@aws-sdk/client-securityagent 3.1141.0 → 3.1143.0

package/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import type { AccessType, ArtifactType, AuthenticationProviderType, CleanUpStrategy, CodeRemediationStrategy, CodeRemediationTaskStatus, ConfidenceLevel, ContextType, DNSRecordType, DomainVerificationMethod, ErrorCode, FindingStatus, GitLabTokenType, IpAddressType, JobStatus, JobType, LogType, ManagementType, MembershipType, MembershipTypeFilter, NetworkTrafficRuleEffect, NetworkTrafficRuleType, PrivateConnectionStatus, PrivateConnectionType, Provider, ProviderType, ResourceConfigDnsResolution, ResourceType, RiskLevel, RiskType, SecurityRequirementArtifactFormat, SecurityRequirementPackImportStatus, SecurityRequirementPackStatus, SkillType, StepName, StepStatus, StrideCategory, TargetDomainStatus, TaskExecutionStatus, ThreatActor, ThreatSeverity, ThreatStatus, UserRole, ValidationMode, ValidationStatus } from "./enums";
+import type { AccessType, ArtifactType, AuthenticationProviderType, CleanUpStrategy, CodeRemediationStrategy, CodeRemediationTaskStatus, ConfidenceLevel, ContextType, DNSRecordType, DomainVerificationMethod, ErrorCode, FindingStatus, GitLabTokenType, IpAddressType, JobStatus, JobType, LogType, ManagementType, MembershipType, MembershipTypeFilter, NetworkTrafficRuleEffect, NetworkTrafficRuleType, PrivateConnectionStatus, PrivateConnectionType, Provider, ProviderType, ResourceConfigDnsResolution, ResourceType, RiskLevel, RiskType, ScopeDecision, SecurityRequirementArtifactFormat, SecurityRequirementPackImportStatus, SecurityRequirementPackStatus, SkillType, StepName, StepStatus, StrideCategory, TargetDomainStatus, TaskExecutionStatus, ThreatActor, ThreatSeverity, ThreatStatus, UserRole, ValidationMode, ValidationStatus, WebhookAction } from "./enums";
 /**
  * <p>The authentication configuration for an actor, specifying the provider type and credentials.</p>
  * @public
@@ -974,6 +974,100 @@ export interface Assets {
      */
     trustedCaCertificates?: TrustedCaCertificate[] | undefined;
 }
+/**
+ * <p>Connection details for an Azure DevOps integration.</p>
+ * @public
+ */
+export interface AzureDevOpsIntegrationInput {
+    /**
+     * <p>The OAuth 2.0 authorization code returned to your redirect URL after the connection is authorized.</p>
+     * @public
+     */
+    code: string | undefined;
+    /**
+     * <p>The CSRF state value returned by <code>InitiateProviderRegistration</code> and echoed back on the authorization redirect.</p>
+     * @public
+     */
+    state: string | undefined;
+    /**
+     * <p>The name of the Azure DevOps organization to connect, for example <code>my-org</code>.</p>
+     * @public
+     */
+    organizationName: string | undefined;
+}
+/**
+ * <p>Metadata for an integrated Azure DevOps repository.</p>
+ * @public
+ */
+export interface AzureDevOpsRepositoryMetadata {
+    /**
+     * <p>Name of the resource e.g. repository name, etc.</p>
+     * @public
+     */
+    name: string | undefined;
+    /**
+     * <p>Provider Id of the resource e.g. GitHub repository id, etc.</p>
+     * @public
+     */
+    providerResourceId: string | undefined;
+    /**
+     * <p>The name of the Azure DevOps organization that owns the repository.</p>
+     * @public
+     */
+    organization: string | undefined;
+    /**
+     * <p>The name of the Azure DevOps project that contains the repository.</p>
+     * @public
+     */
+    project?: string | undefined;
+    /**
+     * <p>The GUID of the Azure DevOps project that contains the repository.</p>
+     * @public
+     */
+    projectId?: string | undefined;
+    /**
+     * <p>Defines the visibility level of provider resources. PRIVATE indicates restricted access, while PUBLIC indicates open access.</p>
+     * @public
+     */
+    accessType?: AccessType | undefined;
+}
+/**
+ * <p>An Azure DevOps repository integrated as a resource.</p>
+ * @public
+ */
+export interface AzureDevOpsRepositoryResource {
+    /**
+     * <p>Name of the resource e.g. repository name, etc.</p>
+     * @public
+     */
+    name: string | undefined;
+    /**
+     * <p>The name of the Azure DevOps organization that owns the repository.</p>
+     * @public
+     */
+    organization: string | undefined;
+    /**
+     * <p>The name of the Azure DevOps project that contains the repository.</p>
+     * @public
+     */
+    project?: string | undefined;
+}
+/**
+ * <p>Capabilities for an integrated Azure DevOps repository.</p>
+ * @public
+ */
+export interface AzureDevOpsResourceCapabilities {
+    /**
+     * <p>Whether to post code review comments on pull requests.</p>
+     * @public
+     */
+    leaveComments?: boolean | undefined;
+    /**
+     * <p>Whether to create pull requests with automated fixes.</p>
+     * @public
+     */
+    remediateCode?: boolean | undefined;
+}
 /**
  * <p>Contains information about a successfully created security requirement.</p>
  * @public
@@ -1166,6 +1260,17 @@ export interface BatchDeletePentestsInput {
      */
     agentSpaceId: string | undefined;
 }
+/**
+ * <p>The configuration that enables a pentest to run as part of a CI/CD pipeline, scoped to the code changes in each pipeline run.</p>
+ * @public
+ */
+export interface CiCdConfiguration {
+    /**
+     * <p>Whether CI/CD pentesting is enabled for this pentest.</p>
