@aws-sdk/client-securityagent 3.1141.0 → 3.1142.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -541,6 +541,10 @@ export type ValidationStatus = (typeof ValidationStatus)[keyof typeof Validation
541
541
  * @enum
542
542
  */
543
543
  export declare const JobType: {
544
+ /**
545
+ * <p>A CI/CD pentest job that tests only the code changes in a single pipeline run, as determined by the scope changes supplied when the job is started.</p>
546
+ */
547
+ readonly CICD: "CICD";
544
548
  /**
545
549
  * <p>A full pentest job that executes all phases including scanning, managed execution, and guided exploration.</p>
546
550
  */
@@ -554,6 +558,28 @@ export declare const JobType: {
554
558
  * @public
555
559
  */
556
560
  export type JobType = (typeof JobType)[keyof typeof JobType];
561
+ /**
562
+ * @public
563
+ * @enum
564
+ */
565
+ export declare const ScopeDecision: {
566
+ /**
567
+ * <p>The code changes are in scope and are tested by the pentest job.</p>
568
+ */
569
+ readonly IN_SCOPE: "IN_SCOPE";
570
+ /**
571
+ * <p>The code changes are out of scope and are not tested. No pentest is run for the changes.</p>
572
+ */
573
+ readonly SCOPED_OUT: "SCOPED_OUT";
574
+ /**
575
+ * <p>The code changes could not be conclusively scoped because of a conflict in the scoping inputs.</p>
576
+ */
577
+ readonly SCOPE_CONFLICT: "SCOPE_CONFLICT";
578
+ };
579
+ /**
580
+ * @public
581
+ */
582
+ export type ScopeDecision = (typeof ScopeDecision)[keyof typeof ScopeDecision];
557
583
  /**
558
584
  * @public
559
585
  * @enum
@@ -1,4 +1,4 @@
1
- import type { AccessType, ArtifactType, AuthenticationProviderType, CleanUpStrategy, CodeRemediationStrategy, CodeRemediationTaskStatus, ConfidenceLevel, ContextType, DNSRecordType, DomainVerificationMethod, ErrorCode, FindingStatus, GitLabTokenType, IpAddressType, JobStatus, JobType, LogType, ManagementType, MembershipType, MembershipTypeFilter, NetworkTrafficRuleEffect, NetworkTrafficRuleType, PrivateConnectionStatus, PrivateConnectionType, Provider, ProviderType, ResourceConfigDnsResolution, ResourceType, RiskLevel, RiskType, SecurityRequirementArtifactFormat, SecurityRequirementPackImportStatus, SecurityRequirementPackStatus, SkillType, StepName, StepStatus, StrideCategory, TargetDomainStatus, TaskExecutionStatus, ThreatActor, ThreatSeverity, ThreatStatus, UserRole, ValidationMode, ValidationStatus } from "./enums";
1
+ import type { AccessType, ArtifactType, AuthenticationProviderType, CleanUpStrategy, CodeRemediationStrategy, CodeRemediationTaskStatus, ConfidenceLevel, ContextType, DNSRecordType, DomainVerificationMethod, ErrorCode, FindingStatus, GitLabTokenType, IpAddressType, JobStatus, JobType, LogType, ManagementType, MembershipType, MembershipTypeFilter, NetworkTrafficRuleEffect, NetworkTrafficRuleType, PrivateConnectionStatus, PrivateConnectionType, Provider, ProviderType, ResourceConfigDnsResolution, ResourceType, RiskLevel, RiskType, ScopeDecision, SecurityRequirementArtifactFormat, SecurityRequirementPackImportStatus, SecurityRequirementPackStatus, SkillType, StepName, StepStatus, StrideCategory, TargetDomainStatus, TaskExecutionStatus, ThreatActor, ThreatSeverity, ThreatStatus, UserRole, ValidationMode, ValidationStatus } from "./enums";
2
2
  /**
3
3
  * <p>The authentication configuration for an actor, specifying the provider type and credentials.</p>
4
4
  * @public
@@ -1166,6 +1166,17 @@ export interface BatchDeletePentestsInput {
1166
1166
  */
1167
1167
  agentSpaceId: string | undefined;
1168
1168
