SDK for PHP V3

Client: Aws\SecurityAgent\SecurityAgentClient
Service ID: securityagent
Version: 2025-09-06

This page describes the parameters and results for the operations of the AWS Security Agent (2025-09-06), and shows how to use the Aws\SecurityAgent\SecurityAgentClient object to call the described operations. This documentation is specific to the 2025-09-06 API version of the service.

Operation Summary

Each of the following operations can be created from a client using $client->getCommand('CommandName'), where "CommandName" is the name of one of the following operations. Note: a command is a value that encapsulates an operation and the parameters used to create an HTTP request.

You can also create and send a command immediately using the magic methods available on a client object: $client->commandName(/* parameters */). You can send the command asynchronously (returning a promise) by appending the word "Async" to the operation name: $client->commandNameAsync(/* parameters */).

AddArtifact ( array $params = [] )
Uploads an artifact to an agent space.
BatchCreateSecurityRequirements ( array $params = [] )
Batch creates security requirements in a customer managed pack.
BatchDeleteCodeReviews ( array $params = [] )
Deletes one or more code reviews from an agent space.
BatchDeletePentests ( array $params = [] )
Deletes one or more pentests from an agent space.
BatchDeleteSecurityRequirements ( array $params = [] )
Batch deletes security requirements from a customer managed pack.
BatchDeleteThreatModels ( array $params = [] )
Deletes one or more threat models from an agent space.
BatchGetAgentSpaces ( array $params = [] )
Retrieves information about one or more agent spaces.
BatchGetArtifactMetadata ( array $params = [] )
Retrieves metadata for one or more artifacts in an agent space.
BatchGetCodeReviewJobTasks ( array $params = [] )
Retrieves information about one or more tasks within a code review job.
BatchGetCodeReviewJobs ( array $params = [] )
Retrieves information about one or more code review jobs in an agent space.
BatchGetCodeReviews ( array $params = [] )
Retrieves information about one or more code reviews in an agent space.
BatchGetFindings ( array $params = [] )
Retrieves information about one or more security findings in an agent space.
BatchGetPentestJobTasks ( array $params = [] )
Retrieves information about one or more tasks within a pentest job.
BatchGetPentestJobs ( array $params = [] )
Retrieves information about one or more pentest jobs in an agent space.
BatchGetPentests ( array $params = [] )
Retrieves information about one or more pentests in an agent space.
BatchGetSecurityRequirements ( array $params = [] )
Batch retrieves security requirements from a pack.
BatchGetTargetDomains ( array $params = [] )
Retrieves information about one or more target domains.
BatchGetThreatModelJobTasks ( array $params = [] )
Retrieves information about one or more tasks within a threat model job.
BatchGetThreatModelJobs ( array $params = [] )
Retrieves information about one or more threat model jobs in an agent space.
BatchGetThreatModels ( array $params = [] )
Retrieves information about one or more threat models in an agent space.
BatchGetThreats ( array $params = [] )
Retrieves information about one or more threats.
BatchUpdateSecurityRequirements ( array $params = [] )
Batch updates security requirements within a customer managed pack.
CreateAgentSpace ( array $params = [] )
Creates a new agent space.
CreateApplication ( array $params = [] )
Creates a new application.
CreateCodeReview ( array $params = [] )
Creates a new code review configuration in an agent space.
CreateIntegration ( array $params = [] )
Creates a new integration with a third-party provider, such as GitHub, for code review and remediation.
CreateMembership ( array $params = [] )
Creates a new membership, granting a user access to an agent space within an application.
CreatePentest ( array $params = [] )
Creates a new pentest configuration in an agent space.
CreatePrivateConnection ( array $params = [] )
Creates a private connection for reaching a self-hosted provider instance over private networking using Amazon VPC Lattice.
CreateSecurityRequirementPack ( array $params = [] )
Creates a customer managed security requirement pack.
CreateTargetDomain ( array $params = [] )
Creates a new target domain for penetration testing.
CreateThreat ( array $params = [] )
Creates a new threat under a threat model job.
CreateThreatModel ( array $params = [] )
Creates a new threat model configuration in an agent space.
DeleteAgentSpace ( array $params = [] )
Deletes an agent space and all of its associated resources, including pentests, findings, and artifacts.
DeleteApplication ( array $params = [] )
Deletes an application and its associated configuration, including IAM Identity Center settings.
DeleteArtifact ( array $params = [] )
Deletes an artifact from an agent space.
DeleteIntegration ( array $params = [] )
Deletes an integration with a third-party provider.
DeleteMembership ( array $params = [] )
Deletes a membership, revoking a user's access to an agent space.
DeletePrivateConnection ( array $params = [] )
Deletes a private connection.
DeleteSecurityRequirementPack ( array $params = [] )
Deletes a customer managed security requirement pack and all its associated security requirements.
DeleteTargetDomain ( array $params = [] )
Deletes a target domain registration.
DescribePrivateConnection ( array $params = [] )
Retrieves the details of a private connection.
GetApplication ( array $params = [] )
Retrieves information about an application.
GetArtifact ( array $params = [] )
Retrieves an artifact from an agent space.
GetIntegration ( array $params = [] )
Retrieves information about an integration.
GetSecurityRequirementPack ( array $params = [] )
Retrieves information about a security requirement pack.
ImportSecurityRequirements ( array $params = [] )
Imports security requirements from uploaded documents into a customer managed security requirement pack.
InitiateProviderRegistration ( array $params = [] )
Initiates the OAuth registration flow with a third-party provider.
ListAgentSpaces ( array $params = [] )
Returns a paginated list of agent space summaries in your account.
ListApplications ( array $params = [] )
Returns a paginated list of application summaries in your account.
ListArtifacts ( array $params = [] )
Returns a paginated list of artifact summaries for the specified agent space.
ListCodeReviewJobTasks ( array $params = [] )
Returns a paginated list of task summaries for the specified code review job, optionally filtered by step name or category.
ListCodeReviewJobsForCodeReview ( array $params = [] )
Returns a paginated list of code review job summaries for the specified code review configuration.
ListCodeReviews ( array $params = [] )
Returns a paginated list of code review summaries for the specified agent space.
ListDiscoveredEndpoints ( array $params = [] )
Returns a paginated list of endpoints discovered during a pentest job execution.
ListFindings ( array $params = [] )
Lists the security findings for a pentest job.
ListIntegratedResources ( array $params = [] )
Lists the integrated resources for an agent space, optionally filtered by integration or resource type.
ListIntegrations ( array $params = [] )
Lists the integrations in your account, optionally filtered by provider or provider type.
ListMemberships ( array $params = [] )
Returns a paginated list of membership summaries for the specified agent space within an application.
ListPentestJobTasks ( array $params = [] )
Returns a paginated list of task summaries for the specified pentest job, optionally filtered by step name or category.
ListPentestJobsForPentest ( array $params = [] )
Returns a paginated list of pentest job summaries for the specified pentest configuration.
ListPentests ( array $params = [] )
Returns a paginated list of pentest summaries for the specified agent space.
ListPrivateConnections ( array $params = [] )
Lists the private connections in your account.
ListSecurityRequirementPacks ( array $params = [] )
Lists all security requirement packs in the caller's account.
ListSecurityRequirements ( array $params = [] )
Lists security requirements within a pack.
ListTagsForResource ( array $params = [] )
Returns the tags associated with the specified resource.
ListTargetDomains ( array $params = [] )
Returns a paginated list of target domain summaries in your account.
ListThreatModelJobTasks ( array $params = [] )
Returns a paginated list of task summaries for the specified threat model job.
ListThreatModelJobs ( array $params = [] )
Returns a paginated list of threat model job summaries for the specified threat model.
ListThreatModels ( array $params = [] )
Returns a paginated list of threat model summaries for the specified agent space.
ListThreats ( array $params = [] )
Returns a paginated list of threats for a threat model job.
StartCodeRemediation ( array $params = [] )
Initiates code remediation for one or more security findings.
StartCodeReviewJob ( array $params = [] )
Starts a new code review job for a code review configuration.
StartPentestJob ( array $params = [] )
Starts a new pentest job for a pentest configuration.
StartThreatModelJob ( array $params = [] )
Starts a new threat model job for a threat model configuration.
StopCodeReviewJob ( array $params = [] )
Stops a running code review job.
StopPentestJob ( array $params = [] )
Stops a running pentest job.
StopThreatModelJob ( array $params = [] )
Stops a running threat model job.
TagResource ( array $params = [] )
Adds tags to a resource.
UntagResource ( array $params = [] )
Removes tags from a resource.
UpdateAgentSpace ( array $params = [] )
Updates the configuration of an existing agent space, including its name, description, AWS resources, target domains, and code review settings.
UpdateApplication ( array $params = [] )
Updates the configuration of an existing application, including the IAM role and default KMS key.
UpdateCodeReview ( array $params = [] )
Updates an existing code review configuration.
UpdateFinding ( array $params = [] )
Updates the status or risk level of a security finding.
UpdateIntegratedResources ( array $params = [] )
Updates the integrated resources for an agent space, including their capabilities.
UpdatePentest ( array $params = [] )
Updates an existing pentest configuration.
UpdatePrivateConnectionCertificate ( array $params = [] )
Updates the certificate associated with a private connection.
UpdateSecurityRequirementPack ( array $params = [] )
Updates a security requirement pack.
UpdateTargetDomain ( array $params = [] )
Updates the verification method for a target domain.
UpdateThreat ( array $params = [] )
Updates a threat.
UpdateThreatModel ( array $params = [] )
Updates an existing threat model configuration.
VerifyTargetDomain ( array $params = [] )
Initiates verification of a target domain.

