SDK for PHP V3

Client: Aws\SecurityAgent\SecurityAgentClient
Service ID: securityagent
Version: 2025-09-06

This page describes the parameters and results for the operations of the AWS Security Agent (2025-09-06), and shows how to use the Aws\SecurityAgent\SecurityAgentClient object to call the described operations. This documentation is specific to the 2025-09-06 API version of the service.

Operation Summary

Each of the following operations can be created from a client using $client->getCommand('CommandName'), where "CommandName" is the name of one of the following operations. Note: a command is a value that encapsulates an operation and the parameters used to create an HTTP request.

You can also create and send a command immediately using the magic methods available on a client object: $client->commandName(/* parameters */). You can send the command asynchronously (returning a promise) by appending the word "Async" to the operation name: $client->commandNameAsync(/* parameters */).

AddArtifact ( array $params = [] )
Adds an Artifact for the given agent space
BatchDeletePentests ( array $params = [] )
Deletes multiple pentests in a single request
BatchGetAgentSpaces ( array $params = [] )
Retrieves multiple agent spaces in a single request
BatchGetArtifactMetadata ( array $params = [] )
Retrieve the list of artifact metadata for the given agent space
BatchGetFindings ( array $params = [] )
Retrieves multiple findings in a single request
BatchGetPentestJobTasks ( array $params = [] )
Retrieves multiple tasks for a pentest job in a single request
BatchGetPentestJobs ( array $params = [] )
Retrieves multiple pentest jobs in a single request
BatchGetPentests ( array $params = [] )
Retrieves multiple pentests in a single request
BatchGetTargetDomains ( array $params = [] )
Retrieves multiple target domains in a single request
CreateAgentSpace ( array $params = [] )
Creates an agent space record
CreateApplication ( array $params = [] )
Creates a new application
CreateIntegration ( array $params = [] )
Creates the Integration of the Security Agent App with an external Provider
CreateMembership ( array $params = [] )
Adds a single member to an agent space with specified role
CreatePentest ( array $params = [] )
Creates a new pentest configuration
CreateTargetDomain ( array $params = [] )
Creates a target domain record
DeleteAgentSpace ( array $params = [] )
Deletes an agent space record
DeleteApplication ( array $params = [] )
Deletes an application
DeleteArtifact ( array $params = [] )
Delete an Artifact from the given agent space
DeleteIntegration ( array $params = [] )
Deletes the Integration of the Security Agent App with an external Provider
DeleteMembership ( array $params = [] )
Removes a single member associated to an agent space
DeleteTargetDomain ( array $params = [] )
Deletes a target domain record
GetApplication ( array $params = [] )
Retrieves application details by application ID
GetArtifact ( array $params = [] )
Retrieve an Artifact for the given agent space
GetIntegration ( array $params = [] )
Gets Integration metadata from the provided id
InitiateProviderRegistration ( array $params = [] )
Initiates the registration of Security Agent App for an external Provider
ListAgentSpaces ( array $params = [] )
Lists agent spaces
ListApplications ( array $params = [] )
Lists all applications in the account
ListArtifacts ( array $params = [] )
Lists the artifacts for the associated agent space
ListDiscoveredEndpoints ( array $params = [] )
Lists discovered endpoints associated with a pentest job with optional URI prefix filtering
ListFindings ( array $params = [] )
Lists findings with filtering and pagination support.
ListIntegratedResources ( array $params = [] )
Lists the integrated resources for an agent space
ListIntegrations ( array $params = [] )
Retrieves the Integrations associated with the user's account
ListMemberships ( array $params = [] )
Lists all members associated to an agent space with pagination support
ListPentestJobTasks ( array $params = [] )
Lists tasks associated with a specific pentest job
ListPentestJobsForPentest ( array $params = [] )
Lists pentest jobs associated with a pentest
ListPentests ( array $params = [] )
Lists pentests with optional filtering by status
ListTagsForResource ( array $params = [] )
Lists tags for a Security Agent resource
ListTargetDomains ( array $params = [] )
Lists target domains
StartCodeRemediation ( array $params = [] )
Starts code remediation for the specified findings
StartPentestJob ( array $params = [] )
Initiates the execution of a pentest
StopPentestJob ( array $params = [] )
Stops the execution of a running pentest
TagResource ( array $params = [] )
Adds tags to a Security Agent resource
UntagResource ( array $params = [] )
Removes tags from a Security Agent resource
UpdateAgentSpace ( array $params = [] )
Updates an agent space record
UpdateApplication ( array $params = [] )
Updates application configuration
UpdateFinding ( array $params = [] )
Updates an existing security finding with new details or status
UpdateIntegratedResources ( array $params = [] )
Updates the integrated resources for an agent space
UpdatePentest ( array $params = [] )
Updates an existing pentest with new configuration or settings
UpdateTargetDomain ( array $params = [] )
Updates a target domain record
VerifyTargetDomain ( array $params = [] )
Verifies ownership for a registered target domain

Paginators

Paginators handle automatically iterating over paginated API results. Paginators are associated with specific API operations, and they accept the parameters that the corresponding API operation accepts. You can get a paginator from a client class using getPaginator($paginatorName, $operationParameters). This client supports the following paginators:

ListAgentSpaces
ListApplications
ListArtifacts
ListDiscoveredEndpoints
ListFindings
ListIntegratedResources
ListIntegrations
ListMemberships
ListPentestJobTasks
ListPentestJobsForPentest
ListPentests
ListTargetDomains

Operations

AddArtifact

$result = $client->addArtifact([/* ... */]);
$promise = $client->addArtifactAsync([/* ... */]);

Adds an Artifact for the given agent space

Parameter Syntax

$result = $client->addArtifact([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactContent' => <string || resource || Psr\Http\Message\StreamInterface>, // REQUIRED
    'artifactType' => 'TXT|PNG|JPEG|MD|PDF|DOCX|DOC|JSON|YAML', // REQUIRED
    'fileName' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

artifactContent
Required: Yes
Type: blob (string|resource|Psr\Http\Message\StreamInterface)

Binary content of the artifact

artifactType
Required: Yes
Type: string

Type of the artifact file

fileName
Required: Yes
Type: string

Name of the artifact file

Result Syntax

[
    'artifactId' => '<string>',
]

Result Details

Members
artifactId
Required: Yes
Type: string

Unique identifier of the created artifact

Errors

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

InternalServerException:

Unexpected server error occurred

ResourceNotFoundException:

Specified resource was not found

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

BatchDeletePentests

$result = $client->batchDeletePentests([/* ... */]);
$promise = $client->batchDeletePentestsAsync([/* ... */]);

Deletes multiple pentests in a single request

Parameter Syntax

$result = $client->batchDeletePentests([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentests exist

pentestIds
Required: Yes
Type: Array of strings

List of pentest IDs to delete

Result Syntax

[
    'deleted' => [
        [
            'agentSpaceId' => '<string>',
            'assets' => [
                'actors' => [
                    [
                        'authentication' => [
                            'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                            'value' => '<string>',
                        ],
                        'description' => '<string>',
                        'identifier' => '<string>',
                        'uris' => ['<string>', ...],
                    ],
                    // ...
                ],
                'documents' => [
                    [
                        'artifactId' => '<string>',
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
                'endpoints' => [
                    [
                        'uri' => '<string>',
                    ],
                    // ...
                ],
                'integratedRepositories' => [
                    [
                        'integrationId' => '<string>',
                        'providerResourceId' => '<string>',
                    ],
                    // ...
                ],
                'sourceCode' => [
                    [
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
            ],
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'createdAt' => <DateTime>,
            'excludeRiskTypes' => ['<string>', ...],
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'networkTrafficConfig' => [
                'customHeaders' => [
                    [
                        'name' => '<string>',
                        'value' => '<string>',
                    ],
                    // ...
                ],
                'rules' => [
                    [
                        'effect' => 'ALLOW|DENY',
                        'networkTrafficRuleType' => 'URL',
                        'pattern' => '<string>',
                    ],
                    // ...
                ],
            ],
            'pentestId' => '<string>',
            'serviceRole' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'vpcConfig' => [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
        ],
        // ...
    ],
    'failed' => [
        [
            'pentestId' => '<string>',
            'reason' => '<string>',
        ],
        // ...
    ],
]

Result Details

Members
deleted
Type: Array of Pentest structures

List of successfully deleted pentests

failed
Type: Array of DeletePentestFailure structures

List of pentests that could not be deleted and the reasons for failure

Errors

There are no errors described for this operation.

BatchGetAgentSpaces

$result = $client->batchGetAgentSpaces([/* ... */]);
$promise = $client->batchGetAgentSpacesAsync([/* ... */]);

Retrieves multiple agent spaces in a single request

Parameter Syntax

$result = $client->batchGetAgentSpaces([
    'agentSpaceIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceIds
Required: Yes
Type: Array of strings

List of agent space IDs to retrieve

Result Syntax

[
    'agentSpaces' => [
        [
            'agentSpaceId' => '<string>',
            'awsResources' => [
                'iamRoles' => ['<string>', ...],
                'lambdaFunctionArns' => ['<string>', ...],
                'logGroups' => ['<string>', ...],
                's3Buckets' => ['<string>', ...],
                'secretArns' => ['<string>', ...],
                'vpcs' => [
                    [
                        'securityGroupArns' => ['<string>', ...],
                        'subnetArns' => ['<string>', ...],
                        'vpcArn' => '<string>',
                    ],
                    // ...
                ],
            ],
            'codeReviewSettings' => [
                'controlsScanning' => true || false,
                'generalPurposeScanning' => true || false,
            ],
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'kmsKeyId' => '<string>',
            'name' => '<string>',
            'targetDomainIds' => ['<string>', ...],
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'notFound' => ['<string>', ...],
]

Result Details

Members
agentSpaces
Type: Array of AgentSpace structures

List of agent spaces that were successfully retrieved

notFound
Type: Array of strings

List of agent space IDs that could not be found

Errors

There are no errors described for this operation.