+     * @public
+     */
+    enabled?: boolean | undefined;
+}
 /**
  * <p>The Amazon CloudWatch Logs configuration for pentest job logging.</p>
  * @public
@@ -1387,6 +1492,11 @@ export interface Pentest {
      * @public
      */
     reportFilters?: ReportFilters | undefined;
+    /**
+     * <p>The CI/CD pentesting configuration for this pentest. Present when the pentest is set up to run from a CI/CD pipeline.</p>
+     * @public
+     */
+    cicdConfiguration?: CiCdConfiguration | undefined;
     /**
      * <p>The date and time the pentest was created, in UTC format.</p>
      * @public
@@ -2256,6 +2366,53 @@ export interface BatchGetPentestJobsInput {
      */
     agentSpaceId: string | undefined;
 }
+/**
+ * <p>A code change in a CI/CD pipeline run that defines what a CI/CD pentest job tests. Each scope change identifies an integrated repository and the commit range for the change.</p>
+ * @public
+ */
+export interface ScopeChange {
+    /**
+     * <p>The identifier of the integration for the source-code provider that hosts the repository.</p>
+     * @public
+     */
+    integrationId: string | undefined;
+    /**
+     * <p>The provider-specific identifier of the repository the change belongs to.</p>
+     * @public
+     */
+    providerResourceId: string | undefined;
+    /**
+     * <p>The commit SHA that the change is compared against. When omitted, the change is evaluated against the head commit alone.</p>
+     * @public
+     */
+    baseCommitSha?: string | undefined;
+    /**
+     * <p>The commit SHA at the tip of the change to be tested.</p>
+     * @public
+     */
+    headCommitSha: string | undefined;
+    /**
+     * <p>The identifier of the CI/CD pipeline run that triggered this pentest job.</p>
+     * @public
+     */
+    triggerRunId?: string | undefined;
+}
+/**
+ * <p>The outcome of scoping a CI/CD pentest job's code changes, including the decision and the reason for it.</p>
+ * @public
+ */
+export interface ScopeResult {
+    /**
+     * <p>The scoping decision for the job's code changes.</p>
+     * @public
+     */
+    decision: ScopeDecision | undefined;
+    /**
+     * <p>A human-readable explanation of the scoping decision.</p>
+     * @public
+     */
+    reason: string | undefined;
+}
 /**
  * <p>Represents a pentest job, which is an execution instance of a pentest. A pentest job progresses through preflight, static analysis, pentest, and finalizing steps.</p>
  * @public
@@ -2387,7 +2544,7 @@ export interface PentestJob {
      */
     maxTaskHours?: number | undefined;
     /**
-     * <p>The type of the pentest job. Valid values are FULL and REVALIDATION.</p>
+     * <p>The type of the pentest job. Valid values are FULL, REVALIDATION, and CICD.</p>
      * @public
      */
     jobType?: JobType | undefined;
@@ -2401,6 +2558,26 @@ export interface PentestJob {
      * @public
      */
     reportDestination?: ReportDestination | undefined;
+    /**
+     * <p>The URL to view this pentest job's findings report in the console.</p>
+     * @public
+     */
+    reportUrl?: string | undefined;
+    /**
+     * <p>The scoping outcome for this CI/CD pentest job. Present only for jobs of type CICD.</p>
+     * @public
+     */
+    scopeResult?: ScopeResult | undefined;
+    /**
+     * <p>The code changes that defined the scope of this CI/CD pentest job. Present only for jobs of type CICD.</p>
+     * @public
+     */
+    scopeChanges?: ScopeChange[] | undefined;
+    /**
+     * <p>The configuration that enables a pentest to run as part of a CI/CD pipeline, scoped to the code changes in each pipeline run.</p>
+     * @public
+     */
+    cicdConfiguration?: CiCdConfiguration | undefined;
     /**
      * <p>The date and time the pentest job was created, in UTC format.</p>
      * @public
@@ -3310,6 +3487,27 @@ export interface BatchUpdateSecurityRequirementsOutput {
      */
     errors: BatchSecurityRequirementError[] | undefined;
 }
+/**
+ * <p>Connection details for a self-managed Bitbucket Data Center integration.</p>
+ * @public
+ */
+export interface BitbucketDataCenterIntegrationInput {
+    /**
+     * <p>The HTTPS URL of your Bitbucket Data Center instance, for example <code>https://bitbucket.example.com</code>.</p>
+     * @public
+     */
+    targetUrl: string | undefined;
+    /**
+     * <p>The OAuth 2.0 authorization code returned to your redirect URL after the connection is authorized.</p>
+     * @public
+     */
+    code: string | undefined;
+    /**
+     * <p>The CSRF state value returned by <code>InitiateProviderRegistration</code> and echoed back on the authorization redirect.</p>
+     * @public
+     */
+    state: string | undefined;
+}
 /**
  * <p>The configuration for creating a Bitbucket integration.</p>
  * @public
@@ -3814,7 +4012,7 @@ export interface GitLabIntegrationInput {
  * <p>The provider-specific input for creating an integration. This is a union type that contains provider-specific configuration.</p>
  * @public
  */
-export type ProviderInput = ProviderInput.BitbucketMember | ProviderInput.ConfluenceMember | ProviderInput.GithubMember | ProviderInput.GitlabMember | ProviderInput.$UnknownMember;
+export type ProviderInput = ProviderInput.AzureDevOpsMember | ProviderInput.BitbucketMember | ProviderInput.BitbucketDataCenterMember | ProviderInput.ConfluenceMember | ProviderInput.GithubMember | ProviderInput.GitlabMember | ProviderInput.$UnknownMember;
