612
|
+
/**
|
|
6613
|
+
* <p>The URL to view this pentest job's findings report in the console.</p>
|
|
6614
|
+
* @public
|
|
6615
|
+
*/
|
|
6616
|
+
reportUrl?: string | undefined;
|
|
6509
6617
|
}
|
|
6510
6618
|
/**
|
|
6511
6619
|
* <p>Output for the ListPentestJobsForPentest operation.</p>
|
|
@@ -7605,7 +7713,7 @@ export interface StartPentestJobInput {
|
|
|
7605
7713
|
*/
|
|
7606
7714
|
pentestId: string | undefined;
|
|
7607
7715
|
/**
|
|
7608
|
-
* <p>The type of pentest job to start. Valid values are FULL and
|
|
7716
|
+
* <p>The type of pentest job to start. Valid values are FULL, REVALIDATION, and CICD. When set to REVALIDATION, the selectedFindingIds parameter is required. When set to CICD, the scopeChanges parameter defines the code changes to test.</p>
|
|
7609
7717
|
* @public
|
|
7610
7718
|
*/
|
|
7611
7719
|
jobType?: JobType | undefined;
|
|
@@ -7614,6 +7722,11 @@ export interface StartPentestJobInput {
|
|
|
7614
7722
|
* @public
|
|
7615
7723
|
*/
|
|
7616
7724
|
selectedFindingIds?: string[] | undefined;
|
|
7725
|
+
/**
|
|
7726
|
+
* <p>The code changes that define the scope of a CI/CD pentest job. Provide this when starting a job with jobType CICD to test only the changes in the current pipeline run.</p>
|
|
7727
|
+
* @public
|
|
7728
|
+
*/
|
|
7729
|
+
scopeChanges?: ScopeChange[] | undefined;
|
|
7617
7730
|
}
|
|
7618
7731
|
/**
|
|
7619
7732
|
* <p>Output for the StartPentestJob operation.</p>
|
|
@@ -8179,6 +8292,11 @@ export interface UpdatePentestInput {
|
|
|
8179
8292
|
* @public
|
|
8180
8293
|
*/
|
|
8181
8294
|
reportFilters?: ReportFilters | undefined;
|
|
8295
|
+
/**
|
|
8296
|
+
* <p>The updated CI/CD pentesting configuration to apply to the pentest.</p>
|
|
8297
|
+
* @public
|
|
8298
|
+
*/
|
|
8299
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
8182
8300
|
}
|
|
8183
8301
|
/**
|
|
8184
8302
|
* <p>Output for the UpdatePentest operation.</p>
|
|
@@ -8240,6 +8358,11 @@ export interface UpdatePentestOutput {
|
|
|
8240
8358
|
* @public
|
|
8241
8359
|
*/
|
|
8242
8360
|
reportFilters?: ReportFilters | undefined;
|
|
8361
|
+
/**
|
|
8362
|
+
* <p>The CI/CD pentesting configuration applied to the pentest.</p>
|
|
8363
|
+
* @public
|
|
8364
|
+
*/
|
|
8365
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
8243
8366
|
}
|
|
8244
8367
|
/**
|
|
8245
8368
|
* <p>Input for updating an existing threat.</p>
|
|
@@ -8489,116 +8612,3 @@ export interface UpdateThreatModelInput {
|
|
|
8489
8612
|
*/
|
|
8490
8613
|
reportDestination?: ReportDestination | undefined;
|
|
8491
8614
|
}
|
|
8492
|
-
/**
|
|
8493
|
-
* <p>Output for the UpdateThreatModel operation.</p>
|
|
8494
|
-
* @public
|
|
8495
|
-
*/
|
|
8496
|
-
export interface UpdateThreatModelOutput {
|
|
8497
|
-
/**
|
|
8498
|
-
* <p>The unique identifier of the threat model.</p>
|
|
8499
|
-
* @public
|
|
8500
|
-
*/
|
|
8501
|
-
threatModelId: string | undefined;
|
|
8502
|
-
/**
|
|
8503
|
-
* <p>The title of the threat model.</p>
|
|
8504