BatchGetArtifactMetadata

$result = $client->batchGetArtifactMetadata([/* ... */]);
$promise = $client->batchGetArtifactMetadataAsync([/* ... */]);

Retrieve the list of artifact metadata for the given agent space

Parameter Syntax

$result = $client->batchGetArtifactMetadata([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

artifactIds
Required: Yes
Type: Array of strings

List of artifact identifiers

Result Syntax

[
    'artifactMetadataList' => [
        [
            'agentSpaceId' => '<string>',
            'artifactId' => '<string>',
            'fileName' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
artifactMetadataList
Required: Yes
Type: Array of ArtifactMetadataItem structures

List of artifact metadata

Errors

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

InternalServerException:

Unexpected server error occurred

ResourceNotFoundException:

Specified resource was not found

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

BatchGetFindings

$result = $client->batchGetFindings([/* ... */]);
$promise = $client->batchGetFindingsAsync([/* ... */]);

Retrieves multiple findings in a single request

Parameter Syntax

$result = $client->batchGetFindings([
    'agentSpaceId' => '<string>', // REQUIRED
    'findingIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the findings exist

findingIds
Required: Yes
Type: Array of strings

List of finding IDs to retrieve

Result Syntax

[
    'findings' => [
        [
            'agentSpaceId' => '<string>',
            'attackScript' => '<string>',
            'codeRemediationTask' => [
                'status' => 'IN_PROGRESS|COMPLETED|FAILED',
                'statusReason' => '<string>',
                'taskDetails' => [
                    [
                        'codeDiffLink' => '<string>',
                        'pullRequestLink' => '<string>',
                        'repoName' => '<string>',
                    ],
                    // ...
                ],
            ],
            'confidence' => 'FALSE_POSITIVE|UNCONFIRMED|LOW|MEDIUM|HIGH',
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'findingId' => '<string>',
            'lastUpdatedBy' => '<string>',
            'name' => '<string>',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'reasoning' => '<string>',
            'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
            'riskScore' => '<string>',
            'riskType' => '<string>',
            'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
            'taskId' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'notFound' => ['<string>', ...],
]

Result Details

Members
findings
Type: Array of Finding structures

List of successfully retrieved findings

notFound
Type: Array of strings

List of finding IDs that could not be found

Errors

There are no errors described for this operation.

BatchGetPentestJobTasks

$result = $client->batchGetPentestJobTasks([/* ... */]);
$promise = $client->batchGetPentestJobTasksAsync([/* ... */]);

Retrieves multiple tasks for a pentest job in a single request

Parameter Syntax

$result = $client->batchGetPentestJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'taskIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

taskIds
Required: Yes
Type: Array of strings

List of task IDs to retrieve

Result Syntax

[
    'notFound' => ['<string>', ...],
    'tasks' => [
        [
            'agentSpaceId' => '<string>',
            'categories' => [
                [
                    'isPrimary' => true || false,
                    'name' => '<string>',
                ],
                // ...
            ],
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'logsLocation' => [
                'cloudWatchLog' => [
                    'logGroup' => '<string>',
                    'logStream' => '<string>',
                ],
                'logType' => 'CLOUDWATCH',
            ],
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'riskType' => 'CROSS_SITE_SCRIPTING|DEFAULT_CREDENTIALS|INSECURE_DIRECT_OBJECT_REFERENCE|PRIVILEGE_ESCALATION|SERVER_SIDE_TEMPLATE_INJECTION|COMMAND_INJECTION|CODE_INJECTION|SQL_INJECTION|ARBITRARY_FILE_UPLOAD|INSECURE_DESERIALIZATION|LOCAL_FILE_INCLUSION|INFORMATION_DISCLOSURE|PATH_TRAVERSAL|SERVER_SIDE_REQUEST_FORGERY|JSON_WEB_TOKEN_VULNERABILITIES|XML_EXTERNAL_ENTITY|FILE_DELETION|OTHER|GRAPHQL_VULNERABILITIES|BUSINESS_LOGIC_VULNERABILITIES|CRYPTOGRAPHIC_VULNERABILITIES|DENIAL_OF_SERVICE|FILE_ACCESS|FILE_CREATION|DATABASE_MODIFICATION|DATABASE_ACCESS|OUTBOUND_SERVICE_REQUEST|UNKNOWN',
            'targetEndpoint' => [
                'uri' => '<string>',
            ],
            'taskId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

List of task IDs that could not be found

tasks
Type: Array of Task structures

List of successfully retrieved tasks

Errors

There are no errors described for this operation.

BatchGetPentestJobs

$result = $client->batchGetPentestJobs([/* ... */]);
$promise = $client->batchGetPentestJobsAsync([/* ... */]);

Retrieves multiple pentest jobs in a single request

Parameter Syntax

$result = $client->batchGetPentestJobs([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestJobIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

pentestJobIds
Required: Yes
Type: Array of strings

List of pentest job IDs to retrieve

Result Syntax

[
    'notFound' => ['<string>', ...],
    'pentestJobs' => [
        [
            'actors' => [
                [
                    'authentication' => [
                        'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                        'value' => '<string>',
                    ],
                    'description' => '<string>',
                    'identifier' => '<string>',
                    'uris' => ['<string>', ...],
                ],
                // ...
            ],
            'allowedDomains' => [
                [
                    'uri' => '<string>',
                ],
                // ...
            ],
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'createdAt' => <DateTime>,
            'documents' => [
                [
                    'artifactId' => '<string>',
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'endpoints' => [
                [
                    'uri' => '<string>',
                ],
                // ...
            ],
            'errorInformation' => [
                'code' => 'CLIENT_ERROR|INTERNAL_ERROR|STOPPED_BY_USER',
                'message' => '<string>',
            ],
            'excludePaths' => [
                [
                    'uri' => '<string>',
                ],
                // ...
            ],
            'excludeRiskTypes' => ['<string>', ...],
            'executionContext' => [
                [
                    'context' => '<string>',
                    'contextType' => 'ERROR|CLIENT_ERROR|WARNING|INFO',
                    'timestamp' => <DateTime>,
                ],
                // ...
            ],
            'integratedRepositories' => [
                [
                    'integrationId' => '<string>',
                    'providerResourceId' => '<string>',
                ],
                // ...
            ],
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'networkTrafficConfig' => [
                'customHeaders' => [
                    [
                        'name' => '<string>',
                        'value' => '<string>',
                    ],
                    // ...
                ],
                'rules' => [
                    [
                        'effect' => 'ALLOW|DENY',
                        'networkTrafficRuleType' => 'URL',
                        'pattern' => '<string>',
                    ],
                    // ...
                ],
            ],
            'overview' => '<string>',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'serviceRole' => '<string>',
            'sourceCode' => [
                [
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'steps' => [
                [
                    'createdAt' => <DateTime>,
                    'name' => 'PREFLIGHT|STATIC_ANALYSIS|PENTEST|FINALIZING',
                    'status' => 'NOT_STARTED|IN_PROGRESS|COMPLETED|FAILED|STOPPED',
                    'updatedAt' => <DateTime>,
                ],
                // ...
            ],
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'vpcConfig' => [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

List of pentest job IDs that could not be found

pentestJobs
Type: Array of PentestJob structures

List of successfully retrieved pentest jobs

Errors

There are no errors described for this operation.

BatchGetPentests

$result = $client->batchGetPentests([/* ... */]);
$promise = $client->batchGetPentestsAsync([/* ... */]);

Retrieves multiple pentests in a single request

Parameter Syntax

$result = $client->batchGetPentests([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

pentestIds
Required: Yes
Type: Array of strings

List of pentest IDs to retrieve

Result Syntax

[
    'notFound' => ['<string>', ...],
    'pentests' => [
        [
            'agentSpaceId' => '<string>',
            'assets' => [
                'actors' => [
                    [
                        'authentication' => [
                            'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                            'value' => '<string>',
                        ],
                        'description' => '<string>',
                        'identifier' => '<string>',
                        'uris' => ['<string>', ...],
                    ],
                    // ...
                ],
                'documents' => [
                    [
                        'artifactId' => '<string>',
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
                'endpoints' => [
                    [
                        'uri' => '<string>',
                    ],
                    // ...
                ],
                'integratedRepositories' => [
                    [
                        'integrationId' => '<string>',
                        'providerResourceId' => '<string>',
                    ],
                    // ...
                ],
                'sourceCode' => [
                    [
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
            ],
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'createdAt' => <DateTime>,
            'excludeRiskTypes' => ['<string>', ...],
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'networkTrafficConfig' => [
                'customHeaders' => [
                    [
                        'name' => '<string>',
                        'value' => '<string>',
                    ],
                    // ...
                ],
                'rules' => [
                    [
                        'effect' => 'ALLOW|DENY',
                        'networkTrafficRuleType' => 'URL',
                        'pattern' => '<string>',
                    ],
                    // ...
                ],
            ],
            'pentestId' => '<string>',
            'serviceRole' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'vpcConfig' => [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

List of pentest IDs that could not be found

pentests
Type: Array of Pentest structures

List of successfully retrieved pentests

Errors

There are no errors described for this operation.

BatchGetTargetDomains

$result = $client->batchGetTargetDomains([/* ... */]);
$promise = $client->batchGetTargetDomainsAsync([/* ... */]);

Retrieves multiple target domains in a single request

Parameter Syntax

$result = $client->batchGetTargetDomains([
    'targetDomainIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
targetDomainIds
Required: Yes
Type: Array of strings

List of target domain IDs to retrieve

Result Syntax

[
    'notFound' => ['<string>', ...],
    'targetDomains' => [
        [
            'createdAt' => <DateTime>,
            'domainName' => '<string>',
            'targetDomainId' => '<string>',
            'verificationDetails' => [
                'dnsTxt' => [
                    'dnsRecordName' => '<string>',
                    'dnsRecordType' => 'TXT',
                    'token' => '<string>',
                ],
                'httpRoute' => [
                    'routePath' => '<string>',
                    'token' => '<string>',
                ],
                'method' => 'DNS_TXT|HTTP_ROUTE',
            ],
            'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
            'verifiedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

List of target domain IDs that could not be found

targetDomains
Type: Array of TargetDomain structures

List of target domains that were successfully retrieved

Errors

There are no errors described for this operation.