Paginators

Paginators handle automatically iterating over paginated API results. Paginators are associated with specific API operations, and they accept the parameters that the corresponding API operation accepts. You can get a paginator from a client class using getPaginator($paginatorName, $operationParameters). This client supports the following paginators:

ListAgentSpaces
ListApplications
ListArtifacts
ListCodeReviewJobTasks
ListCodeReviewJobsForCodeReview
ListCodeReviews
ListDiscoveredEndpoints
ListFindings
ListIntegratedResources
ListIntegrations
ListMemberships
ListPentestJobTasks
ListPentestJobsForPentest
ListPentests
ListPrivateConnections
ListSecurityRequirementPacks
ListSecurityRequirements
ListTargetDomains
ListThreatModelJobTasks
ListThreatModelJobs
ListThreatModels
ListThreats

Operations

AddArtifact

$result = $client->addArtifact([/* ... */]);
$promise = $client->addArtifactAsync([/* ... */]);

Uploads an artifact to an agent space. Artifacts provide additional context for security testing, such as architecture diagrams, API specifications, or configuration files.

Parameter Syntax

$result = $client->addArtifact([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactContent' => <string || resource || Psr\Http\Message\StreamInterface>, // REQUIRED
    'artifactType' => 'TXT|PNG|JPEG|MD|PDF|DOCX|DOC|JSON|YAML', // REQUIRED
    'fileName' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to add the artifact to.

artifactContent
Required: Yes
Type: blob (string|resource|Psr\Http\Message\StreamInterface)

The binary content of the artifact to upload.

artifactType
Required: Yes
Type: string

The file type of the artifact. Valid values include TXT, PNG, JPEG, MD, PDF, DOCX, DOC, JSON, and YAML.

fileName
Required: Yes
Type: string

The file name of the artifact.

Result Syntax

[
    'artifactId' => '<string>',
]

Result Details

Members
artifactId
Required: Yes
Type: string

The unique identifier assigned to the uploaded artifact.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

BatchCreateSecurityRequirements

$result = $client->batchCreateSecurityRequirements([/* ... */]);
$promise = $client->batchCreateSecurityRequirementsAsync([/* ... */]);

Batch creates security requirements in a customer managed pack.

Parameter Syntax

$result = $client->batchCreateSecurityRequirements([
    'packId' => '<string>', // REQUIRED
    'securityRequirements' => [ // REQUIRED
        [
            'description' => '<string>', // REQUIRED
            'domain' => '<string>', // REQUIRED
            'evaluation' => '<string>', // REQUIRED
            'name' => '<string>', // REQUIRED
            'remediation' => '<string>',
        ],
        // ...
    ],
]);

Parameter Details

Members
packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to add requirements to.

securityRequirements
Required: Yes
Type: Array of CreateSecurityRequirementEntry structures

The list of security requirements to create.