|
-
* @public
|
|
8505
|
-
*/
|
|
8506
|
-
title?: string | undefined;
|
|
8507
|
-
/**
|
|
8508
|
-
* <p>The unique identifier of the agent space that contains the threat model.</p>
|
|
8509
|
-
* @public
|
|
8510
|
-
*/
|
|
8511
|
-
agentSpaceId?: string | undefined;
|
|
8512
|
-
/**
|
|
8513
|
-
* <p>A description of the application or system being threat modeled.</p>
|
|
8514
|
-
* @public
|
|
8515
|
-
*/
|
|
8516
|
-
description?: string | undefined;
|
|
8517
|
-
/**
|
|
8518
|
-
* <p>The assets included in the threat model.</p>
|
|
8519
|
-
* @public
|
|
8520
|
-
*/
|
|
8521
|
-
assets?: Assets | undefined;
|
|
8522
|
-
/**
|
|
8523
|
-
* <p>The scoped documents for the agent to focus on during threat modeling.</p>
|
|
8524
|
-
* @public
|
|
8525
|
-
*/
|
|
8526
|
-
scopeDocs?: DocumentInfo[] | undefined;
|
|
8527
|
-
/**
|
|
8528
|
-
* <p>The IAM service role used for the threat model.</p>
|
|
8529
|
-
* @public
|
|
8530
|
-
*/
|
|
8531
|
-
serviceRole?: string | undefined;
|
|
8532
|
-
/**
|
|
8533
|
-
* <p>The CloudWatch Logs configuration for the threat model.</p>
|
|
8534
|
-
* @public
|
|
8535
|
-
*/
|
|
8536
|
-
logConfig?: CloudWatchLog | undefined;
|
|
8537
|
-
/**
|
|
8538
|
-
* <p>The date and time the threat model was created, in UTC format.</p>
|
|
8539
|
-
* @public
|
|
8540
|
-
*/
|
|
8541
|
-
createdAt?: Date | undefined;
|
|
8542
|
-
/**
|
|
8543
|
-
* <p>The date and time the threat model was last updated, in UTC format.</p>
|
|
8544
|
-
* @public
|
|
8545
|
-
*/
|
|
8546
|
-
updatedAt?: Date | undefined;
|
|
8547
|
-
/**
|
|
8548
|
-
* <p>The destination for publishing scan reports to an integrated document provider.</p>
|
|
8549
|
-
* @public
|
|
8550
|
-
*/
|
|
8551
|
-
reportDestination?: ReportDestination | undefined;
|
|
8552
|
-
}
|
|
8553
|
-
/**
|
|
8554
|
-
* <p>Input for verifying ownership for a registered target domain in an agent space.</p>
|
|
8555
|
-
* @public
|
|
8556
|
-
*/
|
|
8557
|
-
export interface VerifyTargetDomainInput {
|
|
8558
|
-
/**
|
|
8559
|
-
* <p>The unique identifier of the target domain to verify.</p>
|
|
8560
|
-
* @public
|
|
8561
|
-
*/
|
|
8562
|
-
targetDomainId: string | undefined;
|
|
8563
|
-
}
|
|
8564
|
-
/**
|
|
8565
|
-
* <p>Output for verifying ownership for a registered target domain in an agent space.</p>
|
|
8566
|
-
* @public
|
|
8567
|
-
*/
|
|
8568
|
-
export interface VerifyTargetDomainOutput {
|
|
8569
|
-
/**
|
|
8570
|
-
* <p>The unique identifier of the target domain.</p>
|
|
8571
|
-
* @public
|
|
8572
|
-
*/
|
|
8573
|
-
targetDomainId?: string | undefined;
|
|
8574
|
-
/**
|
|
8575
|
-
* <p>The domain name of the target domain.</p>
|
|
8576
|
-
* @public
|
|
8577
|
-
*/
|
|
8578
|
-
domainName?: string | undefined;
|
|
8579
|
-
/**
|
|
8580
|
-
* <p>The date and time the target domain was created, in UTC format.</p>
|
|
8581
|
-
* @public
|
|
8582
|
-
*/
|
|
8583
|
-
createdAt?: Date | undefined;
|
|
8584
|
-
/**
|
|
8585
|
-
