CfnPentestPropsMixin

class aws_cdk.cfn_property_mixins.aws_securityagent.CfnPentestPropsMixin(props, *, strategy=None)

Bases: Mixin

Resource Type definition for AWS::SecurityAgent::Pentest.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html

CloudformationResource:

AWS::SecurityAgent::Pentest

Mixin:

true

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent
import aws_cdk as cdk

# merge_strategy: cdk.IMergeStrategy

cfn_pentest_props_mixin = securityagent.CfnPentestPropsMixin(securityagent.CfnPentestMixinProps(
    agent_space_id="agentSpaceId",
    assets=securityagent.CfnPentestPropsMixin.AssetsProperty(
        actors=[securityagent.CfnPentestPropsMixin.ActorProperty(
            authentication=securityagent.CfnPentestPropsMixin.AuthenticationProperty(
                provider_type="providerType",
                value="value"
            ),
            description="description",
            enable_email_mfa=False,
            identifier="identifier",
            mfa_forwarding_address="mfaForwardingAddress",
            uris=["uris"]
        )],
        documents=[securityagent.CfnPentestPropsMixin.DocumentInfoProperty(
            artifact_id="artifactId",
            s3_location="s3Location"
        )],
        endpoints=[securityagent.CfnPentestPropsMixin.EndpointProperty(
            uri="uri"
        )],
        integrated_repositories=[securityagent.CfnPentestPropsMixin.IntegratedRepositoryProperty(
            branch="branch",
            integration_id="integrationId",
            provider_resource_id="providerResourceId"
        )],
        source_code=[securityagent.CfnPentestPropsMixin.SourceCodeRepositoryProperty(
            s3_location="s3Location"
        )],
        trusted_ca_certificates=[securityagent.CfnPentestPropsMixin.TrustedCaCertificateProperty(
            source=securityagent.CfnPentestPropsMixin.CaCertificateSourceProperty(
                artifact_id="artifactId",
                inline_pem="inlinePem",
                s3_location="s3Location"
            )
        )]
    ),
    clean_up_strategy="cleanUpStrategy",
    code_remediation_strategy="codeRemediationStrategy",
    disable_managed_skills=["disableManagedSkills"],
    exclude_risk_types=["excludeRiskTypes"],
    log_config=securityagent.CfnPentestPropsMixin.CloudWatchLogProperty(
        log_group="logGroup",
        log_stream="logStream"
    ),
    network_traffic_config=securityagent.CfnPentestPropsMixin.NetworkTrafficConfigProperty(
        custom_headers=[securityagent.CfnPentestPropsMixin.CustomHeaderProperty(
            name="name",
            value="value"
        )],
        rules=[securityagent.CfnPentestPropsMixin.NetworkTrafficRuleProperty(
            effect="effect",
            network_traffic_rule_type="networkTrafficRuleType",
            pattern="pattern"
        )]
    ),
    service_role="serviceRole",
    title="title",
    vpc_config=securityagent.CfnPentestPropsMixin.VpcConfigProperty(
        security_group_arns=["securityGroupArns"],
        subnet_arns=["subnetArns"],
        vpc_arn="vpcArn"
    )
),
    strategy=merge_strategy
)

Create a mixin to apply properties to AWS::SecurityAgent::Pentest.

Parameters:

  • props (Union[CfnPentestMixinProps, Dict[str, Any]]) – L1 properties to apply.

  • strategy (Optional[IMergeStrategy]) – Strategy for merging nested properties. Default: - PropertyMergeStrategy.combine()

Methods

apply_to(construct)

Apply the mixin properties to the construct.

Parameters:

construct (IConstruct)

Return type:

None

supports(construct)

Check if this mixin supports the given construct.