Result Syntax

[
    'errors' => [
        [
            'code' => '<string>',
            'message' => '<string>',
            'securityRequirementName' => '<string>',
        ],
        // ...
    ],
    'securityRequirements' => [
        [
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'domain' => '<string>',
            'evaluation' => '<string>',
            'name' => '<string>',
            'packId' => '<string>',
            'remediation' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
errors
Required: Yes
Type: Array of BatchSecurityRequirementError structures

The list of errors for security requirements that failed to be created.

securityRequirements
Required: Yes
Type: Array of BatchCreateSecurityRequirementResult structures

The list of security requirements that were successfully created.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ServiceQuotaExceededException:

The request exceeds a service quota. Review your current usage and request a quota increase if needed.

BatchDeleteCodeReviews

$result = $client->batchDeleteCodeReviews([/* ... */]);
$promise = $client->batchDeleteCodeReviewsAsync([/* ... */]);

Deletes one or more code reviews from an agent space.

Parameter Syntax

$result = $client->batchDeleteCodeReviews([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the code reviews to delete.

codeReviewIds
Required: Yes
Type: Array of strings

The list of code review identifiers to delete.

Result Syntax

[
    'deleted' => ['<string>', ...],
    'failed' => [
        [
            'codeReviewId' => '<string>',
            'reason' => '<string>',
        ],
        // ...
    ],
]

Result Details

Members
deleted
Type: Array of strings

The list of identifiers of the code reviews that were successfully deleted.

failed
Type: Array of DeleteCodeReviewFailure structures

The list of code reviews that failed to delete, including the reason for each failure.

Errors

There are no errors described for this operation.

BatchDeletePentests

$result = $client->batchDeletePentests([/* ... */]);
$promise = $client->batchDeletePentestsAsync([/* ... */]);

Deletes one or more pentests from an agent space.

Parameter Syntax

$result = $client->batchDeletePentests([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the pentests to delete.

pentestIds
Required: Yes
Type: Array of strings

The list of pentest identifiers to delete.

Result Syntax

[
    'deleted' => [
        [
            'agentSpaceId' => '<string>',
            'assets' => [
                'actors' => [
                    [
                        'authentication' => [
                            'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                            'value' => '<string>',
                        ],
                        'description' => '<string>',
                        'identifier' => '<string>',
                        'uris' => ['<string>', ...],
                    ],
                    // ...
                ],
                'documents' => [
                    [
                        'artifactId' => '<string>',
                        'integratedDocument' => [
                            'integrationId' => '<string>',
                            'resourceId' => '<string>',
                        ],
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
                'endpoints' => [
                    [
                        'uri' => '<string>',
                    ],
                    // ...
                ],
                'integratedRepositories' => [
                    [
                        'integrationId' => '<string>',
                        'providerResourceId' => '<string>',
                    ],
                    // ...
                ],
                'sourceCode' => [
                    [
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
            ],
            'cleanUpStrategy' => 'BEST_EFFORT_DELETE|RETAIN_ALL',
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'createdAt' => <DateTime>,
            'disableManagedSkills' => ['<string>', ...],
            'excludeRiskTypes' => ['<string>', ...],
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'networkTrafficConfig' => [
                'customHeaders' => [
                    [
                        'name' => '<string>',
                        'value' => '<string>',
                    ],
                    // ...
                ],
                'rules' => [
                    [
                        'effect' => 'ALLOW|DENY',
                        'networkTrafficRuleType' => 'URL',
                        'pattern' => '<string>',
                    ],
                    // ...
                ],
            ],
            'pentestId' => '<string>',
            'serviceRole' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'vpcConfig' => [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
        ],
        // ...
    ],
    'failed' => [
        [
            'pentestId' => '<string>',
            'reason' => '<string>',
        ],
        // ...
    ],
]

Result Details

Members
deleted
Type: Array of Pentest structures

The list of pentests that were successfully deleted.

failed
Type: Array of DeletePentestFailure structures

The list of pentests that failed to delete, including the reason for each failure.

Errors

There are no errors described for this operation.

BatchDeleteSecurityRequirements

$result = $client->batchDeleteSecurityRequirements([/* ... */]);
$promise = $client->batchDeleteSecurityRequirementsAsync([/* ... */]);

Batch deletes security requirements from a customer managed pack.

Parameter Syntax

$result = $client->batchDeleteSecurityRequirements([
    'packId' => '<string>', // REQUIRED
    'securityRequirementNames' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to remove requirements from.

securityRequirementNames
Required: Yes
Type: Array of strings

The list of security requirement names to delete.

Result Syntax

[
    'deletedSecurityRequirementNames' => ['<string>', ...],
    'errors' => [
        [
            'code' => '<string>',
            'message' => '<string>',
            'securityRequirementName' => '<string>',
        ],
        // ...
    ],
]

Result Details

Members
deletedSecurityRequirementNames
Required: Yes
Type: Array of strings

The list of security requirement names that were successfully deleted.

errors
Required: Yes
Type: Array of BatchSecurityRequirementError structures

The list of errors for security requirements that failed to be deleted.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

BatchDeleteThreatModels

$result = $client->batchDeleteThreatModels([/* ... */]);
$promise = $client->batchDeleteThreatModelsAsync([/* ... */]);

Deletes one or more threat models from an agent space.

Parameter Syntax

$result = $client->batchDeleteThreatModels([
    'agentSpaceId' => '<string>', // REQUIRED
    'threatModelIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the threat models to delete.

threatModelIds
Required: Yes
Type: Array of strings

The list of threat model identifiers to delete.

Result Syntax

[
    'deleted' => ['<string>', ...],
    'failed' => [
        [
            'reason' => '<string>',
            'threatModelId' => '<string>',
        ],
        // ...
    ],
]

Result Details

Members
deleted
Type: Array of strings

The list of threat model identifiers that were successfully deleted.

failed
Type: Array of DeleteThreatModelFailure structures

The list of threat models that failed to delete, including the reason for each failure.

Errors

There are no errors described for this operation.

BatchGetAgentSpaces

$result = $client->batchGetAgentSpaces([/* ... */]);
$promise = $client->batchGetAgentSpacesAsync([/* ... */]);

Retrieves information about one or more agent spaces.

Parameter Syntax

$result = $client->batchGetAgentSpaces([
    'agentSpaceIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceIds
Required: Yes
Type: Array of strings

The list of agent space identifiers to retrieve.