  }
1169
+ /**
1170
+ * <p>The configuration that enables a pentest to run as part of a CI/CD pipeline, scoped to the code changes in each pipeline run.</p>
1171
+ * @public
1172
+ */
1173
+ export interface CiCdConfiguration {
1174
+ /**
1175
+ * <p>Whether CI/CD pentesting is enabled for this pentest.</p>
1176
+ * @public
1177
+ */
1178
+ enabled?: boolean | undefined;
1179
+ }
1169
1180
  /**
1170
1181
  * <p>The Amazon CloudWatch Logs configuration for pentest job logging.</p>
1171
1182
  * @public
@@ -1387,6 +1398,11 @@ export interface Pentest {
1387
1398
  * @public
1388
1399
  */
1389
1400
  reportFilters?: ReportFilters | undefined;
1401
+ /**
1402
+ * <p>The CI/CD pentesting configuration for this pentest. Present when the pentest is set up to run from a CI/CD pipeline.</p>
1403
+ * @public
1404
+ */
1405
+ cicdConfiguration?: CiCdConfiguration | undefined;
1390
1406
  /**
1391
1407
  * <p>The date and time the pentest was created, in UTC format.</p>
1392
1408
  * @public
@@ -2256,6 +2272,53 @@ export interface BatchGetPentestJobsInput {
2256
2272
  */
2257
2273
  agentSpaceId: string | undefined;
2258
2274
  }
2275
+ /**
2276
+ * <p>A code change in a CI/CD pipeline run that defines what a CI/CD pentest job tests. Each scope change identifies an integrated repository and the commit range for the change.</p>
2277
+ * @public
2278
+ */
2279
+ export interface ScopeChange {
2280
+ /**
2281
+ * <p>The identifier of the integration for the source-code provider that hosts the repository.</p>
2282
+ * @public
2283
+ */
2284
+ integrationId: string | undefined;
2285
+ /**
2286
+ * <p>The provider-specific identifier of the repository the change belongs to.</p>
2287
+ * @public
2288
+ */
2289
+ providerResourceId: string | undefined;
2290
+ /**
2291
+ * <p>The commit SHA that the change is compared against. When omitted, the change is evaluated against the head commit alone.</p>
2292
+ * @public
2293
+ */
2294
+ baseCommitSha?: string | undefined;
2295
+ /**
2296
+ * <p>The commit SHA at the tip of the change to be tested.</p>
2297
+ * @public
2298
+ */
2299
+ headCommitSha: string | undefined;
2300
+ /**
2301
+ * <p>The identifier of the CI/CD pipeline run that triggered this pentest job.</p>
2302
+ * @public
2303
+ */
2304
+ triggerRunId?: string | undefined;
2305
+ }
2306
+ /**
2307
+ * <p>The outcome of scoping a CI/CD pentest job's code changes, including the decision and the reason for it.</p>
2308
+ * @public
2309
+ */
2310
+ export interface ScopeResult {
2311
+ /**
2312
+ * <p>The scoping decision for the job's code changes.</p>
2313
+ * @public
2314
+ */
2315
+ decision: ScopeDecision | undefined;
2316
+ /**
2317
+ * <p>A human-readable explanation of the scoping decision.</p>
2318
+ * @public
2319
+ */
2320
+ reason: string | undefined;
2321
+ }
2259
2322
  /**
2260
2323
  * <p>Represents a pentest job, which is an execution instance of a pentest. A pentest job progresses through preflight, static analysis, pentest, and finalizing steps.</p>
2261
2324
  * @public
@@ -2387,7 +2450,7 @@ export interface PentestJob {
2387
2450
  */
2388
2451
  maxTaskHours?: number | undefined;
2389
2452
  /**
2390
- * <p>The type of the pentest job. Valid values are FULL and REVALIDATION.</p>
2453
+ * <p>The type of the pentest job. Valid values are FULL, REVALIDATION, and CICD.</p>
2391
2454
  * @public
2392
2455
  */
2393
2456
  jobType?: JobType | undefined;
@@ -2401,6 +2464,26 @@ export interface PentestJob {
2401
2464
  * @public
2402
2465
  */
2403
2466