 /**
  * @public
  */
@@ -3828,6 +4026,8 @@ export declare namespace ProviderInput {
         gitlab?: never;
         bitbucket?: never;
         confluence?: never;
+        azureDevOps?: never;
+        bitbucketDataCenter?: never;
         $unknown?: never;
     }
     /**
@@ -3839,6 +4039,8 @@ export declare namespace ProviderInput {
         gitlab: GitLabIntegrationInput;
         bitbucket?: never;
         confluence?: never;
+        azureDevOps?: never;
+        bitbucketDataCenter?: never;
         $unknown?: never;
     }
     /**
@@ -3850,6 +4052,8 @@ export declare namespace ProviderInput {
         gitlab?: never;
         bitbucket: BitbucketIntegrationInput;
         confluence?: never;
+        azureDevOps?: never;
+        bitbucketDataCenter?: never;
         $unknown?: never;
     }
     /**
@@ -3861,6 +4065,34 @@ export declare namespace ProviderInput {
         gitlab?: never;
         bitbucket?: never;
         confluence: ConfluenceIntegrationInput;
+        azureDevOps?: never;
+        bitbucketDataCenter?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The Azure DevOps-specific input for creating an integration.</p>
+     * @public
+     */
+    interface AzureDevOpsMember {
+        github?: never;
+        gitlab?: never;
+        bitbucket?: never;
+        confluence?: never;
+        azureDevOps: AzureDevOpsIntegrationInput;
+        bitbucketDataCenter?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The Bitbucket Data Center-specific input for creating an integration.</p>
+     * @public
+     */
+    interface BitbucketDataCenterMember {
+        github?: never;
+        gitlab?: never;
+        bitbucket?: never;
+        confluence?: never;
+        azureDevOps?: never;
+        bitbucketDataCenter: BitbucketDataCenterIntegrationInput;
         $unknown?: never;
     }
     /**
@@ -3871,6 +4103,8 @@ export declare namespace ProviderInput {
         gitlab?: never;
         bitbucket?: never;
         confluence?: never;
+        azureDevOps?: never;
+        bitbucketDataCenter?: never;
         $unknown: [string, any];
     }
     /**
@@ -3882,6 +4116,8 @@ export declare namespace ProviderInput {
         gitlab: (value: GitLabIntegrationInput) => T;
         bitbucket: (value: BitbucketIntegrationInput) => T;
         confluence: (value: ConfluenceIntegrationInput) => T;
+        azureDevOps: (value: AzureDevOpsIntegrationInput) => T;
+        bitbucketDataCenter: (value: BitbucketDataCenterIntegrationInput) => T;
         _: (name: string, value: any) => T;
     }
 }
@@ -3890,7 +4126,7 @@ export declare namespace ProviderInput {
  */
 export interface CreateIntegrationInput {
     /**
-     * <p>The integration provider. Currently, only GITHUB is supported.</p>
+     * <p>The integration provider.</p>
      * @public
      */
     provider: Provider | undefined;
@@ -4081,6 +4317,11 @@ export interface CreatePentestInput {
      * @public
      */
     reportFilters?: ReportFilters | undefined;
+    /**
+     * <p>The CI/CD pentesting configuration to apply to the pentest.</p>
+     * @public
+     */
+    cicdConfiguration?: CiCdConfiguration | undefined;
 }
 /**
  * <p>Output for the CreatePentest operation.</p>
@@ -4142,6 +4383,11 @@ export interface CreatePentestOutput {
      * @public
      */
     reportFilters?: ReportFilters | undefined;
+    /**
+     * <p>The CI/CD pentesting configuration applied to the pentest.</p>
+     * @public
+     */
+    cicdConfiguration?: CiCdConfiguration | undefined;
 }
 /**
  * <p>The configuration for a self-managed private connection.</p>
@@ -5239,6 +5485,11 @@ export interface GetIntegrationOutput {
      * @public
      */
     targetUrl?: string | undefined;
+    /**
+     * <p>The payload URL of the integration's webhook, once it has been created. The signing secret is never returned on a read.</p>
+     * @public
+     */
+    webhookUrl?: string | undefined;
     /**
      * <p>The name of the private connection used to reach the integration's self-hosted instance over private networking, if one is configured.</p>
      * @public
@@ -5515,10 +5766,30 @@ export interface ImportSecurityRequirementsOutput {
  */
 export interface InitiateProviderRegistrationInput {
     /**
-     * <p>The provider to initiate registration with. Currently, only GITHUB is supported.</p>
+     * <p>The provider to initiate registration with.</p>
      * @public
      */
     provider: Provider | undefined;
+    /**
+     * <p>The HTTPS URL of a self-managed provider instance. Omit for SaaS providers.</p>
+     * @public
+     */
+    targetUrl?: string | undefined;
+    /**
+     * <p>The name of the organization to connect.</p>
+     * @public
+     */
+    organizationName?: string | undefined;
+    /**
+     * <p>The client ID of the OAuth application registered on your self-managed provider instance.</p>
+     * @public
+     */
+    clientId?: string | undefined;
+    /**
+     * <p>The client secret of the OAuth application registered on your self-managed provider instance.</p>
+     * @public
+     */
+    clientSecret?: string | undefined;
 }
 /**
  * @public
@@ -5539,7 +5810,7 @@ export interface InitiateProviderRegistrationOutput {