Result Syntax

[
    'agentSpaces' => [
        [
            'agentSpaceId' => '<string>',
            'awsResources' => [
                'iamRoles' => ['<string>', ...],
                'lambdaFunctionArns' => ['<string>', ...],
                'logGroups' => ['<string>', ...],
                's3Buckets' => ['<string>', ...],
                'secretArns' => ['<string>', ...],
                'vpcs' => [
                    [
                        'securityGroupArns' => ['<string>', ...],
                        'subnetArns' => ['<string>', ...],
                        'vpcArn' => '<string>',
                    ],
                    // ...
                ],
            ],
            'codeReviewSettings' => [
                'controlsScanning' => true || false,
                'generalPurposeScanning' => true || false,
            ],
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'kmsKeyId' => '<string>',
            'name' => '<string>',
            'targetDomainIds' => ['<string>', ...],
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'notFound' => ['<string>', ...],
]

Result Details

Members
agentSpaces
Type: Array of AgentSpace structures

The list of agent spaces that were found.

notFound
Type: Array of strings

The list of agent space identifiers that were not found.

Errors

There are no errors described for this operation.

BatchGetArtifactMetadata

$result = $client->batchGetArtifactMetadata([/* ... */]);
$promise = $client->batchGetArtifactMetadataAsync([/* ... */]);

Retrieves metadata for one or more artifacts in an agent space.

Parameter Syntax

$result = $client->batchGetArtifactMetadata([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the artifacts.

artifactIds
Required: Yes
Type: Array of strings

The list of artifact identifiers to retrieve metadata for.

Result Syntax

[
    'artifactMetadataList' => [
        [
            'agentSpaceId' => '<string>',
            'artifactId' => '<string>',
            'fileName' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
artifactMetadataList
Required: Yes
Type: Array of ArtifactMetadataItem structures

The list of artifact metadata items that were found.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

BatchGetCodeReviewJobTasks

$result = $client->batchGetCodeReviewJobTasks([/* ... */]);
$promise = $client->batchGetCodeReviewJobTasksAsync([/* ... */]);

Retrieves information about one or more tasks within a code review job.

Parameter Syntax

$result = $client->batchGetCodeReviewJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewJobTaskIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the tasks.

codeReviewJobTaskIds
Required: Yes
Type: Array of strings

The list of task identifiers to retrieve.

Result Syntax

[
    'codeReviewJobTasks' => [
        [
            'agentSpaceId' => '<string>',
            'categories' => [
                [
                    'isPrimary' => true || false,
                    'name' => '<string>',
                ],
                // ...
            ],
            'codeReviewId' => '<string>',
            'codeReviewJobId' => '<string>',
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'logsLocation' => [
                'cloudWatchLog' => [
                    'logGroup' => '<string>',
                    'logStream' => '<string>',
                ],
                'logType' => 'CLOUDWATCH',
            ],
            'riskType' => 'CROSS_SITE_SCRIPTING|DEFAULT_CREDENTIALS|INSECURE_DIRECT_OBJECT_REFERENCE|PRIVILEGE_ESCALATION|SERVER_SIDE_TEMPLATE_INJECTION|COMMAND_INJECTION|CODE_INJECTION|SQL_INJECTION|ARBITRARY_FILE_UPLOAD|INSECURE_DESERIALIZATION|LOCAL_FILE_INCLUSION|INFORMATION_DISCLOSURE|PATH_TRAVERSAL|SERVER_SIDE_REQUEST_FORGERY|JSON_WEB_TOKEN_VULNERABILITIES|XML_EXTERNAL_ENTITY|FILE_DELETION|OTHER|GRAPHQL_VULNERABILITIES|BUSINESS_LOGIC_VULNERABILITIES|CRYPTOGRAPHIC_VULNERABILITIES|DENIAL_OF_SERVICE|FILE_ACCESS|FILE_CREATION|DATABASE_MODIFICATION|DATABASE_ACCESS|OUTBOUND_SERVICE_REQUEST|UNKNOWN',
            'taskId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'notFound' => ['<string>', ...],
]

Result Details

Members
codeReviewJobTasks
Type: Array of CodeReviewJobTask structures

The list of code review job tasks that were found.

notFound
Type: Array of strings

The list of task identifiers that were not found.

Errors

There are no errors described for this operation.

BatchGetCodeReviewJobs

$result = $client->batchGetCodeReviewJobs([/* ... */]);
$promise = $client->batchGetCodeReviewJobsAsync([/* ... */]);

Retrieves information about one or more code review jobs in an agent space.

Parameter Syntax

$result = $client->batchGetCodeReviewJobs([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewJobIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the code review jobs.

codeReviewJobIds
Required: Yes
Type: Array of strings

The list of code review job identifiers to retrieve.

Result Syntax

[
    'codeReviewJobs' => [
        [
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'codeReviewId' => '<string>',
            'codeReviewJobId' => '<string>',
            'createdAt' => <DateTime>,
            'documents' => [
                [
                    'artifactId' => '<string>',
                    'integratedDocument' => [
                        'integrationId' => '<string>',
                        'resourceId' => '<string>',
                    ],
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'errorInformation' => [
                'code' => 'CLIENT_ERROR|INTERNAL_ERROR|STOPPED_BY_USER',
                'message' => '<string>',
            ],
            'executionContext' => [
                [
                    'context' => '<string>',
                    'contextType' => 'ERROR|CLIENT_ERROR|WARNING|INFO',
                    'timestamp' => <DateTime>,
                ],
                // ...
            ],
            'integratedRepositories' => [
                [
                    'integrationId' => '<string>',
                    'providerResourceId' => '<string>',
                ],
                // ...
            ],
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'overview' => '<string>',
            'serviceRole' => '<string>',
            'sourceCode' => [
                [
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'steps' => [
                [
                    'createdAt' => <DateTime>,
                    'name' => 'PREFLIGHT|STATIC_ANALYSIS|PENTEST|FINALIZING|VALIDATION',
                    'status' => 'NOT_STARTED|IN_PROGRESS|COMPLETED|FAILED|STOPPED',
                    'updatedAt' => <DateTime>,
                ],
                // ...
            ],
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'notFound' => ['<string>', ...],
]

Result Details

Members
codeReviewJobs
Type: Array of CodeReviewJob structures

The list of code review jobs that were found.

notFound
Type: Array of strings

The list of code review job identifiers that were not found.