* <p>The date and time the target domain was last updated, in UTC format.</p>
|
|
8586
|
-
* @public
|
|
8587
|
-
*/
|
|
8588
|
-
updatedAt?: Date | undefined;
|
|
8589
|
-
/**
|
|
8590
|
-
* <p>The date and time the target domain was verified, in UTC format.</p>
|
|
8591
|
-
* @public
|
|
8592
|
-
*/
|
|
8593
|
-
verifiedAt?: Date | undefined;
|
|
8594
|
-
/**
|
|
8595
|
-
* <p>The verification status of the target domain.</p>
|
|
8596
|
-
* @public
|
|
8597
|
-
*/
|
|
8598
|
-
status?: TargetDomainStatus | undefined;
|
|
8599
|
-
/**
|
|
8600
|
-
* <p>The reason for the current target domain verification status.</p>
|
|
8601
|
-
* @public
|
|
8602
|
-
*/
|
|
8603
|
-
verificationStatusReason?: string | undefined;
|
|
8604
|
-
}
|
|
@@ -0,0 +1,115 @@
|
|
|
1
|
+
import type { TargetDomainStatus } from "./enums";
|
|
2
|
+
import type { Assets, CloudWatchLog, DocumentInfo, ReportDestination } from "./models_0";
|
|
3
|
+
/**
|
|
4
|
+
* <p>Output for the UpdateThreatModel operation.</p>
|
|
5
|
+
* @public
|
|
6
|
+
*/
|
|
7
|
+
export interface UpdateThreatModelOutput {
|
|
8
|
+
/**
|
|
9
|
+
* <p>The unique identifier of the threat model.</p>
|
|
10
|
+
* @public
|
|
11
|
+
*/
|
|
12
|
+
threatModelId: string | undefined;
|
|
13
|
+
/**
|
|
14
|
+
* <p>The title of the threat model.</p>
|
|
15
|
+
* @public
|
|
16
|
+
*/
|
|
17
|
+
title?: string | undefined;
|
|
18
|
+
/**
|
|
19
|
+
* <p>The unique identifier of the agent space that contains the threat model.</p>
|
|
20
|
+
* @public
|
|
21
|
+
*/
|
|
22
|
+
agentSpaceId?: string | undefined;
|
|
23
|
+
/**
|
|
24
|
+
* <p>A description of the application or system being threat modeled.</p>
|
|
25
|
+
* @public
|
|
26
|
+
*/
|
|
27
|
+
description?: string | undefined;
|
|
28
|
+
/**
|
|
29
|
+
* <p>The assets included in the threat model.</p>
|
|
30
|
+
* @public
|
|
31
|
+
*/
|
|
32
|
+
assets?: Assets | undefined;
|
|
33
|
+
/**
|
|
34
|
+
* <p>The scoped documents for the agent to focus on during threat modeling.</p>
|
|
35
|
+
* @public
|
|
36
|
+
*/
|
|
37
|
+
scopeDocs?: DocumentInfo[] | undefined;
|
|
38
|
+
/**
|
|
39
|
+
* <p>The IAM service role used for the threat model.</p>
|
|
40
|
+
* @public
|
|
41
|
+
*/
|
|
42
|
+
serviceRole?: string | undefined;
|
|
43
|
+
/**
|
|
44
|
+
* <p>The CloudWatch Logs configuration for the threat model.</p>
|
|
45
|
+
* @public
|
|
46
|
+
*/
|
|
47
|
+
logConfig?: CloudWatchLog | undefined;
|
|
48
|
+
/**
|
|
49
|
+
* <p>The date and time the threat model was created, in UTC format.</p>
|
|
50
|
+
* @public
|
|
51
|
+
*/
|
|
52
|
+
createdAt?: Date | undefined;
|
|
53
|
+
/**
|
|
54
|
+
* <p>The date and time the threat model was last updated, in UTC format.</p>
|
|
55
|
+
* @public
|
|
56
|
+
*/
|
|
57
|
+
updatedAt?: Date | undefined;
|
|
58
|
+
/**
|
|
59
|
+
* <p>The destination for publishing scan reports to an integrated document provider.</p>
|
|
60
|
+
* @public
|
|
61
|
+
*/
|
|
62
|
+
reportDestination?: ReportDestination | undefined;
|
|
63
|
+
}
|
|
64
|
+
/**
|
|
65
|
+