  * <p>Represents an integrated resource from a third-party provider. This is a union type that contains provider-specific resource information.</p>
  * @public
  */
-export type IntegratedResource = IntegratedResource.BitbucketRepositoryMember | IntegratedResource.ConfluenceDocumentMember | IntegratedResource.GithubRepositoryMember | IntegratedResource.GitlabRepositoryMember | IntegratedResource.$UnknownMember;
+export type IntegratedResource = IntegratedResource.AzureDevOpsRepositoryMember | IntegratedResource.BitbucketRepositoryMember | IntegratedResource.ConfluenceDocumentMember | IntegratedResource.GithubRepositoryMember | IntegratedResource.GitlabRepositoryMember | IntegratedResource.$UnknownMember;
 /**
  * @public
  */
@@ -5553,6 +5824,7 @@ export declare namespace IntegratedResource {
         gitlabRepository?: never;
         bitbucketRepository?: never;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown?: never;
     }
     /**
@@ -5564,6 +5836,7 @@ export declare namespace IntegratedResource {
         gitlabRepository: GitLabRepositoryResource;
         bitbucketRepository?: never;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown?: never;
     }
     /**
@@ -5575,6 +5848,7 @@ export declare namespace IntegratedResource {
         gitlabRepository?: never;
         bitbucketRepository: BitbucketRepositoryResource;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown?: never;
     }
     /**
@@ -5586,6 +5860,19 @@ export declare namespace IntegratedResource {
         gitlabRepository?: never;
         bitbucketRepository?: never;
         confluenceDocument: ConfluenceDocumentResource;
+        azureDevOpsRepository?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The Azure DevOps repository resource information.</p>
+     * @public
+     */
+    interface AzureDevOpsRepositoryMember {
+        githubRepository?: never;
+        gitlabRepository?: never;
+        bitbucketRepository?: never;
+        confluenceDocument?: never;
+        azureDevOpsRepository: AzureDevOpsRepositoryResource;
         $unknown?: never;
     }
     /**
@@ -5596,6 +5883,7 @@ export declare namespace IntegratedResource {
         gitlabRepository?: never;
         bitbucketRepository?: never;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown: [string, any];
     }
     /**
@@ -5607,6 +5895,7 @@ export declare namespace IntegratedResource {
         gitlabRepository: (value: GitLabRepositoryResource) => T;
         bitbucketRepository: (value: BitbucketRepositoryResource) => T;
         confluenceDocument: (value: ConfluenceDocumentResource) => T;
+        azureDevOpsRepository: (value: AzureDevOpsRepositoryResource) => T;
         _: (name: string, value: any) => T;
     }
 }
@@ -5614,7 +5903,7 @@ export declare namespace IntegratedResource {
  * <p>The capabilities for an integrated resource from a third-party provider. This is a union type that contains provider-specific capabilities.</p>
  * @public
  */
-export type ProviderResourceCapabilities = ProviderResourceCapabilities.BitbucketMember | ProviderResourceCapabilities.ConfluenceMember | ProviderResourceCapabilities.GithubMember | ProviderResourceCapabilities.GitlabMember | ProviderResourceCapabilities.$UnknownMember;
+export type ProviderResourceCapabilities = ProviderResourceCapabilities.AzureDevOpsMember | ProviderResourceCapabilities.BitbucketMember | ProviderResourceCapabilities.ConfluenceMember | ProviderResourceCapabilities.GithubMember | ProviderResourceCapabilities.GitlabMember | ProviderResourceCapabilities.$UnknownMember;
 /**
  * @public
  */
@@ -5628,6 +5917,7 @@ export declare namespace ProviderResourceCapabilities {
         gitlab?: never;
         bitbucket?: never;
         confluence?: never;
+        azureDevOps?: never;
         $unknown?: never;
     }
     /**
@@ -5639,6 +5929,7 @@ export declare namespace ProviderResourceCapabilities {
         gitlab: GitLabResourceCapabilities;
         bitbucket?: never;
         confluence?: never;
+        azureDevOps?: never;
         $unknown?: never;
     }
     /**
@@ -5650,6 +5941,7 @@ export declare namespace ProviderResourceCapabilities {
         gitlab?: never;
         bitbucket: BitbucketResourceCapabilities;
         confluence?: never;
+        azureDevOps?: never;
         $unknown?: never;
     }
     /**
@@ -5661,6 +5953,19 @@ export declare namespace ProviderResourceCapabilities {
         gitlab?: never;
         bitbucket?: never;
         confluence: ConfluenceResourceCapabilities;
+        azureDevOps?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The Azure DevOps-specific resource capabilities.</p>
+     * @public
+     */
+    interface AzureDevOpsMember {
+        github?: never;
+        gitlab?: never;
+        bitbucket?: never;
+        confluence?: never;
+        azureDevOps: AzureDevOpsResourceCapabilities;
         $unknown?: never;
     }
     /**
@@ -5671,6 +5976,7 @@ export declare namespace ProviderResourceCapabilities {
         gitlab?: never;
         bitbucket?: never;
         confluence?: never;
+        azureDevOps?: never;
         $unknown: [string, any];
     }
     /**
@@ -5682,6 +5988,7 @@ export declare namespace ProviderResourceCapabilities {
         gitlab: (value: GitLabResourceCapabilities) => T;
         bitbucket: (value: BitbucketResourceCapabilities) => T;