Errors

There are no errors described for this operation.

BatchGetCodeReviews

$result = $client->batchGetCodeReviews([/* ... */]);
$promise = $client->batchGetCodeReviewsAsync([/* ... */]);

Retrieves information about one or more code reviews in an agent space.

Parameter Syntax

$result = $client->batchGetCodeReviews([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the code reviews.

codeReviewIds
Required: Yes
Type: Array of strings

The list of code review identifiers to retrieve.

Result Syntax

[
    'codeReviews' => [
        [
            'agentSpaceId' => '<string>',
            'assets' => [
                'actors' => [
                    [
                        'authentication' => [
                            'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                            'value' => '<string>',
                        ],
                        'description' => '<string>',
                        'identifier' => '<string>',
                        'uris' => ['<string>', ...],
                    ],
                    // ...
                ],
                'documents' => [
                    [
                        'artifactId' => '<string>',
                        'integratedDocument' => [
                            'integrationId' => '<string>',
                            'resourceId' => '<string>',
                        ],
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
                'endpoints' => [
                    [
                        'uri' => '<string>',
                    ],
                    // ...
                ],
                'integratedRepositories' => [
                    [
                        'integrationId' => '<string>',
                        'providerResourceId' => '<string>',
                    ],
                    // ...
                ],
                'sourceCode' => [
                    [
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
            ],
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'codeReviewId' => '<string>',
            'createdAt' => <DateTime>,
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'serviceRole' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'validationMode' => 'DISABLED|SIMULATED',
        ],
        // ...
    ],
    'notFound' => ['<string>', ...],
]

Result Details

Members
codeReviews
Type: Array of CodeReview structures

The list of code reviews that were found.

notFound
Type: Array of strings

The list of code review identifiers that were not found.

Errors

There are no errors described for this operation.

BatchGetFindings

$result = $client->batchGetFindings([/* ... */]);
$promise = $client->batchGetFindingsAsync([/* ... */]);

Retrieves information about one or more security findings in an agent space.

Parameter Syntax

$result = $client->batchGetFindings([
    'agentSpaceId' => '<string>', // REQUIRED
    'findingIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the findings.

findingIds
Required: Yes
Type: Array of strings

The list of finding identifiers to retrieve.

Result Syntax

[
    'findings' => [
        [
            'agentSpaceId' => '<string>',
            'alignmentRationale' => '<string>',
            'attackScript' => '<string>',
            'codeLocations' => [
                [
                    'filePath' => '<string>',
                    'label' => '<string>',
                    'lineEnd' => <integer>,
                    'lineStart' => <integer>,
                ],
                // ...
            ],
            'codeRemediationTask' => [
                'status' => 'IN_PROGRESS|COMPLETED|FAILED',
                'statusReason' => '<string>',
                'taskDetails' => [
                    [
                        'codeDiffLink' => '<string>',
                        'pullRequestLink' => '<string>',
                        'repoName' => '<string>',
                    ],
                    // ...
                ],
            ],
            'codeReviewId' => '<string>',
            'codeReviewJobId' => '<string>',
            'confidence' => 'FALSE_POSITIVE|UNCONFIRMED|LOW|MEDIUM|HIGH',
            'createdAt' => <DateTime>,
            'customerNote' => '<string>',
            'description' => '<string>',
            'findingId' => '<string>',
            'lastUpdatedBy' => '<string>',
            'name' => '<string>',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'reasoning' => '<string>',
            'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
            'riskScore' => '<string>',
            'riskType' => '<string>',
            'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
            'taskId' => '<string>',
            'updatedAt' => <DateTime>,
            'validationStatus' => 'CONFIRMED|NOT_REPRODUCED|VALIDATION_FAILED|VALIDATING|NOT_VALIDATED',
            'verificationScript' => [
                'envVars' => [
                    [
                        'name' => '<string>',
                        'value' => '<string>',
                    ],
                    // ...
                ],
                'instructions' => '<string>',
                'scriptType' => '<string>',
                'scriptUrl' => '<string>',
            ],
        ],
        // ...
    ],
    'notFound' => ['<string>', ...],
]

Result Details

Members
findings
Type: Array of Finding structures

The list of findings that were found.

notFound
Type: Array of strings

The list of finding identifiers that were not found.

Errors

There are no errors described for this operation.

BatchGetPentestJobTasks

$result = $client->batchGetPentestJobTasks([/* ... */]);
$promise = $client->batchGetPentestJobTasksAsync([/* ... */]);

Retrieves information about one or more tasks within a pentest job.

Parameter Syntax

$result = $client->batchGetPentestJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'taskIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the tasks.

taskIds
Required: Yes
Type: Array of strings

The list of task identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'tasks' => [
        [
            'agentSpaceId' => '<string>',
            'categories' => [
                [
                    'isPrimary' => true || false,
                    'name' => '<string>',
                ],
                // ...
            ],
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'logsLocation' => [
                'cloudWatchLog' => [
                    'logGroup' => '<string>',
                    'logStream' => '<string>',
                ],
                'logType' => 'CLOUDWATCH',
            ],
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'riskType' => 'CROSS_SITE_SCRIPTING|DEFAULT_CREDENTIALS|INSECURE_DIRECT_OBJECT_REFERENCE|PRIVILEGE_ESCALATION|SERVER_SIDE_TEMPLATE_INJECTION|COMMAND_INJECTION|CODE_INJECTION|SQL_INJECTION|ARBITRARY_FILE_UPLOAD|INSECURE_DESERIALIZATION|LOCAL_FILE_INCLUSION|INFORMATION_DISCLOSURE|PATH_TRAVERSAL|SERVER_SIDE_REQUEST_FORGERY|JSON_WEB_TOKEN_VULNERABILITIES|XML_EXTERNAL_ENTITY|FILE_DELETION|OTHER|GRAPHQL_VULNERABILITIES|BUSINESS_LOGIC_VULNERABILITIES|CRYPTOGRAPHIC_VULNERABILITIES|DENIAL_OF_SERVICE|FILE_ACCESS|FILE_CREATION|DATABASE_MODIFICATION|DATABASE_ACCESS|OUTBOUND_SERVICE_REQUEST|UNKNOWN',
            'targetEndpoint' => [
                'uri' => '<string>',
            ],
            'taskId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of task identifiers that were not found.

tasks
Type: Array of Task structures

The list of tasks that were found.