* <p>Input for verifying ownership for a registered target domain in an agent space.</p>
|
|
66
|
+
* @public
|
|
67
|
+
*/
|
|
68
|
+
export interface VerifyTargetDomainInput {
|
|
69
|
+
/**
|
|
70
|
+
* <p>The unique identifier of the target domain to verify.</p>
|
|
71
|
+
* @public
|
|
72
|
+
*/
|
|
73
|
+
targetDomainId: string | undefined;
|
|
74
|
+
}
|
|
75
|
+
/**
|
|
76
|
+
* <p>Output for verifying ownership for a registered target domain in an agent space.</p>
|
|
77
|
+
* @public
|
|
78
|
+
*/
|
|
79
|
+
export interface VerifyTargetDomainOutput {
|
|
80
|
+
/**
|
|
81
|
+
* <p>The unique identifier of the target domain.</p>
|
|
82
|
+
* @public
|
|
83
|
+
*/
|
|
84
|
+
targetDomainId?: string | undefined;
|
|
85
|
+
/**
|
|
86
|
+
* <p>The domain name of the target domain.</p>
|
|
87
|
+
* @public
|
|
88
|
+
*/
|
|
89
|
+
domainName?: string | undefined;
|
|
90
|
+
/**
|
|
91
|
+
* <p>The date and time the target domain was created, in UTC format.</p>
|
|
92
|
+
* @public
|
|
93
|
+
*/
|
|
94
|
+
createdAt?: Date | undefined;
|
|
95
|
+
/**
|
|
96
|
+
* <p>The date and time the target domain was last updated, in UTC format.</p>
|
|
97
|
+
* @public
|
|
98
|
+
*/
|
|
99
|
+
updatedAt?: Date | undefined;
|
|
100
|
+
/**
|
|
101
|
+
* <p>The date and time the target domain was verified, in UTC format.</p>
|
|
102
|
+
* @public
|
|
103
|
+
*/
|
|
104
|
+
verifiedAt?: Date | undefined;
|
|
105
|
+
/**
|
|
106
|
+
* <p>The verification status of the target domain.</p>
|
|
107
|
+
* @public
|
|
108
|
+
*/
|
|
109
|
+
status?: TargetDomainStatus | undefined;
|
|
110
|
+
/**
|
|
111
|
+
* <p>The reason for the current target domain verification status.</p>
|
|
112
|
+
* @public
|
|
113
|
+
*/
|
|
114
|
+
verificationStatusReason?: string | undefined;
|
|
115
|
+
}
|
|
@@ -77,6 +77,7 @@ export declare var BitbucketRepositoryMetadata$: StaticStructureSchema;
|
|
|
77
77
|
export declare var BitbucketRepositoryResource$: StaticStructureSchema;
|
|
78
78
|
export declare var BitbucketResourceCapabilities$: StaticStructureSchema;
|
|
79
79
|
export declare var Category$: StaticStructureSchema;
|
|
80
|
+
export declare var CiCdConfiguration$: StaticStructureSchema;
|
|
80
81
|
export declare var CloudWatchLog$: StaticStructureSchema;
|
|
81
82
|
export declare var CodeLocation$: StaticStructureSchema;
|
|
82
83
|
export declare var CodeRemediationTask$: StaticStructureSchema;
|
|
@@ -231,6 +232,8 @@ export declare var PentestSummary$: StaticStructureSchema;
|
|
|
231
232
|
export declare var PrivateConnectionSummary$: StaticStructureSchema;
|
|
232
233
|
export declare var ReportDestination$: StaticStructureSchema;
|
|
233
234
|
export declare var ReportFilters$: StaticStructureSchema;
|
|
235
|
+
export declare var ScopeChange$: StaticStructureSchema;
|
|
236
|
+
export declare var ScopeResult$: StaticStructureSchema;
|
|
234
237
|
export declare var SecurityRequirementArtifact$: StaticStructureSchema;
|
|
235
238
|
export declare var SecurityRequirementPackSummary$: StaticStructureSchema;