         confluence: (value: ConfluenceResourceCapabilities) => T;
+        azureDevOps: (value: AzureDevOpsResourceCapabilities) => T;
         _: (name: string, value: any) => T;
     }
 }
@@ -5705,7 +6012,7 @@ export interface IntegratedResourceInputItem {
  * <p>Contains metadata about an integrated resource. This is a union type that contains provider-specific metadata.</p>
  * @public
  */
-export type IntegratedResourceMetadata = IntegratedResourceMetadata.BitbucketRepositoryMember | IntegratedResourceMetadata.ConfluenceDocumentMember | IntegratedResourceMetadata.GithubRepositoryMember | IntegratedResourceMetadata.GitlabRepositoryMember | IntegratedResourceMetadata.$UnknownMember;
+export type IntegratedResourceMetadata = IntegratedResourceMetadata.AzureDevOpsRepositoryMember | IntegratedResourceMetadata.BitbucketRepositoryMember | IntegratedResourceMetadata.ConfluenceDocumentMember | IntegratedResourceMetadata.GithubRepositoryMember | IntegratedResourceMetadata.GitlabRepositoryMember | IntegratedResourceMetadata.$UnknownMember;
 /**
  * @public
  */
@@ -5719,6 +6026,7 @@ export declare namespace IntegratedResourceMetadata {
         gitlabRepository?: never;
         bitbucketRepository?: never;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown?: never;
     }
     /**
@@ -5730,6 +6038,7 @@ export declare namespace IntegratedResourceMetadata {
         gitlabRepository: GitLabRepositoryMetadata;
         bitbucketRepository?: never;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown?: never;
     }
     /**
@@ -5741,6 +6050,7 @@ export declare namespace IntegratedResourceMetadata {
         gitlabRepository?: never;
         bitbucketRepository: BitbucketRepositoryMetadata;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown?: never;
     }
     /**
@@ -5752,6 +6062,19 @@ export declare namespace IntegratedResourceMetadata {
         gitlabRepository?: never;
         bitbucketRepository?: never;
         confluenceDocument: ConfluenceDocumentMetadata;
+        azureDevOpsRepository?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The Azure DevOps repository metadata.</p>
+     * @public
+     */
+    interface AzureDevOpsRepositoryMember {
+        githubRepository?: never;
+        gitlabRepository?: never;
+        bitbucketRepository?: never;
+        confluenceDocument?: never;
+        azureDevOpsRepository: AzureDevOpsRepositoryMetadata;
         $unknown?: never;
     }
     /**
@@ -5762,6 +6085,7 @@ export declare namespace IntegratedResourceMetadata {
         gitlabRepository?: never;
         bitbucketRepository?: never;
         confluenceDocument?: never;
+        azureDevOpsRepository?: never;
         $unknown: [string, any];
     }
     /**
@@ -5773,6 +6097,7 @@ export declare namespace IntegratedResourceMetadata {
         gitlabRepository: (value: GitLabRepositoryMetadata) => T;
         bitbucketRepository: (value: BitbucketRepositoryMetadata) => T;
         confluenceDocument: (value: ConfluenceDocumentMetadata) => T;
+        azureDevOpsRepository: (value: AzureDevOpsRepositoryMetadata) => T;
         _: (name: string, value: any) => T;
     }
 }
@@ -5897,6 +6222,11 @@ export interface IntegrationSummary {
      * @public
      */
     targetUrl?: string | undefined;
+    /**
+     * <p>The payload URL of the integration's webhook, once it has been created. The signing secret is never returned on a read.</p>
+     * @public
+     */
+    webhookUrl?: string | undefined;
     /**
      * <p>The name of the private connection used to reach the integration's self-hosted instance over private networking, if one is configured.</p>
      * @public
@@ -5918,6 +6248,43 @@ export interface ListIntegrationsOutput {
      */
     nextToken?: string | undefined;
 }
+/**
+ * <p>Input for creating or rotating an integration's webhook.</p>
+ * @public
+ */
+export interface UpdateIntegrationInput {
+    /**
+     * <p>The ID of the integration whose webhook you want to create or rotate.</p>
+     * @public
+     */
+    integrationId: string | undefined;
+    /**
+     * <p>The action to perform on the integration's webhook.</p>
+     * @public
+     */
+    webhookAction: WebhookAction | undefined;
+}
+/**
+ * <p>Output for the UpdateIntegration operation.</p>
+ * @public
+ */
+export interface UpdateIntegrationOutput {
+    /**
+     * <p>The ID of the integration.</p>
+     * @public
+     */
+    integrationId: string | undefined;
+    /**
+     * <p>The payload URL to configure on your provider instance. Returned when a webhook is created; unchanged by a rotate.</p>
+     * @public
+     */
+    webhookUrl?: string | undefined;
+    /**
+     * <p>The HMAC signing secret for the webhook. Returned only once, in this response; it is never returned again.</p>
+     * @public
+     */
+    secret?: string | undefined;
+}
 /**
  * @public
  */
@@ -6470,6 +6837,11 @@ export interface ListPentestJobsForPentestInput {
      * @public
      */
     nextToken?: string | undefined;
+    /**
+     * <p>Filters the returned pentest jobs to only those of the specified job type.</p>
+     * @public
+     */
+    jobType?: JobType | undefined;
 }
 /**
  * <p>Contains summary information about a pentest job.</p>
@@ -6506,6 +6878,16 @@ export interface PentestJobSummary {
      * @public
      */
     updatedAt?: Date | undefined;
+    /**