CreateAgentSpace

$result = $client->createAgentSpace([/* ... */]);
$promise = $client->createAgentSpaceAsync([/* ... */]);

Creates an agent space record

Parameter Syntax

$result = $client->createAgentSpace([
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false, // REQUIRED
        'generalPurposeScanning' => true || false, // REQUIRED
    ],
    'description' => '<string>',
    'kmsKeyId' => '<string>',
    'name' => '<string>', // REQUIRED
    'tags' => ['<string>', ...],
    'targetDomainIds' => ['<string>', ...],
]);

Parameter Details

Members
awsResources
Type: AWSResources structure

AWS resource configurations associated with the agent space

codeReviewSettings
Type: CodeReviewSettings structure

Configuration for code review analysis, including controls scanning and general purpose scanning settings

description
Type: string

Description of the agent space

kmsKeyId
Type: string

Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.

name
Required: Yes
Type: string

Name of the agent space

tags
Type: Associative array of custom strings keys (TagKey) to strings

Tags to associate with the agent space

targetDomainIds
Type: Array of strings

Target domain IDs to associate with the agent space

Result Syntax

[
    'agentSpaceId' => '<string>',
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false,
        'generalPurposeScanning' => true || false,
    ],
    'createdAt' => <DateTime>,
    'description' => '<string>',
    'kmsKeyId' => '<string>',
    'name' => '<string>',
    'targetDomainIds' => ['<string>', ...],
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the created agent space

awsResources
Type: AWSResources structure

AWS resource configurations associated with the agent space

codeReviewSettings
Type: CodeReviewSettings structure

Configuration for code review analysis, including controls scanning and general purpose scanning settings

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was created

description
Type: string

Description of the created agent space

kmsKeyId
Type: string

Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.

name
Required: Yes
Type: string

Name of the created agent space

targetDomainIds
Type: Array of strings

List of target domain IDs registered with the agent space

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was last updated

Errors

There are no errors described for this operation.

CreateApplication

$result = $client->createApplication([/* ... */]);
$promise = $client->createApplicationAsync([/* ... */]);

Creates a new application

Parameter Syntax

$result = $client->createApplication([
    'defaultKmsKeyId' => '<string>',
    'idcInstanceArn' => '<string>',
    'roleArn' => '<string>',
    'tags' => ['<string>', ...],
]);

Parameter Details

Members
defaultKmsKeyId
Type: string

Default KMS key identifier used to encrypt application data

idcInstanceArn
Type: string

ARN of the IAM Identity Center instance used for user authentication. Optional for non-IdC applications

roleArn
Type: string

ARN of the IAM role that the application uses to access AWS resources on your behalf

tags
Type: Associative array of custom strings keys (TagKey) to strings

Tags to associate with the application

Result Syntax

[
    'applicationId' => '<string>',
]

Result Details

Members
applicationId
Required: Yes
Type: string

Application ID

Errors

There are no errors described for this operation.

CreateIntegration

$result = $client->createIntegration([/* ... */]);
$promise = $client->createIntegrationAsync([/* ... */]);

Creates the Integration of the Security Agent App with an external Provider

Parameter Syntax

$result = $client->createIntegration([
    'input' => [ // REQUIRED
        'github' => [
            'code' => '<string>', // REQUIRED
            'organizationName' => '<string>',
            'state' => '<string>', // REQUIRED
        ],
    ],
    'integrationDisplayName' => '<string>', // REQUIRED
    'kmsKeyId' => '<string>',
    'provider' => 'GITHUB', // REQUIRED
    'tags' => ['<string>', ...],
]);

Parameter Details

Members
input
Required: Yes
Type: ProviderInput structure

Provider-specific input parameters

integrationDisplayName
Required: Yes
Type: string

Display name for the integration

kmsKeyId
Type: string

KMS key ID for encrypting integration details

provider
Required: Yes
Type: string

Provider to integrate with

tags
Type: Associative array of custom strings keys (TagKey) to strings

Tags to associate with the integration

Result Syntax

[
    'integrationId' => '<string>',
]

Result Details

Members
integrationId
Required: Yes
Type: string

Unique identifier of the created integration

Errors

ResourceNotFoundException:

Specified resource was not found

InternalServerException:

Unexpected server error occurred

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

ConflictException:

Request conflicts with current resource state

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

CreateMembership

$result = $client->createMembership([/* ... */]);
$promise = $client->createMembershipAsync([/* ... */]);

Adds a single member to an agent space with specified role

Parameter Syntax

$result = $client->createMembership([
    'agentSpaceId' => '<string>', // REQUIRED
    'applicationId' => '<string>', // REQUIRED
    'config' => [
        'user' => [
            'role' => 'MEMBER',
        ],
    ],
    'memberType' => 'USER', // REQUIRED
    'membershipId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Agent space identifier

applicationId
Required: Yes
Type: string

Application identifier

config
Type: MembershipConfig structure

Membership details (user or agent specific)

memberType
Required: Yes
Type: string

Type of member (USER or AGENT_SPACE)

membershipId
Required: Yes
Type: string

Member identifier (userId or agentSpaceId)

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

CreatePentest

$result = $client->createPentest([/* ... */]);
$promise = $client->createPentestAsync([/* ... */]);

Creates a new pentest configuration

Parameter Syntax

$result = $client->createPentest([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'networkTrafficConfig' => [
        'customHeaders' => [
            [
                'name' => '<string>',
                'value' => '<string>',
            ],
            // ...
        ],
        'rules' => [
            [
                'effect' => 'ALLOW|DENY',
                'networkTrafficRuleType' => 'URL',
                'pattern' => '<string>',
            ],
            // ...
        ],
    ],
    'serviceRole' => '<string>',
    'title' => '<string>', // REQUIRED
    'vpcConfig' => [
        'securityGroupArns' => ['<string>', ...],
        'subnetArns' => ['<string>', ...],
        'vpcArn' => '<string>',
    ],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest should be created

assets
Type: Assets structure

Assets to be tested during the pentest

codeRemediationStrategy
Type: string

Strategy for code remediation on findings

excludeRiskTypes
Type: Array of strings

A list of risk types excluded from the pentest execution

logConfig
Type: CloudWatchLog structure

CloudWatch log group and stream prefix where pentest execution logs are stored

networkTrafficConfig
Type: NetworkTrafficConfig structure

Configuration for network traffic filtering

serviceRole
Type: string

Service role ARN for accessing customer resources

title
Required: Yes
Type: string

Title of the pentest

vpcConfig
Type: VpcConfig structure

VPC configuration that the Security Agent accesses

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'createdAt' => <DateTime>,
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'pentestId' => '<string>',
    'serviceRole' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

ID of the agent space where the pentest was created

assets
Type: Assets structure

Assets to be tested in the created pentest

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was created

excludeRiskTypes
Type: Array of strings

A list of risk types excluded from the pentest execution

logConfig
Type: CloudWatchLog structure

CloudWatch log group and stream prefix where pentest execution logs are stored

pentestId
Type: string

Unique identifier of the created pentest

serviceRole
Type: string

Service role ARN for accessing customer resources

title
Type: string

Title of the created pentest

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was last updated

Errors

There are no errors described for this operation.

CreateTargetDomain

$result = $client->createTargetDomain([/* ... */]);
$promise = $client->createTargetDomainAsync([/* ... */]);

Creates a target domain record

Parameter Syntax

$result = $client->createTargetDomain([
    'tags' => ['<string>', ...],
    'targetDomainName' => '<string>', // REQUIRED
    'verificationMethod' => 'DNS_TXT|HTTP_ROUTE', // REQUIRED
]);

Parameter Details

Members
tags
Type: Associative array of custom strings keys (TagKey) to strings

Tags to associate with the target domain

targetDomainName
Required: Yes
Type: string

Domain name of the target domain

verificationMethod
Required: Yes
Type: string

Verification method for the target domain

Result Syntax

[
    'createdAt' => <DateTime>,
    'domainName' => '<string>',
    'targetDomainId' => '<string>',
    'verificationDetails' => [
        'dnsTxt' => [
            'dnsRecordName' => '<string>',
            'dnsRecordType' => 'TXT',
            'token' => '<string>',
        ],
        'httpRoute' => [
            'routePath' => '<string>',
            'token' => '<string>',
        ],
        'method' => 'DNS_TXT|HTTP_ROUTE',
    ],
    'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
    'verifiedAt' => <DateTime>,
]

Result Details

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was registered

domainName
Required: Yes
Type: string

Name of the created target domain

targetDomainId
Required: Yes
Type: string

Unique identifier of the created target domain

verificationDetails
Type: VerificationDetails structure

Verification details to verify registered target domain

verificationStatus
Required: Yes
Type: string

Current verification status of the registered target domain

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was last successfully verified

Errors

There are no errors described for this operation.

DeleteAgentSpace

$result = $client->deleteAgentSpace([/* ... */]);
$promise = $client->deleteAgentSpaceAsync([/* ... */]);

Deletes an agent space record

Parameter Syntax

$result = $client->deleteAgentSpace([
    'agentSpaceId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space to delete

Result Syntax

[
    'agentSpaceId' => '<string>',
]

Result Details

Members
agentSpaceId
Type: string

Unique identifier of the deleted agent space

Errors

There are no errors described for this operation.