  reportDestination?: ReportDestination | undefined;
2467
+ /**
2468
+ * <p>The URL to view this pentest job's findings report in the console.</p>
2469
+ * @public
2470
+ */
2471
+ reportUrl?: string | undefined;
2472
+ /**
2473
+ * <p>The scoping outcome for this CI/CD pentest job. Present only for jobs of type CICD.</p>
2474
+ * @public
2475
+ */
2476
+ scopeResult?: ScopeResult | undefined;
2477
+ /**
2478
+ * <p>The code changes that defined the scope of this CI/CD pentest job. Present only for jobs of type CICD.</p>
2479
+ * @public
2480
+ */
2481
+ scopeChanges?: ScopeChange[] | undefined;
2482
+ /**
2483
+ * <p>The configuration that enables a pentest to run as part of a CI/CD pipeline, scoped to the code changes in each pipeline run.</p>
2484
+ * @public
2485
+ */
2486
+ cicdConfiguration?: CiCdConfiguration | undefined;
2404
2487
  /**
2405
2488
  * <p>The date and time the pentest job was created, in UTC format.</p>
2406
2489
  * @public
@@ -4081,6 +4164,11 @@ export interface CreatePentestInput {
4081
4164
  * @public
4082
4165
  */
4083
4166
  reportFilters?: ReportFilters | undefined;
4167
+ /**
4168
+ * <p>The CI/CD pentesting configuration to apply to the pentest.</p>
4169
+ * @public
4170
+ */
4171
+ cicdConfiguration?: CiCdConfiguration | undefined;
4084
4172
  }
4085
4173
  /**
4086
4174
  * <p>Output for the CreatePentest operation.</p>
@@ -4142,6 +4230,11 @@ export interface CreatePentestOutput {
4142
4230
  * @public
4143
4231
  */
4144
4232
  reportFilters?: ReportFilters | undefined;
4233
+ /**
4234
+ * <p>The CI/CD pentesting configuration applied to the pentest.</p>
4235
+ * @public
4236
+ */
4237
+ cicdConfiguration?: CiCdConfiguration | undefined;
4145
4238
  }
4146
4239
  /**
4147
4240
  * <p>The configuration for a self-managed private connection.</p>
@@ -6470,6 +6563,11 @@ export interface ListPentestJobsForPentestInput {
6470
6563
  * @public
6471
6564
  */
6472
6565
  nextToken?: string | undefined;
6566
+ /**
6567
+ * <p>Filters the returned pentest jobs to only those of the specified job type.</p>
6568
+ * @public
6569
+ */
6570
+ jobType?: JobType | undefined;
6473
6571
  }
6474
6572
  /**
6475
6573
  * <p>Contains summary information about a pentest job.</p>
@@ -6506,6 +6604,16 @@ export interface PentestJobSummary {
6506
6604
  * @public
6507
6605
  */
6508
6606
  updatedAt?: Date | undefined;
6607
+ /**
6608
+ * <p>The type of the pentest job. Valid values are FULL, REVALIDATION, and CICD.</p>
6609
+ * @public
6610
+ */
6611
+ jobType?: JobType | undefined;
6612
+ /**
6613
+ * <p>The URL to view this pentest job's findings report in the console.</p>
6614
+ * @public
6615
+ */
6616
+ reportUrl?: string | undefined;
6509
6617
  }
6510
6618
  /**
6511
6619
  * <p>Output for the ListPentestJobsForPentest operation.</p>
@@ -7605,7 +7713,7 @@ export interface StartPentestJobInput {
7605
7713
  */
7606
7714
  pentestId: string | undefined;
7607
7715
  /**
7608
- * <p>The type of pentest job to start. Valid values are FULL and REVALIDATION. When set to REVALIDATION, the selectedFindingIds parameter is required.</p>
7716
+ * <p>The type of pentest job to start. Valid values are FULL, REVALIDATION, and CICD. When set to REVALIDATION, the selectedFindingIds parameter is required. When set to CICD, the scopeChanges parameter defines the code changes to test.</p>
7609
7717
  * @public
7610
7718
  */
7611
7719
  jobType?: JobType | undefined;
@@ -7614,6 +7722,11 @@ export interface StartPentestJobInput {
7614
7722
  * @public
7615
7723