Parameters:

construct (IConstruct)

Return type:

bool

Attributes

CFN_PROPERTY_KEYS = ['agentSpaceId', 'assets', 'cleanUpStrategy', 'codeRemediationStrategy', 'disableManagedSkills', 'excludeRiskTypes', 'logConfig', 'networkTrafficConfig', 'serviceRole', 'title', 'vpcConfig']

Static Methods

classmethod is_mixin(x)

Checks if x is a Mixin.

Parameters:

x (Any) – Any object.

Return type:

bool

Returns:

true if x is an object created from a class which extends Mixin.

ActorProperty

class CfnPentestPropsMixin.ActorProperty(*, authentication=None, description=None, enable_email_mfa=None, identifier=None, mfa_forwarding_address=None, uris=None)

Bases: object

An authenticated actor to be used during pentest execution.

Parameters:

  • authentication (Union[IResolvable, AuthenticationProperty, Dict[str, Any], None]) – Authentication configuration for a pentest actor.

  • description (Optional[str]) – Description of the actor.

  • enable_email_mfa (Union[bool, IResolvable, None]) – Whether email-based MFA is enabled for this actor.

  • identifier (Optional[str]) – Identifier for the actor.

  • mfa_forwarding_address (Optional[str]) – Server-generated email forwarding address for receiving MFA codes.

  • uris (Optional[Sequence[str]]) – List of URIs this actor is authorized to access.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-actor.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

actor_property = securityagent.CfnPentestPropsMixin.ActorProperty(
    authentication=securityagent.CfnPentestPropsMixin.AuthenticationProperty(
        provider_type="providerType",
        value="value"
    ),
    description="description",
    enable_email_mfa=False,
    identifier="identifier",
    mfa_forwarding_address="mfaForwardingAddress",
    uris=["uris"]
)

Attributes

authentication

Authentication configuration for a pentest actor.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-actor.html#cfn-securityagent-pentest-actor-authentication

description

Description of the actor.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-actor.html#cfn-securityagent-pentest-actor-description

enable_email_mfa

Whether email-based MFA is enabled for this actor.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-actor.html#cfn-securityagent-pentest-actor-enableemailmfa

identifier

Identifier for the actor.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-actor.html#cfn-securityagent-pentest-actor-identifier

mfa_forwarding_address

Server-generated email forwarding address for receiving MFA codes.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-actor.html#cfn-securityagent-pentest-actor-mfaforwardingaddress

uris

List of URIs this actor is authorized to access.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-actor.html#cfn-securityagent-pentest-actor-uris

AssetsProperty

class CfnPentestPropsMixin.AssetsProperty(*, actors=None, documents=None, endpoints=None, integrated_repositories=None, source_code=None, trusted_ca_certificates=None)

Bases: object

Collection of assets to be tested during the pentest.

Parameters:
See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-assets.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

assets_property = securityagent.CfnPentestPropsMixin.AssetsProperty(
    actors=[securityagent.CfnPentestPropsMixin.ActorProperty(
        authentication=securityagent.CfnPentestPropsMixin.AuthenticationProperty(
            provider_type="providerType",
            value="value"
        ),
        description="description",
        enable_email_mfa=False,
        identifier="identifier",
        mfa_forwarding_address="mfaForwardingAddress",
        uris=["uris"]
    )],
    documents=[securityagent.CfnPentestPropsMixin.DocumentInfoProperty(
        artifact_id="artifactId",
        s3_location="s3Location"
    )],
    endpoints=[securityagent.CfnPentestPropsMixin.EndpointProperty(
        uri="uri"
    )],
    integrated_repositories=[securityagent.CfnPentestPropsMixin.IntegratedRepositoryProperty(
        branch="branch",
        integration_id="integrationId",
        provider_resource_id="providerResourceId"
    )],
    source_code=[securityagent.CfnPentestPropsMixin.SourceCodeRepositoryProperty(
        s3_location="s3Location"
    )],
    trusted_ca_certificates=[securityagent.CfnPentestPropsMixin.TrustedCaCertificateProperty(
        source=securityagent.CfnPentestPropsMixin.CaCertificateSourceProperty(
            artifact_id="artifactId",
            inline_pem="inlinePem",
            s3_location="s3Location"
        )
    )]
)