Errors

There are no errors described for this operation.

BatchGetPentestJobs

$result = $client->batchGetPentestJobs([/* ... */]);
$promise = $client->batchGetPentestJobsAsync([/* ... */]);

Retrieves information about one or more pentest jobs in an agent space.

Parameter Syntax

$result = $client->batchGetPentestJobs([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestJobIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the pentest jobs.

pentestJobIds
Required: Yes
Type: Array of strings

The list of pentest job identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'pentestJobs' => [
        [
            'actors' => [
                [
                    'authentication' => [
                        'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                        'value' => '<string>',
                    ],
                    'description' => '<string>',
                    'identifier' => '<string>',
                    'uris' => ['<string>', ...],
                ],
                // ...
            ],
            'allowedDomains' => [
                [
                    'uri' => '<string>',
                ],
                // ...
            ],
            'cleanUpStrategy' => 'BEST_EFFORT_DELETE|RETAIN_ALL',
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'createdAt' => <DateTime>,
            'disableManagedSkills' => ['<string>', ...],
            'documents' => [
                [
                    'artifactId' => '<string>',
                    'integratedDocument' => [
                        'integrationId' => '<string>',
                        'resourceId' => '<string>',
                    ],
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'endpoints' => [
                [
                    'uri' => '<string>',
                ],
                // ...
            ],
            'errorInformation' => [
                'code' => 'CLIENT_ERROR|INTERNAL_ERROR|STOPPED_BY_USER',
                'message' => '<string>',
            ],
            'excludePaths' => [
                [
                    'uri' => '<string>',
                ],
                // ...
            ],
            'excludeRiskTypes' => ['<string>', ...],
            'executionContext' => [
                [
                    'context' => '<string>',
                    'contextType' => 'ERROR|CLIENT_ERROR|WARNING|INFO',
                    'timestamp' => <DateTime>,
                ],
                // ...
            ],
            'integratedRepositories' => [
                [
                    'integrationId' => '<string>',
                    'providerResourceId' => '<string>',
                ],
                // ...
            ],
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'networkTrafficConfig' => [
                'customHeaders' => [
                    [
                        'name' => '<string>',
                        'value' => '<string>',
                    ],
                    // ...
                ],
                'rules' => [
                    [
                        'effect' => 'ALLOW|DENY',
                        'networkTrafficRuleType' => 'URL',
                        'pattern' => '<string>',
                    ],
                    // ...
                ],
            ],
            'overview' => '<string>',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'serviceRole' => '<string>',
            'sourceCode' => [
                [
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'steps' => [
                [
                    'createdAt' => <DateTime>,
                    'name' => 'PREFLIGHT|STATIC_ANALYSIS|PENTEST|FINALIZING|VALIDATION',
                    'status' => 'NOT_STARTED|IN_PROGRESS|COMPLETED|FAILED|STOPPED',
                    'updatedAt' => <DateTime>,
                ],
                // ...
            ],
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'vpcConfig' => [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of pentest job identifiers that were not found.

pentestJobs
Type: Array of PentestJob structures

The list of pentest jobs that were found.

Errors

There are no errors described for this operation.

BatchGetPentests

$result = $client->batchGetPentests([/* ... */]);
$promise = $client->batchGetPentestsAsync([/* ... */]);

Retrieves information about one or more pentests in an agent space.

Parameter Syntax

$result = $client->batchGetPentests([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the pentests.

pentestIds
Required: Yes
Type: Array of strings

The list of pentest identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'pentests' => [
        [
            'agentSpaceId' => '<string>',
            'assets' => [
                'actors' => [
                    [
                        'authentication' => [
                            'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                            'value' => '<string>',
                        ],
                        'description' => '<string>',
                        'identifier' => '<string>',
                        'uris' => ['<string>', ...],
                    ],
                    // ...
                ],
                'documents' => [
                    [
                        'artifactId' => '<string>',
                        'integratedDocument' => [
                            'integrationId' => '<string>',
                            'resourceId' => '<string>',
                        ],
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
                'endpoints' => [
                    [
                        'uri' => '<string>',
                    ],
                    // ...
                ],
                'integratedRepositories' => [
                    [
                        'integrationId' => '<string>',
                        'providerResourceId' => '<string>',
                    ],
                    // ...
                ],
                'sourceCode' => [
                    [
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
            ],
            'cleanUpStrategy' => 'BEST_EFFORT_DELETE|RETAIN_ALL',
            'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
            'createdAt' => <DateTime>,
            'disableManagedSkills' => ['<string>', ...],
            'excludeRiskTypes' => ['<string>', ...],
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'networkTrafficConfig' => [
                'customHeaders' => [
                    [
                        'name' => '<string>',
                        'value' => '<string>',
                    ],
                    // ...
                ],
                'rules' => [
                    [
                        'effect' => 'ALLOW|DENY',
                        'networkTrafficRuleType' => 'URL',
                        'pattern' => '<string>',
                    ],
                    // ...
                ],
            ],
            'pentestId' => '<string>',
            'serviceRole' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'vpcConfig' => [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of pentest identifiers that were not found.

pentests
Type: Array of Pentest structures

The list of pentests that were found.

Errors

There are no errors described for this operation.

BatchGetSecurityRequirements

$result = $client->batchGetSecurityRequirements([/* ... */]);
$promise = $client->batchGetSecurityRequirementsAsync([/* ... */]);

Batch retrieves security requirements from a pack.

Parameter Syntax

$result = $client->batchGetSecurityRequirements([
    'packId' => '<string>', // REQUIRED
    'securityRequirementNames' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to retrieve requirements from.

securityRequirementNames
Required: Yes
Type: Array of strings

The list of security requirement names to retrieve.

Result Syntax

[
    'errors' => [
        [
            'code' => '<string>',
            'message' => '<string>',
            'securityRequirementName' => '<string>',
        ],
        // ...
    ],
    'securityRequirements' => [
        [
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'domain' => '<string>',
            'evaluation' => '<string>',
            'name' => '<string>',
            'packId' => '<string>',
            'remediation' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
errors
Required: Yes
Type: Array of BatchSecurityRequirementError structures

The list of errors for security requirements that failed to be retrieved.

securityRequirements
Required: Yes
Type: Array of BatchGetSecurityRequirementResult structures

The list of security requirements that were successfully retrieved.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

BatchGetTargetDomains

$result = $client->batchGetTargetDomains([/* ... */]);
$promise = $client->batchGetTargetDomainsAsync([/* ... */]);

Retrieves information about one or more target domains.