|
|
236
239
|
export declare var SecurityRequirementSummary$: StaticStructureSchema;
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { MetadataBearer as __MetadataBearer } from "@smithy/types";
|
|
2
|
-
import { UpdateThreatModelInput
|
|
2
|
+
import { UpdateThreatModelInput } from "../models/models_0";
|
|
3
|
+
import { UpdateThreatModelOutput } from "../models/models_1";
|
|
3
4
|
export { __MetadataBearer };
|
|
4
5
|
export interface UpdateThreatModelCommandInput extends UpdateThreatModelInput {}
|
|
5
6
|
export interface UpdateThreatModelCommandOutput extends UpdateThreatModelOutput, __MetadataBearer {}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { MetadataBearer as __MetadataBearer } from "@smithy/types";
|
|
2
|
-
import { VerifyTargetDomainInput, VerifyTargetDomainOutput } from "../models/
|
|
2
|
+
import { VerifyTargetDomainInput, VerifyTargetDomainOutput } from "../models/models_1";
|
|
3
3
|
export { __MetadataBearer };
|
|
4
4
|
export interface VerifyTargetDomainCommandInput extends VerifyTargetDomainInput {}
|
|
5
5
|
export interface VerifyTargetDomainCommandOutput
|
|
@@ -10,4 +10,5 @@ export * from "./schemas/schemas_0";
|
|
|
10
10
|
export * from "./models/enums";
|
|
11
11
|
export * from "./models/errors";
|
|
12
12
|
export * from "./models/models_0";
|
|
13
|
+
export * from "./models/models_1";
|
|
13
14
|
export { SecurityAgentServiceException } from "./models/SecurityAgentServiceException";
|
|
@@ -175,10 +175,17 @@ export declare const ValidationStatus: {
|
|
|
175
175
|
};
|
|
176
176
|
export type ValidationStatus = (typeof ValidationStatus)[keyof typeof ValidationStatus];
|
|
177
177
|
export declare const JobType: {
|
|
178
|
+
readonly CICD: "CICD";
|
|
178
179
|
readonly FULL: "FULL";
|
|
179
180
|
readonly REVALIDATION: "REVALIDATION";
|
|
180
181
|
};
|
|
181
182
|
export type JobType = (typeof JobType)[keyof typeof JobType];
|
|
183
|
+
export declare const ScopeDecision: {
|
|
184
|
+
readonly IN_SCOPE: "IN_SCOPE";
|
|
185
|
+
readonly SCOPED_OUT: "SCOPED_OUT";
|
|
186
|
+
readonly SCOPE_CONFLICT: "SCOPE_CONFLICT";
|
|
187
|
+
};
|
|
188
|
+
export type ScopeDecision = (typeof ScopeDecision)[keyof typeof ScopeDecision];
|
|
182
189
|
export declare const DNSRecordType: {
|
|
183
190
|
readonly TXT: "TXT";
|
|
184
191
|
};
|
|
@@ -29,6 +29,7 @@ import {
|
|
|
29
29
|
ResourceType,
|
|
30
30
|
RiskLevel,
|
|
31
31
|
RiskType,
|
|
32
|
+
ScopeDecision,
|
|
32
33
|
SecurityRequirementArtifactFormat,
|
|
33
34
|
SecurityRequirementPackImportStatus,
|
|
34
35
|
SecurityRequirementPackStatus,
|
|
@@ -347,6 +348,9 @@ export interface BatchDeletePentestsInput {
|
|
|
347
348
|
pentestIds: string[] | undefined;
|
|
348
349
|
agentSpaceId: string | undefined;
|
|
349
350
|
}
|
|
351
|
+
export interface CiCdConfiguration {
|
|
352
|
+
enabled?: boolean | undefined;
|
|
353
|
+
}
|
|
350
354
|
export interface CloudWatchLog {
|
|
351
355
|
logGroup?: string | undefined;
|
|