DeleteApplication

$result = $client->deleteApplication([/* ... */]);
$promise = $client->deleteApplicationAsync([/* ... */]);

Deletes an application

Parameter Syntax

$result = $client->deleteApplication([
    'applicationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
applicationId
Required: Yes
Type: string

Application ID

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

DeleteArtifact

$result = $client->deleteArtifact([/* ... */]);
$promise = $client->deleteArtifactAsync([/* ... */]);

Delete an Artifact from the given agent space

Parameter Syntax

$result = $client->deleteArtifact([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

artifactId
Required: Yes
Type: string

Unique identifier of the artifact

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

ResourceNotFoundException:

Specified resource was not found

InternalServerException:

Unexpected server error occurred

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

DeleteIntegration

$result = $client->deleteIntegration([/* ... */]);
$promise = $client->deleteIntegrationAsync([/* ... */]);

Deletes the Integration of the Security Agent App with an external Provider

Parameter Syntax

$result = $client->deleteIntegration([
    'integrationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
integrationId
Required: Yes
Type: string

Unique identifier of the integration

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

ResourceNotFoundException:

Specified resource was not found

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

InternalServerException:

Unexpected server error occurred

ConflictException:

Request conflicts with current resource state

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

DeleteMembership

$result = $client->deleteMembership([/* ... */]);
$promise = $client->deleteMembershipAsync([/* ... */]);

Removes a single member associated to an agent space

Parameter Syntax

$result = $client->deleteMembership([
    'agentSpaceId' => '<string>', // REQUIRED
    'applicationId' => '<string>', // REQUIRED
    'memberType' => 'USER',
    'membershipId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Agent space identifier

applicationId
Required: Yes
Type: string

Application identifier

memberType
Type: string

Type of member (USER or AGENT_SPACE)

membershipId
Required: Yes
Type: string

Member identifier (userId or agentSpaceId)

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

DeleteTargetDomain

$result = $client->deleteTargetDomain([/* ... */]);
$promise = $client->deleteTargetDomainAsync([/* ... */]);

Deletes a target domain record

Parameter Syntax

$result = $client->deleteTargetDomain([
    'targetDomainId' => '<string>', // REQUIRED
]);

Parameter Details

Members
targetDomainId
Required: Yes
Type: string

Unique identifier of the target domain to delete

Result Syntax

[
    'targetDomainId' => '<string>',
]

Result Details

Members
targetDomainId
Type: string

Unique identifier of the deleted target domain

Errors

There are no errors described for this operation.

GetApplication

$result = $client->getApplication([/* ... */]);
$promise = $client->getApplicationAsync([/* ... */]);

Retrieves application details by application ID

Parameter Syntax

$result = $client->getApplication([
    'applicationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
applicationId
Required: Yes
Type: string

Application ID

Result Syntax

[
    'applicationId' => '<string>',
    'applicationName' => '<string>',
    'defaultKmsKeyId' => '<string>',
    'domain' => '<string>',
    'idcConfiguration' => [
        'idcApplicationArn' => '<string>',
        'idcInstanceArn' => '<string>',
    ],
    'roleArn' => '<string>',
]

Result Details

Members
applicationId
Required: Yes
Type: string

Application ID

applicationName
Type: string

Name of the application, automatically assigned by the service

defaultKmsKeyId
Type: string

Default KMS key identifier used to encrypt application data

domain
Required: Yes
Type: string

Domain where the application is available

idcConfiguration
Type: IdCConfiguration structure

IAM Identity Center configuration for the application

roleArn
Type: string

ARN of the IAM role that the application uses to access AWS resources on your behalf

Errors

There are no errors described for this operation.

GetArtifact

$result = $client->getArtifact([/* ... */]);
$promise = $client->getArtifactAsync([/* ... */]);

Retrieve an Artifact for the given agent space

Parameter Syntax

$result = $client->getArtifact([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

artifactId
Required: Yes
Type: string

Unique identifier of the artifact

Result Syntax

[
    'agentSpaceId' => '<string>',
    'artifact' => [
        'contents' => '<string>',
        'type' => 'TXT|PNG|JPEG|MD|PDF|DOCX|DOC|JSON|YAML',
    ],
    'artifactId' => '<string>',
    'fileName' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

artifact
Required: Yes
Type: Artifact structure

Artifact details

artifactId
Required: Yes
Type: string

Unique identifier of the artifact

fileName
Required: Yes
Type: string

Name of the artifact file

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the artifact was last updated

Errors

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

InternalServerException:

Unexpected server error occurred

ResourceNotFoundException:

Specified resource was not found

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

GetIntegration

$result = $client->getIntegration([/* ... */]);
$promise = $client->getIntegrationAsync([/* ... */]);

Gets Integration metadata from the provided id

Parameter Syntax

$result = $client->getIntegration([
    'integrationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
integrationId
Required: Yes
Type: string

Unique identifier of the integration

Result Syntax

[
    'displayName' => '<string>',
    'installationId' => '<string>',
    'integrationId' => '<string>',
    'kmsKeyId' => '<string>',
    'provider' => 'GITHUB',
    'providerType' => 'SOURCE_CODE|DOCUMENTATION',
]

Result Details

Members
displayName
Type: string

Display name for the integration

installationId
Required: Yes
Type: string

Installation identifier from the provider

integrationId
Required: Yes
Type: string

Unique identifier of the integration

kmsKeyId
Type: string

KMS key ID for encrypting integration details

provider
Required: Yes
Type: string

Provider type

providerType
Required: Yes
Type: string

Type of provider integration

Errors

ResourceNotFoundException:

Specified resource was not found

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

InternalServerException:

Unexpected server error occurred

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

InitiateProviderRegistration

$result = $client->initiateProviderRegistration([/* ... */]);
$promise = $client->initiateProviderRegistrationAsync([/* ... */]);

Initiates the registration of Security Agent App for an external Provider

Parameter Syntax

$result = $client->initiateProviderRegistration([
    'provider' => 'GITHUB', // REQUIRED
]);

Parameter Details

Members
provider
Required: Yes
Type: string

Provider to register with

Result Syntax

[
    'csrfState' => '<string>',
    'redirectTo' => '<string>',
]

Result Details

Members
csrfState
Required: Yes
Type: string

CSRF state token for OAuth security

redirectTo
Required: Yes
Type: string

OAuth redirect URL

Errors

ResourceNotFoundException:

Specified resource was not found

InternalServerException:

Unexpected server error occurred

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

ConflictException:

Request conflicts with current resource state

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

ListAgentSpaces

$result = $client->listAgentSpaces([/* ... */]);
$promise = $client->listAgentSpacesAsync([/* ... */]);

Lists agent spaces

Parameter Syntax

$result = $client->listAgentSpaces([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
maxResults
Type: int

Maximum number of agent spaces to return

nextToken
Type: string

Token for pagination

Result Syntax

[
    'agentSpaceSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'name' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
agentSpaceSummaries
Type: Array of AgentSpaceSummary structures

List of agent space summaries

nextToken
Type: string

Token for next page of results

Errors

There are no errors described for this operation.

ListApplications

$result = $client->listApplications([/* ... */]);
$promise = $client->listApplicationsAsync([/* ... */]);

Lists all applications in the account

Parameter Syntax

$result = $client->listApplications([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
maxResults
Type: int

Maximum number of results to return

nextToken
Type: string

Token for pagination

Result Syntax

[
    'applicationSummaries' => [
        [
            'applicationId' => '<string>',
            'applicationName' => '<string>',
            'defaultKmsKeyId' => '<string>',
            'domain' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
applicationSummaries
Required: Yes
Type: Array of ApplicationSummary structures

List of application summaries

nextToken
Type: string

Token for next page of results

Errors

There are no errors described for this operation.

ListArtifacts

$result = $client->listArtifacts([/* ... */]);
$promise = $client->listArtifactsAsync([/* ... */]);

Lists the artifacts for the associated agent space

Parameter Syntax

$result = $client->listArtifacts([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

maxResults
Type: int

Maximum number of results to return

nextToken
Type: string

Token for pagination

Result Syntax

[
    'artifactSummaries' => [
        [
            'artifactId' => '<string>',
            'artifactType' => 'TXT|PNG|JPEG|MD|PDF|DOCX|DOC|JSON|YAML',
            'fileName' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
artifactSummaries
Required: Yes
Type: Array of ArtifactSummary structures

List of artifact summaries

nextToken
Type: string

Token for pagination to retrieve the next set of results

Errors

InternalServerException:

Unexpected server error occurred

ResourceNotFoundException:

Specified resource was not found

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

ListDiscoveredEndpoints

$result = $client->listDiscoveredEndpoints([/* ... */]);
$promise = $client->listDiscoveredEndpointsAsync([/* ... */]);

Lists discovered endpoints associated with a pentest job with optional URI prefix filtering

Parameter Syntax

$result = $client->listDiscoveredEndpoints([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'pentestJobId' => '<string>', // REQUIRED
    'prefix' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest job exists

maxResults
Type: int

Maximum number of discovered endpoints to return in a single request (default: 50)

nextToken
Type: string

Token for pagination

pentestJobId
Required: Yes
Type: string

Identifier of the pentest job for which to retrieve discovered endpoints

prefix
Type: string

Optional URI prefix filter to narrow down results

Result Syntax

[
    'discoveredEndpoints' => [
        [
            'agentSpaceId' => '<string>',
            'description' => '<string>',
            'evidence' => '<string>',
            'operation' => '<string>',
            'pentestJobId' => '<string>',
            'taskId' => '<string>',
            'uri' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
discoveredEndpoints
Type: Array of DiscoveredEndpoint structures

List of discovered endpoints for the pentest job

nextToken
Type: string

Token for pagination to retrieve the next set of results

Errors

There are no errors described for this operation.

ListFindings

$result = $client->listFindings([/* ... */]);
$promise = $client->listFindingsAsync([/* ... */]);

Lists findings with filtering and pagination support. When filters are applied, the actual number of results returned may be less than the specified limit

Parameter Syntax

$result = $client->listFindings([
    'agentSpaceId' => '<string>', // REQUIRED
    'confidence' => 'FALSE_POSITIVE|UNCONFIRMED|LOW|MEDIUM|HIGH',
    'maxResults' => <integer>,
    'name' => '<string>',
    'nextToken' => '<string>',
    'pentestJobId' => '<string>', // REQUIRED
    'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
    'riskType' => '<string>',
    'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest job exists

confidence
Type: string

Filter findings by confidence level

maxResults
Type: int

Maximum number of findings to return in a single request (default: 50)

name
Type: string

Filter findings by name (case-insensitive substring search)

nextToken
Type: string

Token for pagination

pentestJobId
Required: Yes
Type: string

Identifier of the pentest job for which to retrieve associated findings

riskLevel
Type: string

Filter findings by risk level

riskType
Type: string

Filter findings by risk type

status
Type: string

Filter findings by status

Result Syntax

[
    'findingsSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'confidence' => 'FALSE_POSITIVE|UNCONFIRMED|LOW|MEDIUM|HIGH',
            'createdAt' => <DateTime>,
            'findingId' => '<string>',
            'name' => '<string>',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
            'riskType' => '<string>',
            'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
findingsSummaries
Type: Array of FindingSummary structures

List of finding summaries matching the filter criteria

nextToken
Type: string

Token for pagination to retrieve the next set of results

Errors

There are no errors described for this operation.