Attributes

actors

List of actors used during testing.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-assets.html#cfn-securityagent-pentest-assets-actors

documents

List of documents providing additional context for the pentest.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-assets.html#cfn-securityagent-pentest-assets-documents

endpoints

List of endpoints to test.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-assets.html#cfn-securityagent-pentest-assets-endpoints

integrated_repositories

List of repositories connected via provider integrations.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-assets.html#cfn-securityagent-pentest-assets-integratedrepositories

source_code

List of source code repositories to analyze.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-assets.html#cfn-securityagent-pentest-assets-sourcecode

trusted_ca_certificates

Trust anchors for validating target endpoint TLS certificates, for endpoints served by a private or internal CA, an intermediate CA, or a self-signed certificate.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-assets.html#cfn-securityagent-pentest-assets-trustedcacertificates

AuthenticationProperty

class CfnPentestPropsMixin.AuthenticationProperty(*, provider_type=None, value=None)

Bases: object

Authentication configuration for a pentest actor.

Parameters:

  • provider_type (Optional[str]) – Type of authentication provider.

  • value (Optional[str]) – Reference value for the authentication provider, such as a secret ARN or Lambda ARN.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-authentication.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

authentication_property = securityagent.CfnPentestPropsMixin.AuthenticationProperty(
    provider_type="providerType",
    value="value"
)

Attributes

provider_type

Type of authentication provider.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-authentication.html#cfn-securityagent-pentest-authentication-providertype

value

Reference value for the authentication provider, such as a secret ARN or Lambda ARN.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-authentication.html#cfn-securityagent-pentest-authentication-value

CaCertificateSourceProperty

class CfnPentestPropsMixin.CaCertificateSourceProperty(*, artifact_id=None, inline_pem=None, s3_location=None)

Bases: object

Source of a trusted CA certificate.

Exactly one member must be set.

Parameters:

  • artifact_id (Optional[str]) – Artifact ID of an uploaded certificate file.

  • inline_pem (Optional[str]) – PEM-encoded X.509 certificate supplied inline.

  • s3_location (Optional[str]) – Amazon S3 location URI of a customer-staged certificate.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-cacertificatesource.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

ca_certificate_source_property = securityagent.CfnPentestPropsMixin.CaCertificateSourceProperty(
    artifact_id="artifactId",
    inline_pem="inlinePem",
    s3_location="s3Location"
)

Attributes

artifact_id

Artifact ID of an uploaded certificate file.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-cacertificatesource.html#cfn-securityagent-pentest-cacertificatesource-artifactid

inline_pem

PEM-encoded X.509 certificate supplied inline.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-cacertificatesource.html#cfn-securityagent-pentest-cacertificatesource-inlinepem

s3_location

Amazon S3 location URI of a customer-staged certificate.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-cacertificatesource.html#cfn-securityagent-pentest-cacertificatesource-s3location

CloudWatchLogProperty

class CfnPentestPropsMixin.CloudWatchLogProperty(*, log_group=None, log_stream=None)

Bases: object

CloudWatch Logs configuration for pentest output.

Parameters:

  • log_group (Optional[str]) – CloudWatch log group.

  • log_stream (Optional[str]) – CloudWatch log stream.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-cloudwatchlog.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

cloud_watch_log_property = securityagent.CfnPentestPropsMixin.CloudWatchLogProperty(
    log_group="logGroup",
    log_stream="logStream"
)

Attributes

log_group

CloudWatch log group.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-cloudwatchlog.html#cfn-securityagent-pentest-cloudwatchlog-loggroup

log_stream

CloudWatch log stream.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-cloudwatchlog.html#cfn-securityagent-pentest-cloudwatchlog-logstream

CustomHeaderProperty

class CfnPentestPropsMixin.CustomHeaderProperty(*, name=None, value=None)

Bases: object

A custom header to include in outbound requests.