+     * <p>The type of the pentest job. Valid values are FULL, REVALIDATION, and CICD.</p>
+     * @public
+     */
+    jobType?: JobType | undefined;
+    /**
+     * <p>The URL to view this pentest job's findings report in the console.</p>
+     * @public
+     */
+    reportUrl?: string | undefined;
 }
 /**
  * <p>Output for the ListPentestJobsForPentest operation.</p>
@@ -7605,7 +7987,7 @@ export interface StartPentestJobInput {
      */
     pentestId: string | undefined;
     /**
-     * <p>The type of pentest job to start. Valid values are FULL and REVALIDATION. When set to REVALIDATION, the selectedFindingIds parameter is required.</p>
+     * <p>The type of pentest job to start. Valid values are FULL, REVALIDATION, and CICD. When set to REVALIDATION, the selectedFindingIds parameter is required. When set to CICD, the scopeChanges parameter defines the code changes to test.</p>
      * @public
      */
     jobType?: JobType | undefined;
@@ -7614,6 +7996,11 @@ export interface StartPentestJobInput {
      * @public
      */
     selectedFindingIds?: string[] | undefined;
+    /**
+     * <p>The code changes that define the scope of a CI/CD pentest job. Provide this when starting a job with jobType CICD to test only the changes in the current pipeline run.</p>
+     * @public
+     */
+    scopeChanges?: ScopeChange[] | undefined;
 }
 /**
  * <p>Output for the StartPentestJob operation.</p>
@@ -8079,526 +8466,3 @@ export interface UpdateFindingInput {
  */
 export interface UpdateFindingOutput {
 }
-/**
- * @public
- */
-export interface UpdateIntegratedResourcesInput {
-    /**
-     * <p>The unique identifier of the agent space.</p>
-     * @public
-     */
-    agentSpaceId: string | undefined;
-    /**
-     * <p>The unique identifier of the integration.</p>
-     * @public
-     */
-    integrationId: string | undefined;
-    /**
-     * <p>The list of integrated resource items to update.</p>
-     * @public
-     */
-    items: IntegratedResourceInputItem[] | undefined;
-}
-/**
- * @public
- */
-export interface UpdateIntegratedResourcesOutput {
-}
-/**
- * <p>Input for updating an existing pentest.</p>
- * @public
- */
-export interface UpdatePentestInput {
-    /**
-     * <p>The unique identifier of the pentest to update.</p>
-     * @public
-     */
-    pentestId: string | undefined;
-    /**
-     * <p>The unique identifier of the agent space that contains the pentest.</p>
-     * @public
-     */
-    agentSpaceId: string | undefined;
-    /**
-     * <p>The updated title of the pentest.</p>
-     * @public
-     */
-    title?: string | undefined;
-    /**
-     * <p>The updated assets for the pentest.</p>
-     * @public
-     */
-    assets?: Assets | undefined;
-    /**
-     * <p>The updated list of risk types to exclude from the pentest.</p>
-     * @public
-     */
-    excludeRiskTypes?: RiskType[] | undefined;
-    /**
-     * <p>The updated IAM service role for the pentest.</p>
-     * @public
-     */
-    serviceRole?: string | undefined;
-    /**
-     * <p>The updated CloudWatch Logs configuration for the pentest.</p>
-     * @public
-     */
-    logConfig?: CloudWatchLog | undefined;
-    /**
-     * <p>The updated VPC configuration for the pentest.</p>
-     * @public
-     */
-    vpcConfig?: VpcConfig | undefined;
-    /**
-     * <p>The updated network traffic configuration for the pentest.</p>
-     * @public
-     */
-    networkTrafficConfig?: NetworkTrafficConfig | undefined;
-    /**
-     * <p>The updated code remediation strategy for the pentest.</p>
-     * @public
-     */
-    codeRemediationStrategy?: CodeRemediationStrategy | undefined;
-    /**
-     * <p>The updated list of managed skills to disable for this pentest. Valid values include FINDING_PERSONALIZATION and LOGIN_OPTIMIZATION.</p>
-     * @public
-     */
-    disableManagedSkills?: SkillType[] | undefined;
-    /**
-     * <p>The updated maximum number of billable task hours allowed for jobs started from this pentest.</p>
-     * @public
-     */
-    maxTaskHours?: number | undefined;
-    /**
-     * <p>The destination for publishing scan reports to an integrated document provider.</p>
-     * @public
-     */
-    reportDestination?: ReportDestination | undefined;
-    /**
-     * <p>The report-generation filters applied when the report is exported.</p>
-     * @public
-     */
-    reportFilters?: ReportFilters | undefined;
-}
-/**
- * <p>Output for the UpdatePentest operation.</p>
- * @public
- */
-export interface UpdatePentestOutput {
-    /**
-     * <p>The unique identifier of the pentest.</p>
-     * @public
-     */
-    pentestId?: string | undefined;
-    /**
-     * <p>The title of the pentest.</p>
-     * @public
-     */
-    title?: string | undefined;
-    /**
-     * <p>The date and time the pentest was created, in UTC format.</p>
-     * @public
-     */
-    createdAt?: Date | undefined;
-    /**
-     * <p>The date and time the pentest was last updated, in UTC format.</p>
-     * @public
-     */
-    updatedAt?: Date | undefined;
-    /**
-     * <p>The assets included in the pentest.</p>
-     * @public
-     */
-    assets?: Assets | undefined;
-    /**
-     * <p>The list of risk types excluded from the pentest.</p>
-     * @public
-     */
-    excludeRiskTypes?: RiskType[] | undefined;
-    /**