ListIntegratedResources

$result = $client->listIntegratedResources([/* ... */]);
$promise = $client->listIntegratedResourcesAsync([/* ... */]);

Lists the integrated resources for an agent space

Parameter Syntax

$result = $client->listIntegratedResources([
    'agentSpaceId' => '<string>', // REQUIRED
    'integrationId' => '<string>',
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'resourceType' => 'CODE_REPOSITORY',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

integrationId
Type: string

Filter integrated resources by a specific integration

maxResults
Type: int

Maximum number of results to return

nextToken
Type: string

Token for pagination

resourceType
Type: string

Filter integrated resources by resource type

Result Syntax

[
    'integratedResourceSummaries' => [
        [
            'capabilities' => [
                'github' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
            ],
            'integrationId' => '<string>',
            'resource' => [
                'githubRepository' => [
                    'accessType' => 'PRIVATE|PUBLIC',
                    'name' => '<string>',
                    'owner' => '<string>',
                    'providerResourceId' => '<string>',
                ],
            ],
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
integratedResourceSummaries
Required: Yes
Type: Array of IntegratedResourceSummary structures

List of integrated resources

nextToken
Type: string

Token for pagination to retrieve the next set of results

Errors

ResourceNotFoundException:

Specified resource was not found

InternalServerException:

Unexpected server error occurred

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

ListIntegrations

$result = $client->listIntegrations([/* ... */]);
$promise = $client->listIntegrationsAsync([/* ... */]);

Retrieves the Integrations associated with the user's account

Parameter Syntax

$result = $client->listIntegrations([
    'filter' => [
        'provider' => 'GITHUB',
        'providerType' => 'SOURCE_CODE|DOCUMENTATION',
    ],
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
filter
Type: IntegrationFilter structure

Filter criteria for integrations

maxResults
Type: int

Maximum number of results to return

nextToken
Type: string

Token for pagination

Result Syntax

[
    'integrationSummaries' => [
        [
            'displayName' => '<string>',
            'installationId' => '<string>',
            'integrationId' => '<string>',
            'provider' => 'GITHUB',
            'providerType' => 'SOURCE_CODE|DOCUMENTATION',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
integrationSummaries
Required: Yes
Type: Array of IntegrationSummary structures

List of integration summaries

nextToken
Type: string

Token for pagination to retrieve the next set of results

Errors

ResourceNotFoundException:

Specified resource was not found

InternalServerException:

Unexpected server error occurred

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

ListMemberships

$result = $client->listMemberships([/* ... */]);
$promise = $client->listMembershipsAsync([/* ... */]);

Lists all members associated to an agent space with pagination support

Parameter Syntax

$result = $client->listMemberships([
    'agentSpaceId' => '<string>', // REQUIRED
    'applicationId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'memberType' => 'USER|ALL',
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Agent space identifier

applicationId
Required: Yes
Type: string

Application identifier

maxResults
Type: int

Maximum number of results to return

memberType
Type: string

Filter by member type

nextToken
Type: string

Token for pagination

Result Syntax

[
    'membershipSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'applicationId' => '<string>',
            'config' => [
                'user' => [
                    'role' => 'MEMBER',
                ],
            ],
            'createdAt' => <DateTime>,
            'createdBy' => '<string>',
            'memberType' => 'USER',
            'membershipId' => '<string>',
            'metadata' => [
                'user' => [
                    'email' => '<string>',
                    'username' => '<string>',
                ],
            ],
            'updatedAt' => <DateTime>,
            'updatedBy' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
membershipSummaries
Required: Yes
Type: Array of MembershipSummary structures

List of membership summaries

nextToken
Type: string

Token for next page of results

Errors

There are no errors described for this operation.

ListPentestJobTasks

$result = $client->listPentestJobTasks([/* ... */]);
$promise = $client->listPentestJobTasksAsync([/* ... */]);

Lists tasks associated with a specific pentest job

Parameter Syntax

$result = $client->listPentestJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'categoryName' => '<string>',
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'pentestJobId' => '<string>',
    'stepName' => 'PREFLIGHT|STATIC_ANALYSIS|PENTEST|FINALIZING',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

categoryName
Type: string

Filter tasks by category name.

maxResults
Type: int

Maximum number of tasks to return in a single request

nextToken
Type: string

Token for pagination to retrieve the next set of results

pentestJobId
Type: string

Identifier of the pentest job whose tasks to list

stepName
Type: string

Filter tasks by step name

Result Syntax

[
    'nextToken' => '<string>',
    'taskSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'riskType' => 'CROSS_SITE_SCRIPTING|DEFAULT_CREDENTIALS|INSECURE_DIRECT_OBJECT_REFERENCE|PRIVILEGE_ESCALATION|SERVER_SIDE_TEMPLATE_INJECTION|COMMAND_INJECTION|CODE_INJECTION|SQL_INJECTION|ARBITRARY_FILE_UPLOAD|INSECURE_DESERIALIZATION|LOCAL_FILE_INCLUSION|INFORMATION_DISCLOSURE|PATH_TRAVERSAL|SERVER_SIDE_REQUEST_FORGERY|JSON_WEB_TOKEN_VULNERABILITIES|XML_EXTERNAL_ENTITY|FILE_DELETION|OTHER|GRAPHQL_VULNERABILITIES|BUSINESS_LOGIC_VULNERABILITIES|CRYPTOGRAPHIC_VULNERABILITIES|DENIAL_OF_SERVICE|FILE_ACCESS|FILE_CREATION|DATABASE_MODIFICATION|DATABASE_ACCESS|OUTBOUND_SERVICE_REQUEST|UNKNOWN',
            'taskId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

Token for pagination to retrieve the next set of results

taskSummaries
Type: Array of TaskSummary structures

List of task summaries associated with the specified pentest job

Errors

There are no errors described for this operation.

ListPentestJobsForPentest

$result = $client->listPentestJobsForPentest([/* ... */]);
$promise = $client->listPentestJobsForPentestAsync([/* ... */]);

Lists pentest jobs associated with a pentest

Parameter Syntax

$result = $client->listPentestJobsForPentest([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'pentestId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

maxResults
Type: int

Maximum number of pentest jobs to return in a single request

nextToken
Type: string

Token for pagination

pentestId
Required: Yes
Type: string

Identifier of the pentest for which to retrieve associated jobs

Result Syntax

[
    'nextToken' => '<string>',
    'pentestJobSummaries' => [
        [
            'createdAt' => <DateTime>,
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

Token for pagination to retrieve the next set of results

pentestJobSummaries
Type: Array of PentestJobSummary structures

List of pentest job summaries associated with the pentest

Errors

There are no errors described for this operation.

ListPentests

$result = $client->listPentests([/* ... */]);
$promise = $client->listPentestsAsync([/* ... */]);

Lists pentests with optional filtering by status

Parameter Syntax

$result = $client->listPentests([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

maxResults
Type: int

Maximum number of pentests to return in a single request

nextToken
Type: string

Token for pagination

Result Syntax

[
    'nextToken' => '<string>',
    'pentestSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'pentestId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

Token for pagination to retrieve the next set of results

pentestSummaries
Type: Array of PentestSummary structures

List of pentest summaries matching the filter criteria

Errors

There are no errors described for this operation.

ListTagsForResource

$result = $client->listTagsForResource([/* ... */]);
$promise = $client->listTagsForResourceAsync([/* ... */]);

Lists tags for a Security Agent resource

Parameter Syntax

$result = $client->listTagsForResource([
    'resourceArn' => '<string>', // REQUIRED
]);

Parameter Details

Members
resourceArn
Required: Yes
Type: string

ARN of the resource to list tags for

Result Syntax

[
    'tags' => ['<string>', ...],
]

Result Details

Members
tags
Type: Associative array of custom strings keys (TagKey) to strings

Tags associated with the resource

Errors

There are no errors described for this operation.

ListTargetDomains

$result = $client->listTargetDomains([/* ... */]);
$promise = $client->listTargetDomainsAsync([/* ... */]);

Lists target domains

Parameter Syntax

$result = $client->listTargetDomains([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
maxResults
Type: int

Maximum number of target domains to return

nextToken
Type: string

Token for pagination

Result Syntax

[
    'nextToken' => '<string>',
    'targetDomainSummaries' => [
        [
            'domainName' => '<string>',
            'targetDomainId' => '<string>',
            'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

Token for next page of results

targetDomainSummaries
Type: Array of TargetDomainSummary structures

List of target domain summaries

Errors

There are no errors described for this operation.

StartCodeRemediation

$result = $client->startCodeRemediation([/* ... */]);
$promise = $client->startCodeRemediationAsync([/* ... */]);

Starts code remediation for the specified findings

Parameter Syntax

$result = $client->startCodeRemediation([
    'agentSpaceId' => '<string>', // REQUIRED
    'findingIds' => ['<string>', ...], // REQUIRED
    'pentestJobId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest job exists

findingIds
Required: Yes
Type: Array of strings

Identifiers of the findings to start code remediation for

pentestJobId
Required: Yes
Type: string

Identifier of the pentest job to start code remediation for

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

StartPentestJob

$result = $client->startPentestJob([/* ... */]);
$promise = $client->startPentestJobAsync([/* ... */]);

Initiates the execution of a pentest

Parameter Syntax

$result = $client->startPentestJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

pentestId
Required: Yes
Type: string

Identifier of the pentest to execute

Result Syntax

[
    'agentSpaceId' => '<string>',
    'createdAt' => <DateTime>,
    'pentestId' => '<string>',
    'pentestJobId' => '<string>',
    'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

ID of the agent space where the pentest exists

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest job was created

pentestId
Type: string

Unique identifier of the pentest

pentestJobId
Type: string

Unique identifier of the pentest job

status
Type: string

Current status of the pentest job

title
Type: string

Title of the pentest job

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest job was last updated

Errors

There are no errors described for this operation.