  */
7616
7724
  selectedFindingIds?: string[] | undefined;
7725
+ /**
7726
+ * <p>The code changes that define the scope of a CI/CD pentest job. Provide this when starting a job with jobType CICD to test only the changes in the current pipeline run.</p>
7727
+ * @public
7728
+ */
7729
+ scopeChanges?: ScopeChange[] | undefined;
7617
7730
  }
7618
7731
  /**
7619
7732
  * <p>Output for the StartPentestJob operation.</p>
@@ -8179,6 +8292,11 @@ export interface UpdatePentestInput {
8179
8292
  * @public
8180
8293
  */
8181
8294
  reportFilters?: ReportFilters | undefined;
8295
+ /**
8296
+ * <p>The updated CI/CD pentesting configuration to apply to the pentest.</p>
8297
+ * @public
8298
+ */
8299
+ cicdConfiguration?: CiCdConfiguration | undefined;
8182
8300
  }
8183
8301
  /**
8184
8302
  * <p>Output for the UpdatePentest operation.</p>
@@ -8240,6 +8358,11 @@ export interface UpdatePentestOutput {
8240
8358
  * @public
8241
8359
  */
8242
8360
  reportFilters?: ReportFilters | undefined;
8361
+ /**
8362
+ * <p>The CI/CD pentesting configuration applied to the pentest.</p>
8363
+ * @public
8364
+ */
8365
+ cicdConfiguration?: CiCdConfiguration | undefined;
8243
8366
  }
8244
8367
  /**
8245
8368
  * <p>Input for updating an existing threat.</p>
@@ -8489,116 +8612,3 @@ export interface UpdateThreatModelInput {
8489
8612
  */
8490
8613
  reportDestination?: ReportDestination | undefined;
8491
8614
  }
8492
- /**
8493
- * <p>Output for the UpdateThreatModel operation.</p>
8494
- * @public
8495
- */
8496
- export interface UpdateThreatModelOutput {
8497
- /**
8498
- * <p>The unique identifier of the threat model.</p>
8499
- * @public
8500
- */
8501
- threatModelId: string | undefined;
8502
- /**
8503
- * <p>The title of the threat model.</p>
8504
- * @public
8505
- */
8506
- title?: string | undefined;
8507
- /**
8508
- * <p>The unique identifier of the agent space that contains the threat model.</p>
8509
- * @public
8510
- */
8511
- agentSpaceId?: string | undefined;
8512
- /**
8513
- * <p>A description of the application or system being threat modeled.</p>
8514
- * @public
8515
- */
8516
- description?: string | undefined;
8517
- /**
8518
- * <p>The assets included in the threat model.</p>
8519
- * @public
8520
- */
8521
- assets?: Assets | undefined;
8522
- /**
8523
- * <p>The scoped documents for the agent to focus on during threat modeling.</p>
8524
- * @public
8525
- */
8526
- scopeDocs?: DocumentInfo[] | undefined;
8527
- /**
8528
- * <p>The IAM service role used for the threat model.</p>
8529
- * @public
8530
- */
8531
- serviceRole?: string | undefined;
8532
- /**
8533
- * <p>The CloudWatch Logs configuration for the threat model.</p>
8534
- * @public
8535
- */
8536
- logConfig?: CloudWatchLog | undefined;
8537
- /**
8538
- * <p>The date and time the threat model was created, in UTC format.</p>
8539
- * @public
8540
- */
8541
- createdAt?: Date | undefined;
8542
- /**
8543
- * <p>The date and time the threat model was last updated, in UTC format.</p>
8544
- * @public
8545
- */
8546
- updatedAt?: Date | undefined;
8547
- /**
8548
- * <p>The destination for publishing scan reports to an integrated document provider.</p>
8549
- * @public
8550
- */
8551
- reportDestination?: ReportDestination | undefined;
8552
- }
8553
- /**
8554
- * <p>Input for verifying ownership for a registered target domain in an agent space.</p>
8555
- * @public
8556
- */
8557
- export interface VerifyTargetDomainInput {
8558
- /**
8559
- * <p>The unique identifier of the target domain to verify.</p>