-     * <p>The IAM service role used for the pentest.</p>
-     * @public
-     */
-    serviceRole?: string | undefined;
-    /**
-     * <p>The CloudWatch Logs configuration for the pentest.</p>
-     * @public
-     */
-    logConfig?: CloudWatchLog | undefined;
-    /**
-     * <p>The unique identifier of the agent space that contains the pentest.</p>
-     * @public
-     */
-    agentSpaceId?: string | undefined;
-    /**
-     * <p>The destination for publishing scan reports to an integrated document provider.</p>
-     * @public
-     */
-    reportDestination?: ReportDestination | undefined;
-    /**
-     * <p>The report-generation filters applied when the report is exported.</p>
-     * @public
-     */
-    reportFilters?: ReportFilters | undefined;
-}
-/**
- * <p>Input for updating an existing threat.</p>
- * @public
- */
-export interface UpdateThreatInput {
-    /**
-     * <p>The unique identifier of the threat to update.</p>
-     * @public
-     */
-    threatId: string | undefined;
-    /**
-     * <p>The unique identifier of the agent space.</p>
-     * @public
-     */
-    agentSpaceId: string | undefined;
-    /**
-     * <p>A short title summarizing the threat.</p>
-     * @public
-     */
-    title?: string | undefined;
-    /**
-     * <p>The updated status of the threat.</p>
-     * @public
-     */
-    status?: ThreatStatus | undefined;
-    /**
-     * <p>Optional customer comment.</p>
-     * @public
-     */
-    comments?: string | undefined;
-    /**
-     * <p>The updated natural-language threat statement.</p>
-     * @public
-     */
-    statement?: string | undefined;
-    /**
-     * <p>The updated severity level of the threat.</p>
-     * @public
-     */
-    severity?: ThreatSeverity | undefined;
-    /**
-     * <p>The updated actor or origin of the threat.</p>
-     * @public
-     */
-    threatSource?: string | undefined;
-    /**
-     * <p>The updated conditions required for the threat to be exploitable.</p>
-     * @public
-     */
-    prerequisites?: string | undefined;
-    /**
-     * <p>The updated description of what the threat source can do.</p>
-     * @public
-     */
-    threatAction?: string | undefined;
-    /**
-     * <p>The updated direct consequence of the threat action.</p>
-     * @public
-     */
-    threatImpact?: string | undefined;
-    /**
-     * <p>The updated security goals affected by the threat.</p>
-     * @public
-     */
-    impactedGoal?: string[] | undefined;
-    /**
-     * <p>The updated list of specific assets affected by the threat.</p>
-     * @public
-     */
-    impactedAssets?: string[] | undefined;
-    /**
-     * <p>The updated DFD element this threat is anchored to.</p>
-     * @public
-     */
-    anchor?: ThreatAnchorShape | undefined;
-    /**
-     * <p>The updated source code files supporting the threat.</p>
-     * @public
-     */
-    evidence?: ThreatEvidenceShape[] | undefined;
-    /**
-     * <p>The updated recommended mitigation guidance for this threat.</p>
-     * @public
-     */
-    recommendation?: string | undefined;
-}
-/**
- * <p>Output for the UpdateThreat operation.</p>
- * @public
- */
-export interface UpdateThreatOutput {
-    /**
-     * <p>The unique identifier of the threat.</p>
-     * @public
-     */
-    threatId: string | undefined;
-    /**
-     * <p>The unique identifier of the threat model job the threat belongs to.</p>
-     * @public
-     */
-    threatJobId: string | undefined;
-    /**
-     * <p>A short title summarizing the threat.</p>
-     * @public
-     */
-    title?: string | undefined;
-    /**
-     * <p>The natural-language threat statement.</p>
-     * @public
-     */
-    statement?: string | undefined;
-    /**
-     * <p>The severity level of the threat.</p>
-     * @public
-     */
-    severity?: ThreatSeverity | undefined;
-    /**
-     * <p>The current status of the threat.</p>
-     * @public
-     */
-    status?: ThreatStatus | undefined;
-    /**
-     * <p>Optional customer comment on the threat.</p>
-     * @public
-     */
-    comments?: string | undefined;
-    /**
-     * <p>The STRIDE categories applicable to this threat.</p>
-     * @public
-     */
-    stride?: StrideCategory[] | undefined;
-    /**
-     * <p>The actor or origin of the threat.</p>
-     * @public
-     */
-    threatSource?: string | undefined;
-    /**
-     * <p>The conditions required for the threat to be exploitable.</p>
-     * @public
-     */
-    prerequisites?: string | undefined;
-    /**
-     * <p>What the threat source can do.</p>
-     * @public
-     */
-    threatAction?: string | undefined;
-    /**
-     * <p>The direct consequence of the threat action.</p>
-     * @public
-     */
-    threatImpact?: string | undefined;
-    /**
-     * <p>The security goals affected by the threat.</p>
-     * @public
-     */
-    impactedGoal?: string[] | undefined;
-    /**
-     * <p>The specific assets affected by the threat.</p>
-     * @public
-     */
-    impactedAssets?: string[] | undefined;
-    /**
-     * <p>The DFD element this threat is anchored to.</p>
-     * @public
-     */
-    anchor?: ThreatAnchorShape | undefined;
-    /**
-     * <p>The source code files supporting the threat.</p>
-     * @public
-     */
-    evidence?: ThreatEvidenceShape[] | undefined;
-    /**