StopPentestJob

$result = $client->stopPentestJob([/* ... */]);
$promise = $client->stopPentestJobAsync([/* ... */]);

Stops the execution of a running pentest

Parameter Syntax

$result = $client->stopPentestJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestJobId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

pentestJobId
Required: Yes
Type: string

Identifier of the pentest job to stop

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

TagResource

$result = $client->tagResource([/* ... */]);
$promise = $client->tagResourceAsync([/* ... */]);

Adds tags to a Security Agent resource

Parameter Syntax

$result = $client->tagResource([
    'resourceArn' => '<string>', // REQUIRED
    'tags' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
resourceArn
Required: Yes
Type: string

ARN of the resource to tag

tags
Required: Yes
Type: Associative array of custom strings keys (TagKey) to strings

Tags to add to the resource

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

UntagResource

$result = $client->untagResource([/* ... */]);
$promise = $client->untagResourceAsync([/* ... */]);

Removes tags from a Security Agent resource

Parameter Syntax

$result = $client->untagResource([
    'resourceArn' => '<string>', // REQUIRED
    'tagKeys' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
resourceArn
Required: Yes
Type: string

ARN of the resource to untag

tagKeys
Required: Yes
Type: Array of strings

List of tag keys to remove from the resource

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

UpdateAgentSpace

$result = $client->updateAgentSpace([/* ... */]);
$promise = $client->updateAgentSpaceAsync([/* ... */]);

Updates an agent space record

Parameter Syntax

$result = $client->updateAgentSpace([
    'agentSpaceId' => '<string>', // REQUIRED
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false, // REQUIRED
        'generalPurposeScanning' => true || false, // REQUIRED
    ],
    'description' => '<string>',
    'name' => '<string>',
    'targetDomainIds' => ['<string>', ...],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space to update

awsResources
Type: AWSResources structure

AWS resource configurations associated with the agent space

codeReviewSettings
Type: CodeReviewSettings structure

Configuration for code review analysis, including controls scanning and general purpose scanning settings

description
Type: string

Description of the agent space

name
Type: string

Name of the agent space

targetDomainIds
Type: Array of strings

Target domain IDs to associate with the agent space

Result Syntax

[
    'agentSpaceId' => '<string>',
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false,
        'generalPurposeScanning' => true || false,
    ],
    'createdAt' => <DateTime>,
    'description' => '<string>',
    'name' => '<string>',
    'targetDomainIds' => ['<string>', ...],
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

awsResources
Type: AWSResources structure

AWS resource configurations associated with the agent space

codeReviewSettings
Type: CodeReviewSettings structure

Configuration for code review analysis, including controls scanning and general purpose scanning settings

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was created

description
Type: string

Description of the agent space

name
Required: Yes
Type: string

Name of the agent space

targetDomainIds
Type: Array of strings

List of target domain IDs registered with the agent space

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was last updated

Errors

There are no errors described for this operation.

UpdateApplication

$result = $client->updateApplication([/* ... */]);
$promise = $client->updateApplicationAsync([/* ... */]);

Updates application configuration

Parameter Syntax

$result = $client->updateApplication([
    'applicationId' => '<string>', // REQUIRED
    'defaultKmsKeyId' => '<string>',
    'roleArn' => '<string>',
]);

Parameter Details

Members
applicationId
Required: Yes
Type: string

Application ID

defaultKmsKeyId
Type: string

Default KMS key identifier. Use an empty string to remove the default KMS key.

roleArn
Type: string

ARN of the IAM role that the application uses to access AWS resources on your behalf

Result Syntax

[
    'applicationId' => '<string>',
]

Result Details

Members
applicationId
Required: Yes
Type: string

Application ID

Errors

There are no errors described for this operation.

UpdateFinding

$result = $client->updateFinding([/* ... */]);
$promise = $client->updateFindingAsync([/* ... */]);

Updates an existing security finding with new details or status

Parameter Syntax

$result = $client->updateFinding([
    'agentSpaceId' => '<string>', // REQUIRED
    'findingId' => '<string>', // REQUIRED
    'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
    'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the finding exists

findingId
Required: Yes
Type: string

Identifier of the finding to update

riskLevel
Type: string

Updated severity level of the identified risk

status
Type: string

Updated status of the finding

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

UpdateIntegratedResources

$result = $client->updateIntegratedResources([/* ... */]);
$promise = $client->updateIntegratedResourcesAsync([/* ... */]);

Updates the integrated resources for an agent space

Parameter Syntax

$result = $client->updateIntegratedResources([
    'agentSpaceId' => '<string>', // REQUIRED
    'integrationId' => '<string>', // REQUIRED
    'items' => [ // REQUIRED
        [
            'capabilities' => [
                'github' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
            ],
            'resource' => [ // REQUIRED
                'githubRepository' => [
                    'name' => '<string>', // REQUIRED
                    'owner' => '<string>', // REQUIRED
                ],
            ],
        ],
        // ...
    ],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

integrationId
Required: Yes
Type: string

Unique identifier of the integration

items
Required: Yes
Type: Array of IntegratedResourceInputItem structures

List of integrated resources to update

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

ValidationException:

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

ResourceNotFoundException:

Specified resource was not found

InternalServerException:

Unexpected server error occurred

ConflictException:

Request conflicts with current resource state

ThrottlingException:

Request denied due to throttling

AccessDeniedException:

Request denied due to insufficient permissions

UpdatePentest

$result = $client->updatePentest([/* ... */]);
$promise = $client->updatePentestAsync([/* ... */]);

Updates an existing pentest with new configuration or settings

Parameter Syntax

$result = $client->updatePentest([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'networkTrafficConfig' => [
        'customHeaders' => [
            [
                'name' => '<string>',
                'value' => '<string>',
            ],
            // ...
        ],
        'rules' => [
            [
                'effect' => 'ALLOW|DENY',
                'networkTrafficRuleType' => 'URL',
                'pattern' => '<string>',
            ],
            // ...
        ],
    ],
    'pentestId' => '<string>', // REQUIRED
    'serviceRole' => '<string>',
    'title' => '<string>',
    'vpcConfig' => [
        'securityGroupArns' => ['<string>', ...],
        'subnetArns' => ['<string>', ...],
        'vpcArn' => '<string>',
    ],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

assets
Type: Assets structure

Updated assets to be tested

codeRemediationStrategy
Type: string

Strategy for code remediation on findings

excludeRiskTypes
Type: Array of strings

A list of risk types excluded from the pentest execution

logConfig
Type: CloudWatchLog structure

CloudWatch log group and stream prefix where pentest execution logs are stored

networkTrafficConfig
Type: NetworkTrafficConfig structure

Configuration for network traffic filtering

pentestId
Required: Yes
Type: string

Identifier of the pentest to update

serviceRole
Type: string

Updated service role ARN for accessing customer resources

title
Type: string

New title for the pentest

vpcConfig
Type: VpcConfig structure

VPC configuration that the Security Agent accesses

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'createdAt' => <DateTime>,
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'pentestId' => '<string>',
    'serviceRole' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

ID of the agent space where the pentest exists

assets
Type: Assets structure

Assets to be tested in the updated pentest

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was created

excludeRiskTypes
Type: Array of strings

A list of risk types excluded from the pentest execution

logConfig
Type: CloudWatchLog structure

CloudWatch log group and stream prefix where pentest execution logs are stored

pentestId
Type: string

Unique identifier of the updated pentest

serviceRole
Type: string

Service role ARN for accessing customer resources

title
Type: string

Title of the updated pentest

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was last updated

Errors

There are no errors described for this operation.

UpdateTargetDomain

$result = $client->updateTargetDomain([/* ... */]);
$promise = $client->updateTargetDomainAsync([/* ... */]);

Updates a target domain record

Parameter Syntax

$result = $client->updateTargetDomain([
    'targetDomainId' => '<string>', // REQUIRED
    'verificationMethod' => 'DNS_TXT|HTTP_ROUTE', // REQUIRED
]);

Parameter Details

Members
targetDomainId
Required: Yes
Type: string

Unique identifier of the target domain to update

verificationMethod
Required: Yes
Type: string

Verification method for the target domain

Result Syntax

[
    'createdAt' => <DateTime>,
    'domainName' => '<string>',
    'targetDomainId' => '<string>',
    'verificationDetails' => [
        'dnsTxt' => [
            'dnsRecordName' => '<string>',
            'dnsRecordType' => 'TXT',
            'token' => '<string>',
        ],
        'httpRoute' => [
            'routePath' => '<string>',
            'token' => '<string>',
        ],
        'method' => 'DNS_TXT|HTTP_ROUTE',
    ],
    'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
    'verifiedAt' => <DateTime>,
]

Result Details

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was registered

domainName
Required: Yes
Type: string

Name of the target domain

targetDomainId
Required: Yes
Type: string

Unique identifier of the target domain

verificationDetails
Type: VerificationDetails structure

Verification details to verify registered target domain

verificationStatus
Required: Yes
Type: string

Current verification status of the registered target domain

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was last successfully verified

Errors

There are no errors described for this operation.

VerifyTargetDomain

$result = $client->verifyTargetDomain([/* ... */]);
$promise = $client->verifyTargetDomainAsync([/* ... */]);

Verifies ownership for a registered target domain

Parameter Syntax

$result = $client->verifyTargetDomain([
    'targetDomainId' => '<string>', // REQUIRED
]);

Parameter Details

Members
targetDomainId
Required: Yes
Type: string

Unique identifier of the target domain

Result Syntax

[
    'createdAt' => <DateTime>,
    'domainName' => '<string>',
    'status' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
    'targetDomainId' => '<string>',
    'updatedAt' => <DateTime>,
    'verifiedAt' => <DateTime>,
]

Result Details

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was registered

domainName
Type: string

Name of the registered target domain

status
Type: string

Current verification status of the registered target domain

targetDomainId
Type: string

Unique identifier of the target domain

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was last updated

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was last successfully verified

Errors

There are no errors described for this operation.