Parameter Syntax

$result = $client->batchGetTargetDomains([
    'targetDomainIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
targetDomainIds
Required: Yes
Type: Array of strings

The list of target domain identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'targetDomains' => [
        [
            'createdAt' => <DateTime>,
            'domainName' => '<string>',
            'targetDomainId' => '<string>',
            'verificationDetails' => [
                'dnsTxt' => [
                    'dnsRecordName' => '<string>',
                    'dnsRecordType' => 'TXT',
                    'token' => '<string>',
                ],
                'httpRoute' => [
                    'routePath' => '<string>',
                    'token' => '<string>',
                ],
                'method' => 'DNS_TXT|HTTP_ROUTE|PRIVATE_VPC',
            ],
            'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
            'verificationStatusReason' => '<string>',
            'verifiedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of target domain identifiers that were not found.

targetDomains
Type: Array of TargetDomain structures

The list of target domains that were found.

Errors

There are no errors described for this operation.

BatchGetThreatModelJobTasks

$result = $client->batchGetThreatModelJobTasks([/* ... */]);
$promise = $client->batchGetThreatModelJobTasksAsync([/* ... */]);

Retrieves information about one or more tasks within a threat model job.

Parameter Syntax

$result = $client->batchGetThreatModelJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'threatModelJobTaskIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the tasks.

threatModelJobTaskIds
Required: Yes
Type: Array of strings

The list of task identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'threatModelJobTasks' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'logsLocation' => [
                'cloudWatchLog' => [
                    'logGroup' => '<string>',
                    'logStream' => '<string>',
                ],
                'logType' => 'CLOUDWATCH',
            ],
            'taskId' => '<string>',
            'threatModelId' => '<string>',
            'threatModelJobId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of task identifiers that were not found.

threatModelJobTasks
Type: Array of ThreatModelJobTask structures

The list of threat model job tasks that were found.

Errors

There are no errors described for this operation.

BatchGetThreatModelJobs

$result = $client->batchGetThreatModelJobs([/* ... */]);
$promise = $client->batchGetThreatModelJobsAsync([/* ... */]);

Retrieves information about one or more threat model jobs in an agent space.

Parameter Syntax

$result = $client->batchGetThreatModelJobs([
    'agentSpaceId' => '<string>', // REQUIRED
    'threatModelJobIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the threat model jobs.

threatModelJobIds
Required: Yes
Type: Array of strings

The list of threat model job identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'threatModelJobs' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'documents' => [
                [
                    'artifactId' => '<string>',
                    'integratedDocument' => [
                        'integrationId' => '<string>',
                        'resourceId' => '<string>',
                    ],
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'errorInformation' => [
                'code' => 'CLIENT_ERROR|INTERNAL_ERROR|STOPPED_BY_USER',
                'message' => '<string>',
            ],
            'executionEndTime' => <DateTime>,
            'executionStartTime' => <DateTime>,
            'integratedRepositories' => [
                [
                    'integrationId' => '<string>',
                    'providerResourceId' => '<string>',
                ],
                // ...
            ],
            'scopeDocs' => [
                [
                    'artifactId' => '<string>',
                    'integratedDocument' => [
                        'integrationId' => '<string>',
                        'resourceId' => '<string>',
                    ],
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'sourceCode' => [
                [
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'systemOverview' => '<string>',
            'threatModelId' => '<string>',
            'threatModelJobId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of threat model job identifiers that were not found.

threatModelJobs
Type: Array of ThreatModelJob structures

The list of threat model jobs that were found.

Errors

There are no errors described for this operation.

BatchGetThreatModels

$result = $client->batchGetThreatModels([/* ... */]);
$promise = $client->batchGetThreatModelsAsync([/* ... */]);

Retrieves information about one or more threat models in an agent space.

Parameter Syntax

$result = $client->batchGetThreatModels([
    'agentSpaceId' => '<string>', // REQUIRED
    'threatModelIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the threat models.

threatModelIds
Required: Yes
Type: Array of strings

The list of threat model identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'threatModels' => [
        [
            'agentSpaceId' => '<string>',
            'assets' => [
                'actors' => [
                    [
                        'authentication' => [
                            'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                            'value' => '<string>',
                        ],
                        'description' => '<string>',
                        'identifier' => '<string>',
                        'uris' => ['<string>', ...],
                    ],
                    // ...
                ],
                'documents' => [
                    [
                        'artifactId' => '<string>',
                        'integratedDocument' => [
                            'integrationId' => '<string>',
                            'resourceId' => '<string>',
                        ],
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
                'endpoints' => [
                    [
                        'uri' => '<string>',
                    ],
                    // ...
                ],
                'integratedRepositories' => [
                    [
                        'integrationId' => '<string>',
                        'providerResourceId' => '<string>',
                    ],
                    // ...
                ],
                'sourceCode' => [
                    [
                        's3Location' => '<string>',
                    ],
                    // ...
                ],
            ],
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'logConfig' => [
                'logGroup' => '<string>',
                'logStream' => '<string>',
            ],
            'scopeDocs' => [
                [
                    'artifactId' => '<string>',
                    'integratedDocument' => [
                        'integrationId' => '<string>',
                        'resourceId' => '<string>',
                    ],
                    's3Location' => '<string>',
                ],
                // ...
            ],
            'serviceRole' => '<string>',
            'threatModelId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of threat model identifiers that were not found.

threatModels
Type: Array of ThreatModel structures

The list of threat models that were found.

Errors

There are no errors described for this operation.

BatchGetThreats

$result = $client->batchGetThreats([/* ... */]);
$promise = $client->batchGetThreatsAsync([/* ... */]);

Retrieves information about one or more threats.

Parameter Syntax

$result = $client->batchGetThreats([
    'agentSpaceId' => '<string>', // REQUIRED
    'threatIds' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

threatIds
Required: Yes
Type: Array of strings

The list of threat identifiers to retrieve.