8560
- * @public
8561
- */
8562
- targetDomainId: string | undefined;
8563
- }
8564
- /**
8565
- * <p>Output for verifying ownership for a registered target domain in an agent space.</p>
8566
- * @public
8567
- */
8568
- export interface VerifyTargetDomainOutput {
8569
- /**
8570
- * <p>The unique identifier of the target domain.</p>
8571
- * @public
8572
- */
8573
- targetDomainId?: string | undefined;
8574
- /**
8575
- * <p>The domain name of the target domain.</p>
8576
- * @public
8577
- */
8578
- domainName?: string | undefined;
8579
- /**
8580
- * <p>The date and time the target domain was created, in UTC format.</p>
8581
- * @public
8582
- */
8583
- createdAt?: Date | undefined;
8584
- /**
8585
- * <p>The date and time the target domain was last updated, in UTC format.</p>
8586
- * @public
8587
- */
8588
- updatedAt?: Date | undefined;
8589
- /**
8590
- * <p>The date and time the target domain was verified, in UTC format.</p>
8591
- * @public
8592
- */
8593
- verifiedAt?: Date | undefined;
8594
- /**
8595
- * <p>The verification status of the target domain.</p>
8596
- * @public
8597
- */
8598
- status?: TargetDomainStatus | undefined;
8599
- /**
8600
- * <p>The reason for the current target domain verification status.</p>
8601
- * @public
8602
- */
8603
- verificationStatusReason?: string | undefined;
8604
- }
@@ -0,0 +1,115 @@
1
+ import type { TargetDomainStatus } from "./enums";
2
+ import type { Assets, CloudWatchLog, DocumentInfo, ReportDestination } from "./models_0";
3
+ /**
4
+ * <p>Output for the UpdateThreatModel operation.</p>
5
+ * @public
6
+ */
7
+ export interface UpdateThreatModelOutput {
8
+ /**
9
+ * <p>The unique identifier of the threat model.</p>
10
+ * @public
11
+ */
12
+ threatModelId: string | undefined;
13
+ /**
14
+ * <p>The title of the threat model.</p>
15
+ * @public
16
+ */
17
+ title?: string | undefined;
18
+ /**
19
+ * <p>The unique identifier of the agent space that contains the threat model.</p>
20
+ * @public
21
+ */
22
+ agentSpaceId?: string | undefined;
23
+ /**
24
+ * <p>A description of the application or system being threat modeled.</p>
25
+ * @public
26
+ */
27
+ description?: string | undefined;
28
+ /**
29
+ * <p>The assets included in the threat model.</p>
30
+ * @public
31
+ */
32
+ assets?: Assets | undefined;
33
+ /**
34
+ * <p>The scoped documents for the agent to focus on during threat modeling.</p>
35
+ * @public
36
+ */
37
+ scopeDocs?: DocumentInfo[] | undefined;
38
+ /**
39
+ * <p>The IAM service role used for the threat model.</p>
40
+ * @public
41
+ */
42
+ serviceRole?: string | undefined;
43
+ /**
44
+ * <p>The CloudWatch Logs configuration for the threat model.</p>
45
+ * @public
46
+ */
47
+ logConfig?: CloudWatchLog | undefined;
48
+ /**
49
+ * <p>The date and time the threat model was created, in UTC format.</p>
50
+ * @public
51
+ */
52
+ createdAt?: Date | undefined;
53
+ /**
54
+ * <p>The date and time the threat model was last updated, in UTC format.</p>
55
+ * @public
56
+ */
57
+ updatedAt?: Date | undefined;
58
+ /**
59
+ * <p>The destination for publishing scan reports to an integrated document provider.</p>
60
+ * @public
61
+ */
62
+ reportDestination?: ReportDestination | undefined;
63
+ }
64
+ /**
65
+ * <p>Input for verifying ownership for a registered target domain in an agent space.</p>
66
+ * @public
67
+ */
68
+ export interface VerifyTargetDomainInput {
69
+ /**
70
+ * <p>The unique identifier of the target domain to verify.</p>
71
+ * @public
72
+ */
73