Shapes

AWSResources

Description

AWS resource configurations associated with the agent space

Members
iamRoles
Type: Array of strings

IAM role ARNs that the Security Agent can assume to access customer resources

lambdaFunctionArns
Type: Array of strings

Lambda function ARNs or names used to retrieve tester credentials for pentests

logGroups
Type: Array of strings

CloudWatch log group ARNs or names used to store Security Agent logs

s3Buckets
Type: Array of strings

S3 bucket ARNs or names used to store Security Agent artifacts

secretArns
Type: Array of strings

SecretsManager secret ARNs or names used to store tester credentials for pentests

vpcs
Type: Array of VpcConfig structures

VPC configurations that the Security Agent accesses in the customer environment

AccessDeniedException

Description

Request denied due to insufficient permissions

Members
message
Required: Yes
Type: string

Error description

Actor

Description

Represents an entity that interacts with the system during security testing

Members
authentication
Type: Authentication structure

Authentication information used by the actor to access resources

description
Type: string

Additional description or details about the actor

identifier
Type: string

Unique identifier for the actor (case-insensitive)

uris
Type: Array of strings

List of URIs accessible with the actor's credentials

AgentSpace

Description

Agent space structure

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

awsResources
Type: AWSResources structure

AWS resource configurations

codeReviewSettings
Type: CodeReviewSettings structure

Configuration for code review analysis, including controls scanning and general purpose scanning settings

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was created

description
Type: string

Description of the agent space

kmsKeyId
Type: string

Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.

name
Required: Yes
Type: string

Name of the agent space

targetDomainIds
Type: Array of strings

List of target domain IDs registered with the agent space

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was last updated

AgentSpaceSummary

Description

Summary information for an agent space

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was created

name
Required: Yes
Type: string

Name of the agent space

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the agent space was last updated

ApplicationSummary

Description

Application summary for list operations

Members
applicationId
Required: Yes
Type: string

Unique identifier of the application

applicationName
Required: Yes
Type: string

Name of the application, automatically assigned by the service

defaultKmsKeyId
Type: string

Default KMS key identifier used to encrypt application data

domain
Required: Yes
Type: string

Domain where the application is available

Artifact

Description

Files containing relevant data for review

Members
contents
Required: Yes
Type: string

The content of the artifact

type
Required: Yes
Type: string

The file type of the artifact

ArtifactMetadataItem

Description

Metadata in relation to the artifact

Members
agentSpaceId
Required: Yes
Type: string

Unique identifier of the agent space

artifactId
Required: Yes
Type: string

Unique identifier of the artifact

fileName
Required: Yes
Type: string

Name of the artifact file

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the artifact was last updated

ArtifactSummary

Description

Summary information about an artifact

Members
artifactId
Required: Yes
Type: string

Unique identifier of the artifact

artifactType
Required: Yes
Type: string

Type of the artifact file

fileName
Required: Yes
Type: string

Name of the artifact file

Assets

Description

Collection of assets to be tested or used during a pentest

Members
actors
Type: Array of Actor structures

List of actors that interact with the system

documents
Type: Array of DocumentInfo structures

List of documents providing context for testing

endpoints
Type: Array of Endpoint structures

List of web application endpoints to test

integratedRepositories
Type: Array of IntegratedRepository structures

List of integrated code repositories

sourceCode
Type: Array of SourceCodeRepository structures

List of source code repositories for static analysis

Authentication

Description

Authentication information used to access protected resources

Members
providerType
Type: string

Provider type for the authentication credentials

value
Type: string

Authentication credential value or reference

Category

Description

Represents a category classification for tasks

Members
isPrimary
Type: boolean

Whether this is the primary category for the task

name
Type: string

Name of the category

CloudWatchLog

Description

Reference to logs stored in CloudWatch

Members
logGroup
Type: string

Name of the CloudWatch log group

logStream
Type: string

Name of the CloudWatch log stream

CodeRemediationTask

Description

Information about task for code remediation

Members
status
Required: Yes
Type: string

Current status of the code remediation task

statusReason
Type: string

Reason for the current code remediation task status

taskDetails
Type: Array of CodeRemediationTaskDetails structures

Details of the code remediation for each repository

CodeRemediationTaskDetails

Description

Code remediation details for a single repository

Members
codeDiffLink
Type: string

Link to the code diff for the remediation

pullRequestLink
Type: string

Link to the pull request for the remediation

repoName
Type: string

Name of the repository

CodeReviewSettings

Description

Details of code review settings

Members
controlsScanning
Required: Yes
Type: boolean

Whether Controls are utilized for code review analysis

generalPurposeScanning
Required: Yes
Type: boolean

Whether general purpose analysis is performed for code review

ConflictException

Description

Request conflicts with current resource state

Members
message
Required: Yes
Type: string

Error description

CustomHeader

Description

Custom headers to be set for network requests

Members
name
Type: string

Name of header to set value for

value
Type: string

Value to set for header

DeletePentestFailure

Description

Information about a failed pentest deletion attempt

Members
pentestId
Type: string

Identifier of the pentest that failed to delete

reason
Type: string

Reason for the deletion failure

DiscoveredEndpoint

Description

Represents a discovered endpoint during pentest execution

Members
agentSpaceId
Required: Yes
Type: string

Identifier of the agent space where the endpoint was discovered

description
Type: string

Additional description of the endpoint

evidence
Type: string

Optional evidence or additional information about the endpoint

operation
Type: string

Operation or action associated with the endpoint

pentestJobId
Required: Yes
Type: string

Identifier of the pentest job that discovered this endpoint

taskId
Required: Yes
Type: string

Identifier of the task that discovered this endpoint

uri
Required: Yes
Type: string

The URI of the discovered endpoint

DnsVerification

Description

Represents dns txt verification details

Members
dnsRecordName
Type: string

Record name to be added in DNS for target domain

dnsRecordType
Type: string

Type of record to be added in DNS for target domain

token
Type: string

Token used to verify domain ownership

DocumentInfo

Description

Information about a document relevant to security testing

Members
artifactId
Type: string

Artifact ID of the document

s3Location
Type: string

S3 storage location of the document

Endpoint

Description

Represents a web application endpoint to be tested

Members
uri
Type: string

URI of the endpoint to test

ErrorInformation

Description

Error information regarding the pentest job

Members
code
Type: string

Pentest job failure error code

message
Type: string

Pentest job failure error message

ExecutionContext

Description

Additional context about a pentest or task execution

Members
context
Type: string

Context associated with a pentest or task execution

contextType
Type: string

The category of context

timestamp
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp associated with a pentest or task execution

Finding

Description

Represents a security vulnerability or issue discovered during testing

Members
agentSpaceId
Required: Yes
Type: string

Identifier of the agent space that created this finding

attackScript
Type: string

Proof-of-concept code demonstrating the vulnerability

codeRemediationTask
Type: CodeRemediationTask structure

Code remediation task associated with this finding

confidence
Type: string

Confidence level of the finding

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the finding was created

description
Type: string

Detailed description of the security vulnerability

findingId
Required: Yes
Type: string

Unique identifier for the finding

lastUpdatedBy
Type: string

Identifier of the task or agent that last updated this finding

name
Type: string

Name or title of the finding

pentestId
Type: string

Identifier of the parent pentest

pentestJobId
Type: string

Identifier of the pentest job

reasoning
Type: string

Justification for the assigned risk score

riskLevel
Type: string

Severity level of the identified risk

riskScore
Type: string

Risk score associated with the finding

riskType
Type: string

Type of security risk identified

status
Type: string

Current status of the finding

taskId
Type: string

Identifier of the associated task

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the finding was last updated

FindingSummary

Description

Summary information for a security finding

Members
agentSpaceId
Required: Yes
Type: string

Identifier of the agent space that created this finding

confidence
Type: string

Confidence level of the finding

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the finding was created

findingId
Required: Yes
Type: string

Unique identifier for the finding

name
Type: string

Name or title of the finding

pentestId
Type: string

Identifier of the parent pentest

pentestJobId
Type: string

Identifier of the pentest job

riskLevel
Type: string

Severity level of the identified risk

riskType
Type: string

Type of security risk identified

status
Type: string

Current status of the finding

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the finding was last updated