Parameters:

  • name (Optional[str]) – Name of the header.

  • value (Optional[str]) – Value of the header.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-customheader.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

custom_header_property = securityagent.CfnPentestPropsMixin.CustomHeaderProperty(
    name="name",
    value="value"
)

Attributes

name

Name of the header.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-customheader.html#cfn-securityagent-pentest-customheader-name

value

Value of the header.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-customheader.html#cfn-securityagent-pentest-customheader-value

DocumentInfoProperty

class CfnPentestPropsMixin.DocumentInfoProperty(*, artifact_id=None, s3_location=None)

Bases: object

A document attached to the pentest, uploaded to S3.

Parameters:

  • artifact_id (Optional[str]) – Artifact identifier.

  • s3_location (Optional[str]) – S3 document location.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-documentinfo.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

document_info_property = securityagent.CfnPentestPropsMixin.DocumentInfoProperty(
    artifact_id="artifactId",
    s3_location="s3Location"
)

Attributes

artifact_id

Artifact identifier.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-documentinfo.html#cfn-securityagent-pentest-documentinfo-artifactid

s3_location

S3 document location.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-documentinfo.html#cfn-securityagent-pentest-documentinfo-s3location

EndpointProperty

class CfnPentestPropsMixin.EndpointProperty(*, uri=None)

Bases: object

An endpoint to be tested during the pentest.

Parameters:

uri (Optional[str]) – URI of the endpoint to test.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-endpoint.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

endpoint_property = securityagent.CfnPentestPropsMixin.EndpointProperty(
    uri="uri"
)

Attributes

uri

URI of the endpoint to test.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-endpoint.html#cfn-securityagent-pentest-endpoint-uri

IntegratedRepositoryProperty

class CfnPentestPropsMixin.IntegratedRepositoryProperty(*, branch=None, integration_id=None, provider_resource_id=None)

Bases: object

A repository connected via a provider integration.

Parameters:

  • branch (Optional[str]) – An optional override for the repository branch.

  • integration_id (Optional[str]) – Unique identifier of the provider integration.

  • provider_resource_id (Optional[str]) – Identifier of the resource within the provider integration.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-integratedrepository.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

integrated_repository_property = securityagent.CfnPentestPropsMixin.IntegratedRepositoryProperty(
    branch="branch",
    integration_id="integrationId",
    provider_resource_id="providerResourceId"
)

Attributes

branch

An optional override for the repository branch.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-integratedrepository.html#cfn-securityagent-pentest-integratedrepository-branch

integration_id

Unique identifier of the provider integration.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-integratedrepository.html#cfn-securityagent-pentest-integratedrepository-integrationid

provider_resource_id

Identifier of the resource within the provider integration.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-integratedrepository.html#cfn-securityagent-pentest-integratedrepository-providerresourceid

NetworkTrafficConfigProperty

class CfnPentestPropsMixin.NetworkTrafficConfigProperty(*, custom_headers=None, rules=None)

Bases: object

Network traffic configuration for the pentest.

Parameters:
See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-networktrafficconfig.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

network_traffic_config_property = securityagent.CfnPentestPropsMixin.NetworkTrafficConfigProperty(
    custom_headers=[securityagent.CfnPentestPropsMixin.CustomHeaderProperty(
        name="name",
        value="value"
    )],
    rules=[securityagent.CfnPentestPropsMixin.NetworkTrafficRuleProperty(
        effect="effect",
        network_traffic_rule_type="networkTrafficRuleType",
        pattern="pattern"
    )]
)

Attributes

custom_headers

Custom headers to include in outbound requests.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-networktrafficconfig.html#cfn-securityagent-pentest-networktrafficconfig-customheaders

rules

Ordered list of network traffic rules.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-networktrafficconfig.html#cfn-securityagent-pentest-networktrafficconfig-rules

NetworkTrafficRuleProperty

class CfnPentestPropsMixin.NetworkTrafficRuleProperty(*, effect=None, network_traffic_rule_type=None, pattern=None)

Bases: object

Network traffic rule.