+ targetDomainId: string | undefined;
74
+ }
75
+ /**
76
+ * <p>Output for verifying ownership for a registered target domain in an agent space.</p>
77
+ * @public
78
+ */
79
+ export interface VerifyTargetDomainOutput {
80
+ /**
81
+ * <p>The unique identifier of the target domain.</p>
82
+ * @public
83
+ */
84
+ targetDomainId?: string | undefined;
85
+ /**
86
+ * <p>The domain name of the target domain.</p>
87
+ * @public
88
+ */
89
+ domainName?: string | undefined;
90
+ /**
91
+ * <p>The date and time the target domain was created, in UTC format.</p>
92
+ * @public
93
+ */
94
+ createdAt?: Date | undefined;
95
+ /**
96
+ * <p>The date and time the target domain was last updated, in UTC format.</p>
97
+ * @public
98
+ */
99
+ updatedAt?: Date | undefined;
100
+ /**
101
+ * <p>The date and time the target domain was verified, in UTC format.</p>
102
+ * @public
103
+ */
104
+ verifiedAt?: Date | undefined;
105
+ /**
106
+ * <p>The verification status of the target domain.</p>
107
+ * @public
108
+ */
109
+ status?: TargetDomainStatus | undefined;
110
+ /**
111
+ * <p>The reason for the current target domain verification status.</p>
112
+ * @public
113
+ */
114
+ verificationStatusReason?: string | undefined;
115
+ }
@@ -77,6 +77,7 @@ export declare var BitbucketRepositoryMetadata$: StaticStructureSchema;
77
77
  export declare var BitbucketRepositoryResource$: StaticStructureSchema;
78
78
  export declare var BitbucketResourceCapabilities$: StaticStructureSchema;
79
79
  export declare var Category$: StaticStructureSchema;
80
+ export declare var CiCdConfiguration$: StaticStructureSchema;
80
81
  export declare var CloudWatchLog$: StaticStructureSchema;
81
82
  export declare var CodeLocation$: StaticStructureSchema;
82
83
  export declare var CodeRemediationTask$: StaticStructureSchema;
@@ -231,6 +232,8 @@ export declare var PentestSummary$: StaticStructureSchema;
231
232
  export declare var PrivateConnectionSummary$: StaticStructureSchema;
232
233
  export declare var ReportDestination$: StaticStructureSchema;
233
234
  export declare var ReportFilters$: StaticStructureSchema;
235
+ export declare var ScopeChange$: StaticStructureSchema;
236
+ export declare var ScopeResult$: StaticStructureSchema;
234
237
  export declare var SecurityRequirementArtifact$: StaticStructureSchema;
235
238
  export declare var SecurityRequirementPackSummary$: StaticStructureSchema;
236
239
  export declare var SecurityRequirementSummary$: StaticStructureSchema;
@@ -1,5 +1,6 @@
1
1
  import { MetadataBearer as __MetadataBearer } from "@smithy/types";
2
- import { UpdateThreatModelInput, UpdateThreatModelOutput } from "../models/models_0";
2
+ import { UpdateThreatModelInput } from "../models/models_0";
3
+ import { UpdateThreatModelOutput } from "../models/models_1";
3
4
  export { __MetadataBearer };
4
5
  export interface UpdateThreatModelCommandInput extends UpdateThreatModelInput {}
5
6
  export interface UpdateThreatModelCommandOutput extends UpdateThreatModelOutput, __MetadataBearer {}
@@ -1,5 +1,5 @@
1
1
  import { MetadataBearer as __MetadataBearer } from "@smithy/types";
2
- import { VerifyTargetDomainInput, VerifyTargetDomainOutput } from "../models/models_0";
2
+ import { VerifyTargetDomainInput, VerifyTargetDomainOutput } from "../models/models_1";
3
3
  export { __MetadataBearer };
4
4
  export interface VerifyTargetDomainCommandInput extends VerifyTargetDomainInput {}
5
5
  export interface VerifyTargetDomainCommandOutput
@@ -10,4 +10,5 @@ export * from "./schemas/schemas_0";