-     * <p>The recommended mitigation guidance for this threat.</p>
-     * @public
-     */
-    recommendation?: string | undefined;
-    /**
-     * <p>Who created this threat.</p>
-     * @public
-     */
-    createdBy?: ThreatActor | undefined;
-    /**
-     * <p>Who last updated this threat.</p>
-     * @public
-     */
-    updatedBy?: ThreatActor | undefined;
-    /**
-     * <p>The date and time the threat was created, in UTC format.</p>
-     * @public
-     */
-    createdAt?: Date | undefined;
-    /**
-     * <p>The date and time the threat was last updated, in UTC format.</p>
-     * @public
-     */
-    updatedAt?: Date | undefined;
-}
-/**
- * <p>Input for updating an existing threat model.</p>
- * @public
- */
-export interface UpdateThreatModelInput {
-    /**
-     * <p>The unique identifier of the threat model to update.</p>
-     * @public
-     */
-    threatModelId: string | undefined;
-    /**
-     * <p>The unique identifier of the agent space that contains the threat model.</p>
-     * @public
-     */
-    agentSpaceId: string | undefined;
-    /**
-     * <p>The updated title of the threat model.</p>
-     * @public
-     */
-    title?: string | undefined;
-    /**
-     * <p>The updated description of the application or system being threat modeled.</p>
-     * @public
-     */
-    description?: string | undefined;
-    /**
-     * <p>The updated assets for the threat model.</p>
-     * @public
-     */
-    assets?: Assets | undefined;
-    /**
-     * <p>The updated scoped documents for the agent to focus on during threat modeling.</p>
-     * @public
-     */
-    scopeDocs?: DocumentInfo[] | undefined;
-    /**
-     * <p>The updated IAM service role for the threat model.</p>
-     * @public
-     */
-    serviceRole?: string | undefined;
-    /**
-     * <p>The updated CloudWatch Logs configuration for the threat model.</p>
-     * @public
-     */
-    logConfig?: CloudWatchLog | undefined;
-    /**
-     * <p>The destination for publishing scan reports to an integrated document provider.</p>
-     * @public
-     */
-    reportDestination?: ReportDestination | undefined;
-}
-/**
- * <p>Output for the UpdateThreatModel operation.</p>
- * @public
- */
-export interface UpdateThreatModelOutput {
-    /**
-     * <p>The unique identifier of the threat model.</p>
-     * @public
-     */
-    threatModelId: string | undefined;
-    /**
-     * <p>The title of the threat model.</p>
-     * @public
-     */
-    title?: string | undefined;
-    /**
-     * <p>The unique identifier of the agent space that contains the threat model.</p>
-     * @public
-     */
-    agentSpaceId?: string | undefined;
-    /**
-     * <p>A description of the application or system being threat modeled.</p>
-     * @public
-     */
-    description?: string | undefined;
-    /**
-     * <p>The assets included in the threat model.</p>
-     * @public
-     */
-    assets?: Assets | undefined;
-    /**
-     * <p>The scoped documents for the agent to focus on during threat modeling.</p>
-     * @public
-     */
-    scopeDocs?: DocumentInfo[] | undefined;
-    /**
-     * <p>The IAM service role used for the threat model.</p>
-     * @public
-     */
-    serviceRole?: string | undefined;
-    /**
-     * <p>The CloudWatch Logs configuration for the threat model.</p>
-     * @public
-     */
-    logConfig?: CloudWatchLog | undefined;
-    /**
-     * <p>The date and time the threat model was created, in UTC format.</p>
-     * @public
-     */
-    createdAt?: Date | undefined;
-    /**
-     * <p>The date and time the threat model was last updated, in UTC format.</p>
-     * @public
-     */
-    updatedAt?: Date | undefined;
-    /**
-     * <p>The destination for publishing scan reports to an integrated document provider.</p>
-     * @public
-     */
-    reportDestination?: ReportDestination | undefined;
-}
-/**
- * <p>Input for verifying ownership for a registered target domain in an agent space.</p>
- * @public
- */
-export interface VerifyTargetDomainInput {
-    /**
-     * <p>The unique identifier of the target domain to verify.</p>
-     * @public
-     */
-    targetDomainId: string | undefined;
-}
-/**
- * <p>Output for verifying ownership for a registered target domain in an agent space.</p>
- * @public
- */
-export interface VerifyTargetDomainOutput {
-    /**
-     * <p>The unique identifier of the target domain.</p>
-     * @public
-     */
-    targetDomainId?: string | undefined;
-    /**
-     * <p>The domain name of the target domain.</p>
-     * @public
-     */
-    domainName?: string | undefined;
-    /**
-     * <p>The date and time the target domain was created, in UTC format.</p>
-     * @public
-     */
-    createdAt?: Date | undefined;
-    /**
-     * <p>The date and time the target domain was last updated, in UTC format.</p>
-     * @public
-     */
-    updatedAt?: Date | undefined;
-    /**
-     * <p>The date and time the target domain was verified, in UTC format.</p>
-     * @public
-     */
-    verifiedAt?: Date | undefined;
-    /**
-     * <p>The verification status of the target domain.</p>
-     * @public
-     */
-    status?: TargetDomainStatus | undefined;
-    /**
-     * <p>The reason for the current target domain verification status.</p>
-     * @public
-     */
-    verificationStatusReason?: string | undefined;
-}