Parameters:

  • effect (Optional[str]) – Whether to allow or deny traffic matching this rule.

  • network_traffic_rule_type (Optional[str]) – Type of pattern matching for this rule.

  • pattern (Optional[str]) – URL pattern this rule applies to.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-networktrafficrule.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

network_traffic_rule_property = securityagent.CfnPentestPropsMixin.NetworkTrafficRuleProperty(
    effect="effect",
    network_traffic_rule_type="networkTrafficRuleType",
    pattern="pattern"
)

Attributes

effect

Whether to allow or deny traffic matching this rule.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-networktrafficrule.html#cfn-securityagent-pentest-networktrafficrule-effect

network_traffic_rule_type

Type of pattern matching for this rule.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-networktrafficrule.html#cfn-securityagent-pentest-networktrafficrule-networktrafficruletype

pattern

URL pattern this rule applies to.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-networktrafficrule.html#cfn-securityagent-pentest-networktrafficrule-pattern

SourceCodeRepositoryProperty

class CfnPentestPropsMixin.SourceCodeRepositoryProperty(*, s3_location=None)

Bases: object

A source code archive stored in S3 for analysis during the pentest.

Parameters:

s3_location (Optional[str]) – S3 source code location.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-sourcecoderepository.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

source_code_repository_property = securityagent.CfnPentestPropsMixin.SourceCodeRepositoryProperty(
    s3_location="s3Location"
)

Attributes

s3_location

S3 source code location.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-sourcecoderepository.html#cfn-securityagent-pentest-sourcecoderepository-s3location

TrustedCaCertificateProperty

class CfnPentestPropsMixin.TrustedCaCertificateProperty(*, source=None)

Bases: object

Trust anchor used when validating a target endpoint’s TLS certificate.

Parameters:

source (Union[IResolvable, CaCertificateSourceProperty, Dict[str, Any], None]) – Source of a trusted CA certificate. Exactly one member must be set.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-trustedcacertificate.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

trusted_ca_certificate_property = securityagent.CfnPentestPropsMixin.TrustedCaCertificateProperty(
    source=securityagent.CfnPentestPropsMixin.CaCertificateSourceProperty(
        artifact_id="artifactId",
        inline_pem="inlinePem",
        s3_location="s3Location"
    )
)

Attributes

source

Source of a trusted CA certificate.

Exactly one member must be set.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-trustedcacertificate.html#cfn-securityagent-pentest-trustedcacertificate-source

VpcConfigProperty

class CfnPentestPropsMixin.VpcConfigProperty(*, security_group_arns=None, subnet_arns=None, vpc_arn=None)

Bases: object

VPC configuration that the pentest agent accesses.

Parameters:

  • security_group_arns (Optional[Sequence[str]]) – List of security groups in the VPC.

  • subnet_arns (Optional[Sequence[str]]) – List of subnets in the VPC.

  • vpc_arn (Optional[str])

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-vpcconfig.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

vpc_config_property = securityagent.CfnPentestPropsMixin.VpcConfigProperty(
    security_group_arns=["securityGroupArns"],
    subnet_arns=["subnetArns"],
    vpc_arn="vpcArn"
)

Attributes

security_group_arns

List of security groups in the VPC.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-vpcconfig.html#cfn-securityagent-pentest-vpcconfig-securitygrouparns

subnet_arns

List of subnets in the VPC.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-vpcconfig.html#cfn-securityagent-pentest-vpcconfig-subnetarns

vpc_arn

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityagent-pentest-vpcconfig.html#cfn-securityagent-pentest-vpcconfig-vpcarn

Type:

see