10
10
  export * from "./models/enums";
11
11
  export * from "./models/errors";
12
12
  export * from "./models/models_0";
13
+ export * from "./models/models_1";
13
14
  export { SecurityAgentServiceException } from "./models/SecurityAgentServiceException";
@@ -175,10 +175,17 @@ export declare const ValidationStatus: {
175
175
  };
176
176
  export type ValidationStatus = (typeof ValidationStatus)[keyof typeof ValidationStatus];
177
177
  export declare const JobType: {
178
+ readonly CICD: "CICD";
178
179
  readonly FULL: "FULL";
179
180
  readonly REVALIDATION: "REVALIDATION";
180
181
  };
181
182
  export type JobType = (typeof JobType)[keyof typeof JobType];
183
+ export declare const ScopeDecision: {
184
+ readonly IN_SCOPE: "IN_SCOPE";
185
+ readonly SCOPED_OUT: "SCOPED_OUT";
186
+ readonly SCOPE_CONFLICT: "SCOPE_CONFLICT";
187
+ };
188
+ export type ScopeDecision = (typeof ScopeDecision)[keyof typeof ScopeDecision];
182
189
  export declare const DNSRecordType: {
183
190
  readonly TXT: "TXT";
184
191
  };
@@ -29,6 +29,7 @@ import {
29
29
  ResourceType,
30
30
  RiskLevel,
31
31
  RiskType,
32
+ ScopeDecision,
32
33
  SecurityRequirementArtifactFormat,
33
34
  SecurityRequirementPackImportStatus,
34
35
  SecurityRequirementPackStatus,
@@ -347,6 +348,9 @@ export interface BatchDeletePentestsInput {
347
348
  pentestIds: string[] | undefined;
348
349
  agentSpaceId: string | undefined;
349
350
  }
351
+ export interface CiCdConfiguration {
352
+ enabled?: boolean | undefined;
353
+ }
350
354
  export interface CloudWatchLog {
351
355
  logGroup?: string | undefined;
352
356
  logStream?: string | undefined;
@@ -396,6 +400,7 @@ export interface Pentest {
396
400
  maxTaskHours?: number | undefined;
397
401
  reportDestination?: ReportDestination | undefined;
398
402
  reportFilters?: ReportFilters | undefined;
403
+ cicdConfiguration?: CiCdConfiguration | undefined;
399
404
  createdAt?: Date | undefined;
400
405
  updatedAt?: Date | undefined;
401
406
  }
@@ -597,6 +602,17 @@ export interface BatchGetPentestJobsInput {
597
602
  pentestJobIds: string[] | undefined;
598
603
  agentSpaceId: string | undefined;
599
604
  }
605
+ export interface ScopeChange {
606
+ integrationId: string | undefined;
607
+ providerResourceId: string | undefined;
608
+ baseCommitSha?: string | undefined;
609
+ headCommitSha: string | undefined;
610
+ triggerRunId?: string | undefined;
611
+ }
612
+ export interface ScopeResult {
613
+ decision: ScopeDecision | undefined;
614
+ reason: string | undefined;
615
+ }
600
616
  export interface PentestJob {
601
617
  pentestJobId?: string | undefined;
602
618
  pentestId?: string | undefined;
@@ -626,6 +642,10 @@ export interface PentestJob {
626
642
  jobType?: JobType | undefined;
627
643
  selectedFindingIds?: string[] | undefined;
628
644
  reportDestination?: ReportDestination | undefined;
645
+ reportUrl?: string | undefined;
646
+ scopeResult?: ScopeResult | undefined;
647
+ scopeChanges?: ScopeChange[] | undefined;
648
+ cicdConfiguration?: CiCdConfiguration | undefined;
629
649
  createdAt?: Date | undefined;
630
650
  updatedAt?: Date | undefined;
631
651
  }
@@ -1048,6 +1068,7 @@ export interface CreatePentestInput {
1048
1068
  maxTaskHours?: number | undefined;
1049
1069
  reportDestination?: ReportDestination | undefined;
1050
1070
  reportFilters?: ReportFilters | undefined;
1071
+ cicdConfiguration?: CiCdConfiguration | undefined;
1051
1072
  }
1052
1073
  export interface CreatePentestOutput {