352
356
|
logStream?: string | undefined;
|
|
@@ -396,6 +400,7 @@ export interface Pentest {
|
|
|
396
400
|
maxTaskHours?: number | undefined;
|
|
397
401
|
reportDestination?: ReportDestination | undefined;
|
|
398
402
|
reportFilters?: ReportFilters | undefined;
|
|
403
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
399
404
|
createdAt?: Date | undefined;
|
|
400
405
|
updatedAt?: Date | undefined;
|
|
401
406
|
}
|
|
@@ -597,6 +602,17 @@ export interface BatchGetPentestJobsInput {
|
|
|
597
602
|
pentestJobIds: string[] | undefined;
|
|
598
603
|
agentSpaceId: string | undefined;
|
|
599
604
|
}
|
|
605
|
+
export interface ScopeChange {
|
|
606
|
+
integrationId: string | undefined;
|
|
607
|
+
providerResourceId: string | undefined;
|
|
608
|
+
baseCommitSha?: string | undefined;
|
|
609
|
+
headCommitSha: string | undefined;
|
|
610
|
+
triggerRunId?: string | undefined;
|
|
611
|
+
}
|
|
612
|
+
export interface ScopeResult {
|
|
613
|
+
decision: ScopeDecision | undefined;
|
|
614
|
+
reason: string | undefined;
|
|
615
|
+
}
|
|
600
616
|
export interface PentestJob {
|
|
601
617
|
pentestJobId?: string | undefined;
|
|
602
618
|
pentestId?: string | undefined;
|
|
@@ -626,6 +642,10 @@ export interface PentestJob {
|
|
|
626
642
|
jobType?: JobType | undefined;
|
|
627
643
|
selectedFindingIds?: string[] | undefined;
|
|
628
644
|
reportDestination?: ReportDestination | undefined;
|
|
645
|
+
reportUrl?: string | undefined;
|
|
646
|
+
scopeResult?: ScopeResult | undefined;
|
|
647
|
+
scopeChanges?: ScopeChange[] | undefined;
|
|
648
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
629
649
|
createdAt?: Date | undefined;
|
|
630
650
|
updatedAt?: Date | undefined;
|
|
631
651
|
}
|
|
@@ -1048,6 +1068,7 @@ export interface CreatePentestInput {
|
|
|
1048
1068
|
maxTaskHours?: number | undefined;
|
|
1049
1069
|
reportDestination?: ReportDestination | undefined;
|
|
1050
1070
|
reportFilters?: ReportFilters | undefined;
|
|
1071
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
1051
1072
|
}
|
|
1052
1073
|
export interface CreatePentestOutput {
|
|
1053
1074
|
pentestId?: string | undefined;
|
|
@@ -1061,6 +1082,7 @@ export interface CreatePentestOutput {
|
|
|
1061
1082
|
agentSpaceId?: string | undefined;
|
|
1062
1083
|
reportDestination?: ReportDestination | undefined;
|
|
1063
1084
|
reportFilters?: ReportFilters | undefined;
|
|
1085
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
1064
1086
|
}
|
|
1065
1087
|
export interface SelfManagedInput {
|
|
1066
1088
|
resourceConfigurationId: string | undefined;
|
|
@@ -1750,6 +1772,7 @@ export interface ListPentestJobsForPentestInput {
|
|
|
1750
1772
|
pentestId: string | undefined;
|
|
1751
1773
|
agentSpaceId: string | undefined;
|
|
1752
1774
|
nextToken?: string | undefined;
|
|
1775
|
+
jobType?: JobType | undefined;
|
|
1753
1776
|
}
|
|
1754
1777
|
export interface PentestJobSummary {
|
|
1755
1778
|
pentestJobId: string | undefined;
|
|