GitHubIntegrationInput

Description

Input parameters for GitHub integration

Members
code
Required: Yes
Type: string

Authorization code from OAuth flow

organizationName
Type: string

Name of the GitHub organization

state
Required: Yes
Type: string

CSRF state token for OAuth security

GitHubRepositoryMetadata

Description

Metadata specific to a GitHub repository integrated resource

Members
accessType
Type: string

Access / Visibility Type of the integrated resource

name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc

owner
Required: Yes
Type: string

Owner of the repository

providerResourceId
Required: Yes
Type: string

Unique resource identifier from the vendor

GitHubRepositoryResource

Description

GitHub repository resource details

Members
name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc

owner
Required: Yes
Type: string

Owner of the repository

GitHubResourceCapabilities

Description

Capabilities for GitHub repositories

Members
leaveComments
Type: boolean

Post code review comments on pull requests

remediateCode
Type: boolean

Create pull requests with automated fixes

HttpVerification

Description

Represents http route verification details

Members
routePath
Type: string

Route path where verification token should be placed

token
Type: string

Token used to verify domain ownership

IdCConfiguration

Description

IdC configuration containing application and instance ARNs

Members
idcApplicationArn
Type: string

ARN of the IAM Identity Center application associated with this application

idcInstanceArn
Type: string

ARN of the IAM Identity Center instance used for user authentication

IntegratedRepository

Description

Information about an integrated repository

Members
integrationId
Required: Yes
Type: string

Integration identifier

providerResourceId
Required: Yes
Type: string

External provider resource identifier, e.g., Github repository identifier

IntegratedResource

Description

Integrated resource details from a provider

Members
githubRepository
Type: GitHubRepositoryResource structure

GitHub repository resource

IntegratedResourceInputItem

Description

Input item for updating an integrated resource

Members
capabilities

Provider-specific capabilities for the resource

resource
Required: Yes
Type: IntegratedResource structure

Configuration of the resource

IntegratedResourceMetadata

Description

Metadata about an integrated resource

Members
githubRepository
Type: GitHubRepositoryMetadata structure

Metadata for a GitHub repository resource

IntegratedResourceSummary

Description

Summary information about an integrated resource

Members
capabilities

Capabilities of the integrated resource

integrationId
Required: Yes
Type: string

Unique identifier of the integration

resource
Required: Yes
Type: IntegratedResourceMetadata structure

The integrated resource details

IntegrationFilter

Description

Filter criteria for integrations

Members
provider
Type: string

Filter by provider

providerType
Type: string

Filter by provider type

IntegrationSummary

Description

Summary information about an integration

Members
displayName
Required: Yes
Type: string

Display name for the integration

installationId
Required: Yes
Type: string

Installation identifier from the provider

integrationId
Required: Yes
Type: string

Unique identifier of the integration

provider
Required: Yes
Type: string

Provider type

providerType
Required: Yes
Type: string

Type of provider integration

InternalServerException

Description

Unexpected server error occurred

Members
message
Required: Yes
Type: string

Error description

LogLocation

Description

Location information for execution logs

Members
cloudWatchLog
Type: CloudWatchLog structure

CloudWatch log information if logs are stored in CloudWatch

logType
Type: string

Type of log storage

MemberMetadata

Description

Metadata associated with the member

Members
user
Type: UserMetadata structure

User metadata for USER members

MembershipConfig

Description

Member-specific configuration

Members
user
Type: UserConfig structure

Configuration for user members

MembershipSummary

Description

Membership summary for list operations

Members
agentSpaceId
Required: Yes
Type: string

Agent space identifier

applicationId
Required: Yes
Type: string

Application identifier

config
Type: MembershipConfig structure

Configuration specific to the member type

createdAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the membership was created (ISO 8601)

createdBy
Required: Yes
Type: string

User ID who created the membership

memberType
Required: Yes
Type: string

Type of member

membershipId
Required: Yes
Type: string

Member identifier (userId or agentSpaceId)

metadata
Type: MemberMetadata structure

Member-specific metadata

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the membership was last updated (ISO 8601)

updatedBy
Required: Yes
Type: string

User ID who last updated the membership

NetworkTrafficConfig

Description

Configuration for network traffic filtering

Members
customHeaders
Type: Array of CustomHeader structures

Custom headers for requests

rules
Type: Array of NetworkTrafficRule structures

Traffic filtering rules

NetworkTrafficRule

Description

Network traffic filtering rule

Members
effect
Type: string

Action to take when the rule matches

networkTrafficRuleType
Type: string

Type of network traffic rule

pattern
Type: string

Pattern to match against

Pentest

Description

Represents a pentest configuration and execution details

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

assets
Required: Yes
Type: Assets structure

Collection of assets to be tested or used during the pentest

codeRemediationStrategy
Type: string

Strategy for code remediation on findings

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was created

excludeRiskTypes
Type: Array of strings

A list of risk types excluded from the pentest execution

logConfig
Type: CloudWatchLog structure

CloudWatch log group and stream prefix where pentest execution logs are stored

networkTrafficConfig
Type: NetworkTrafficConfig structure

Configuration for network traffic filtering

pentestId
Required: Yes
Type: string

Unique identifier for the pentest

serviceRole
Type: string

Service role ARN for accessing customer resources

title
Required: Yes
Type: string

Title or name of the pentest

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was last updated

vpcConfig
Type: VpcConfig structure

VPC configuration that the Security Agent accesses

PentestJob

Description

Represents a pentest job

Members
actors
Type: Array of Actor structures

List of actors that interact with the system

allowedDomains
Type: Array of Endpoint structures

List of allowed domains for network access

codeRemediationStrategy
Type: string

Strategy for code remediation on findings

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest job was created

documents
Type: Array of DocumentInfo structures

List of documents providing context for testing

endpoints
Type: Array of Endpoint structures

List of web application endpoints to test

errorInformation
Type: ErrorInformation structure

Error information regarding the pentest job

excludePaths
Type: Array of Endpoint structures

List of URL paths to exclude from testing

excludeRiskTypes
Type: Array of strings

A list of risk types excluded from the pentest job

executionContext
Type: Array of ExecutionContext structures

A list of execution context messages associated with the pentest job

integratedRepositories
Type: Array of IntegratedRepository structures

List of integrated code repositories

logConfig
Type: CloudWatchLog structure

CloudWatch log group and stream prefix where pentest job logs are stored

networkTrafficConfig
Type: NetworkTrafficConfig structure

Configuration for network traffic filtering

overview
Type: string

Overview or description of the pentest job

pentestId
Type: string

Identifier of the parent pentest

pentestJobId
Type: string

Unique identifier of the pentest job

serviceRole
Type: string

Service role ARN for accessing customer resources

sourceCode
Type: Array of SourceCodeRepository structures

List of source code repositories for static analysis

status
Type: string

Current status of the pentest job

steps
Type: Array of Step structures

List of execution steps for the pentest job

title
Type: string

Title or name of the pentest

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest job was last updated

vpcConfig
Type: VpcConfig structure

VPC configuration that the Security Agent accesses

PentestJobSummary

Description

Summary information for a pentest job

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest job was created

pentestId
Required: Yes
Type: string

Identifier of the parent pentest

pentestJobId
Required: Yes
Type: string

Unique identifier of the pentest job

status
Type: string

Current status of the pentest job

title
Type: string

Title or name of the pentest

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest job was last updated

PentestSummary

Description

Summary information for a pentest

Members
agentSpaceId
Required: Yes
Type: string

ID of the agent space where the pentest exists

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was created

pentestId
Required: Yes
Type: string

Unique identifier for the pentest

title
Required: Yes
Type: string

Title or name of the pentest

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the pentest was last updated

ProviderInput

Description

Provider-specific input parameters for integration

Members
github
Type: GitHubIntegrationInput structure

GitHub integration input

ProviderResourceCapabilities

Description

Provider-specific capabilities for integrated resources

Members
github
Type: GitHubResourceCapabilities structure

Capabilities for GitHub repositories

ResourceNotFoundException

Description

Specified resource was not found

Members
message
Required: Yes
Type: string

Error description

SourceCodeRepository

Description

Information about a source code repository for static analysis

Members
s3Location
Type: string

S3 storage location of the repository

Step

Description

Represents a single step in pentest job execution

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the step was created

name
Type: string

Name of the execution step

status
Type: string

Current status of the step

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the step was last updated

TargetDomain

Description

Represents a target domain

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was registered

domainName
Required: Yes
Type: string

Name of the registered target domain

targetDomainId
Required: Yes
Type: string

Unique identifier of the target domain

verificationDetails
Type: VerificationDetails structure

Verification details to verify registered target domain

verificationStatus
Type: string

Current verification status of the registered target domain

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the target domain was last successfully verified

TargetDomainSummary

Description

Summary information for a target domain

Members
domainName
Required: Yes
Type: string

Name of the registered target domain

targetDomainId
Required: Yes
Type: string

Unique identifier of the target domain

verificationStatus
Type: string

Current verification status of the registered target domain

Task

Description

Represents a task within a pentest job

Members
agentSpaceId
Type: string

Identifier of the agent space this task belongs to

categories
Type: Array of Category structures

List of categories associated with this task

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the task was created

description
Type: string

Detailed description of the task's purpose and scope

executionStatus
Type: string

Current status of the task execution

logsLocation
Type: LogLocation structure

Location of execution logs for auditing and review

pentestId
Type: string

Identifier of the parent pentest

pentestJobId
Type: string

Identifier of the pentest job this task belongs to

riskType
Type: string

Type of security risk this task is designed to test

targetEndpoint
Type: Endpoint structure

Target endpoint for this security test

taskId
Required: Yes
Type: string

Unique identifier for the task

title
Type: string

Title or name of the task

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the task was last updated

TaskSummary

Description

Summary information for a task

Members
agentSpaceId
Type: string

Identifier of the agent space this task belongs to

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the task was created

executionStatus
Type: string

Current status of the task execution

pentestId
Type: string

Identifier of the parent pentest

pentestJobId
Type: string

Identifier of the pentest job this task belongs to

riskType
Type: string

Type of security risk this task is designed to test

taskId
Required: Yes
Type: string

Unique identifier for the task

title
Type: string

Title or name of the task

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

Timestamp when the task was last updated

ThrottlingException

Description

Request denied due to throttling

Members
message
Required: Yes
Type: string

Error description

quotaCode
Type: string

Quota code for throttling limit

serviceCode
Type: string

Service code for throttling limit

UserConfig

Description

User membership configuration

Members
role
Type: string

Role of the user associated to the agent space

UserMetadata

Description

User-specific metadata

Members
email
Required: Yes
Type: string

User email address

username
Required: Yes
Type: string

User name/display name

ValidationException

Description

A standard error for input validation failures. This should be thrown by services when a member of the input structure falls outside of the modeled or documented constraints.

Members
fieldList
Type: Array of ValidationExceptionField structures

A list of specific failures encountered while validating the input. A member can appear in this list more than once if it failed to satisfy multiple constraints.

message
Required: Yes
Type: string

A summary of the validation failure.

ValidationExceptionField

Description

Describes one specific validation failure for an input member.

Members
message
Required: Yes
Type: string

A detailed description of the validation failure.

path
Required: Yes
Type: string

A JSONPointer expression to the structure member whose value failed to satisfy the modeled constraints.

VerificationDetails

Description

Verification details to verify registered target domain

Members
dnsTxt
Type: DnsVerification structure

Represents dns txt verification details

httpRoute
Type: HttpVerification structure

Represents http route verification details

method
Type: string

Type of domain ownership verification method

VpcConfig

Description

Customer VPC configuration that the Security Agent accesses

Members
securityGroupArns
Type: Array of strings

List of security group ARNs or IDs in the customer VPC

subnetArns
Type: Array of strings

List of subnet ARNs or IDs in the customer VPC

vpcArn
Type: string

ARN or ID of the customer VPC