1053
1074
  pentestId?: string | undefined;
@@ -1061,6 +1082,7 @@ export interface CreatePentestOutput {
1061
1082
  agentSpaceId?: string | undefined;
1062
1083
  reportDestination?: ReportDestination | undefined;
1063
1084
  reportFilters?: ReportFilters | undefined;
1085
+ cicdConfiguration?: CiCdConfiguration | undefined;
1064
1086
  }
1065
1087
  export interface SelfManagedInput {
1066
1088
  resourceConfigurationId: string | undefined;
@@ -1750,6 +1772,7 @@ export interface ListPentestJobsForPentestInput {
1750
1772
  pentestId: string | undefined;
1751
1773
  agentSpaceId: string | undefined;
1752
1774
  nextToken?: string | undefined;
1775
+ jobType?: JobType | undefined;
1753
1776
  }
1754
1777
  export interface PentestJobSummary {
1755
1778
  pentestJobId: string | undefined;
@@ -1758,6 +1781,8 @@ export interface PentestJobSummary {
1758
1781
  status?: JobStatus | undefined;
1759
1782
  createdAt?: Date | undefined;
1760
1783
  updatedAt?: Date | undefined;
1784
+ jobType?: JobType | undefined;
1785
+ reportUrl?: string | undefined;
1761
1786
  }
1762
1787
  export interface ListPentestJobsForPentestOutput {
1763
1788
  pentestJobSummaries?: PentestJobSummary[] | undefined;
@@ -2015,6 +2040,7 @@ export interface StartPentestJobInput {
2015
2040
  pentestId: string | undefined;
2016
2041
  jobType?: JobType | undefined;
2017
2042
  selectedFindingIds?: string[] | undefined;
2043
+ scopeChanges?: ScopeChange[] | undefined;
2018
2044
  }
2019
2045
  export interface StartPentestJobOutput {
2020
2046
  title?: string | undefined;
@@ -2139,6 +2165,7 @@ export interface UpdatePentestInput {
2139
2165
  maxTaskHours?: number | undefined;
2140
2166
  reportDestination?: ReportDestination | undefined;
2141
2167
  reportFilters?: ReportFilters | undefined;
2168
+ cicdConfiguration?: CiCdConfiguration | undefined;
2142
2169
  }
2143
2170
  export interface UpdatePentestOutput {
2144
2171
  pentestId?: string | undefined;
@@ -2152,6 +2179,7 @@ export interface UpdatePentestOutput {
2152
2179
  agentSpaceId?: string | undefined;
2153
2180
  reportDestination?: ReportDestination | undefined;
2154
2181
  reportFilters?: ReportFilters | undefined;
2182
+ cicdConfiguration?: CiCdConfiguration | undefined;
2155
2183
  }
2156
2184
  export interface UpdateThreatInput {
2157
2185
  threatId: string | undefined;
@@ -2205,28 +2233,3 @@ export interface UpdateThreatModelInput {
2205
2233
  logConfig?: CloudWatchLog | undefined;
2206
2234
  reportDestination?: ReportDestination | undefined;
2207
2235
  }
2208
- export interface UpdateThreatModelOutput {
2209
- threatModelId: string | undefined;
2210
- title?: string | undefined;
2211
- agentSpaceId?: string | undefined;
2212
- description?: string | undefined;
2213
- assets?: Assets | undefined;
2214
- scopeDocs?: DocumentInfo[] | undefined;
2215
- serviceRole?: string | undefined;
2216
- logConfig?: CloudWatchLog | undefined;
2217
- createdAt?: Date | undefined;
2218
- updatedAt?: Date | undefined;
2219
- reportDestination?: ReportDestination | undefined;
2220
- }
2221
- export interface VerifyTargetDomainInput {
2222
- targetDomainId: string | undefined;
2223
- }
2224
- export interface VerifyTargetDomainOutput {
2225
- targetDomainId?: string | undefined;
2226
- domainName?: string | undefined;
2227
- createdAt?: Date | undefined;
2228
- updatedAt?: Date | undefined;
2229
- verifiedAt?: Date | undefined;
2230
- status?: TargetDomainStatus | undefined;
2231
- verificationStatusReason?: string | undefined;
2232
- }