@@ -1758,6 +1781,8 @@ export interface PentestJobSummary {
|
|
|
1758
1781
|
status?: JobStatus | undefined;
|
|
1759
1782
|
createdAt?: Date | undefined;
|
|
1760
1783
|
updatedAt?: Date | undefined;
|
|
1784
|
+
jobType?: JobType | undefined;
|
|
1785
|
+
reportUrl?: string | undefined;
|
|
1761
1786
|
}
|
|
1762
1787
|
export interface ListPentestJobsForPentestOutput {
|
|
1763
1788
|
pentestJobSummaries?: PentestJobSummary[] | undefined;
|
|
@@ -2015,6 +2040,7 @@ export interface StartPentestJobInput {
|
|
|
2015
2040
|
pentestId: string | undefined;
|
|
2016
2041
|
jobType?: JobType | undefined;
|
|
2017
2042
|
selectedFindingIds?: string[] | undefined;
|
|
2043
|
+
scopeChanges?: ScopeChange[] | undefined;
|
|
2018
2044
|
}
|
|
2019
2045
|
export interface StartPentestJobOutput {
|
|
2020
2046
|
title?: string | undefined;
|
|
@@ -2139,6 +2165,7 @@ export interface UpdatePentestInput {
|
|
|
2139
2165
|
maxTaskHours?: number | undefined;
|
|
2140
2166
|
reportDestination?: ReportDestination | undefined;
|
|
2141
2167
|
reportFilters?: ReportFilters | undefined;
|
|
2168
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
2142
2169
|
}
|
|
2143
2170
|
export interface UpdatePentestOutput {
|
|
2144
2171
|
pentestId?: string | undefined;
|
|
@@ -2152,6 +2179,7 @@ export interface UpdatePentestOutput {
|
|
|
2152
2179
|
agentSpaceId?: string | undefined;
|
|
2153
2180
|
reportDestination?: ReportDestination | undefined;
|
|
2154
2181
|
reportFilters?: ReportFilters | undefined;
|
|
2182
|
+
cicdConfiguration?: CiCdConfiguration | undefined;
|
|
2155
2183
|
}
|
|
2156
2184
|
export interface UpdateThreatInput {
|
|
2157
2185
|
threatId: string | undefined;
|
|
@@ -2205,28 +2233,3 @@ export interface UpdateThreatModelInput {
|
|
|
2205
2233
|
logConfig?: CloudWatchLog | undefined;
|
|
2206
2234
|
reportDestination?: ReportDestination | undefined;
|
|
2207
2235
|
}
|
|
2208
|
-
export interface UpdateThreatModelOutput {
|
|
2209
|
-
threatModelId: string | undefined;
|
|
2210
|
-
title?: string | undefined;
|
|
2211
|
-
agentSpaceId?: string | undefined;
|
|
2212
|
-
description?: string | undefined;
|
|
2213
|
-
assets?: Assets | undefined;
|
|
2214
|
-
scopeDocs?: DocumentInfo[] | undefined;
|
|
2215
|
-
serviceRole?: string | undefined;
|
|
2216
|
-
logConfig?: CloudWatchLog | undefined;
|
|
2217
|
-
createdAt?: Date | undefined;
|
|
2218
|
-
updatedAt?: Date | undefined;
|
|
2219
|
-
reportDestination?: ReportDestination | undefined;
|
|
2220
|
-
}
|
|
2221
|
-
export interface VerifyTargetDomainInput {
|
|
2222
|
-
targetDomainId: string | undefined;
|
|
2223
|
-
}
|
|
2224
|
-
export interface VerifyTargetDomainOutput {
|
|
2225
|
-
targetDomainId?: string | undefined;
|
|
2226
|
-
domainName?: string | undefined;
|
|
2227
|
-
createdAt?: Date | undefined;
|
|
2228
|
-
updatedAt?: Date | undefined;
|
|
2229
|
-
verifiedAt?: Date | undefined;
|
|
2230
|
-
status?: TargetDomainStatus | undefined;
|
|
2231
|
-
verificationStatusReason?: string | undefined;
|
|
2232
|
-
}
|