Result Syntax

[
    'notFound' => ['<string>', ...],
    'threats' => [
        [
            'anchor' => [
                'id' => '<string>',
                'kind' => '<string>',
                'packageId' => '<string>',
            ],
            'comments' => '<string>',
            'createdAt' => <DateTime>,
            'createdBy' => 'CUSTOMER|AGENT',
            'evidence' => [
                [
                    'packageId' => '<string>',
                    'path' => '<string>',
                ],
                // ...
            ],
            'impactedAssets' => ['<string>', ...],
            'impactedGoal' => ['<string>', ...],
            'prerequisites' => '<string>',
            'recommendation' => '<string>',
            'severity' => 'CRITICAL|HIGH|MEDIUM|LOW|INFO',
            'statement' => '<string>',
            'status' => 'OPEN|RESOLVED|DISMISSED',
            'stride' => ['<string>', ...],
            'threatAction' => '<string>',
            'threatId' => '<string>',
            'threatImpact' => '<string>',
            'threatJobId' => '<string>',
            'threatSource' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'updatedBy' => 'CUSTOMER|AGENT',
        ],
        // ...
    ],
]

Result Details

Members
notFound
Type: Array of strings

The list of threat identifiers that were not found.

threats
Type: Array of Threat structures

The list of threats that were found.

Errors

There are no errors described for this operation.

BatchUpdateSecurityRequirements

$result = $client->batchUpdateSecurityRequirements([/* ... */]);
$promise = $client->batchUpdateSecurityRequirementsAsync([/* ... */]);

Batch updates security requirements within a customer managed pack.

Parameter Syntax

$result = $client->batchUpdateSecurityRequirements([
    'packId' => '<string>', // REQUIRED
    'securityRequirements' => [ // REQUIRED
        [
            'description' => '<string>',
            'domain' => '<string>',
            'evaluation' => '<string>',
            'name' => '<string>', // REQUIRED
            'remediation' => '<string>',
        ],
        // ...
    ],
]);

Parameter Details

Members
packId
Required: Yes
Type: string

The unique identifier of the security requirement pack containing the requirements to update.

securityRequirements
Required: Yes
Type: Array of UpdateSecurityRequirementEntry structures

The list of security requirement updates to apply.

Result Syntax

[
    'errors' => [
        [
            'code' => '<string>',
            'message' => '<string>',
            'securityRequirementName' => '<string>',
        ],
        // ...
    ],
    'updatedSecurityRequirementNames' => ['<string>', ...],
]

Result Details

Members
errors
Required: Yes
Type: Array of BatchSecurityRequirementError structures

The list of errors for security requirements that failed to be updated.

updatedSecurityRequirementNames
Required: Yes
Type: Array of strings

The list of security requirement names that were successfully updated.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

CreateAgentSpace

$result = $client->createAgentSpace([/* ... */]);
$promise = $client->createAgentSpaceAsync([/* ... */]);

Creates a new agent space. An agent space is a dedicated workspace for securing a specific application.

Parameter Syntax

$result = $client->createAgentSpace([
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false, // REQUIRED
        'generalPurposeScanning' => true || false, // REQUIRED
    ],
    'description' => '<string>',
    'kmsKeyId' => '<string>',
    'name' => '<string>', // REQUIRED
    'tags' => ['<string>', ...],
    'targetDomainIds' => ['<string>', ...],
]);

Parameter Details

Members
awsResources
Type: AWSResources structure

The AWS resources to associate with the agent space.

codeReviewSettings
Type: CodeReviewSettings structure

The code review settings for the agent space.

description
Type: string

A description of the agent space.

kmsKeyId
Type: string

The identifier of the AWS KMS key to use for encrypting data in the agent space.

name
Required: Yes
Type: string

The name of the agent space.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags to associate with the agent space.

targetDomainIds
Type: Array of strings

The list of target domain identifiers to associate with the agent space.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false,
        'generalPurposeScanning' => true || false,
    ],
    'createdAt' => <DateTime>,
    'description' => '<string>',
    'kmsKeyId' => '<string>',
    'name' => '<string>',
    'targetDomainIds' => ['<string>', ...],
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the created agent space.

awsResources
Type: AWSResources structure

The AWS resources associated with the agent space.

codeReviewSettings
Type: CodeReviewSettings structure

The code review settings for the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was created, in UTC format.

description
Type: string

The description of the agent space.

kmsKeyId
Type: string

The identifier of the AWS KMS key used to encrypt data in the agent space.

name
Required: Yes
Type: string

The name of the agent space.

targetDomainIds
Type: Array of strings

The list of target domain identifiers associated with the agent space.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was last updated, in UTC format.

Errors

There are no errors described for this operation.

CreateApplication

$result = $client->createApplication([/* ... */]);
$promise = $client->createApplicationAsync([/* ... */]);

Creates a new application. An application is the top-level organizational unit that supports IAM Identity Center integration.

Parameter Syntax

$result = $client->createApplication([
    'defaultKmsKeyId' => '<string>',
    'idcInstanceArn' => '<string>',
    'roleArn' => '<string>',
    'tags' => ['<string>', ...],
]);

Parameter Details

Members
defaultKmsKeyId
Type: string

The identifier of the default AWS KMS key to use for encrypting data in the application.

idcInstanceArn
Type: string

The Amazon Resource Name (ARN) of the IAM Identity Center instance to associate with the application.

roleArn
Type: string

The Amazon Resource Name (ARN) of the IAM role to associate with the application.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags to associate with the application.

Result Syntax

[
    'applicationId' => '<string>',
]

Result Details

Members
applicationId
Required: Yes
Type: string

The unique identifier of the created application.

Errors

There are no errors described for this operation.

CreateCodeReview

$result = $client->createCodeReview([/* ... */]);
$promise = $client->createCodeReviewAsync([/* ... */]);

Creates a new code review configuration in an agent space. A code review defines the parameters for automated security-focused code analysis.

Parameter Syntax

$result = $client->createCodeReview([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [ // REQUIRED
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>', // REQUIRED
                    'resourceId' => '<string>', // REQUIRED
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'serviceRole' => '<string>',
    'title' => '<string>', // REQUIRED
    'validationMode' => 'DISABLED|SIMULATED',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to create the code review in.

assets
Required: Yes
Type: Assets structure

The assets to include in the code review, such as documents and source code.

codeRemediationStrategy
Type: string

The code remediation strategy for the code review. Valid values are AUTOMATIC and DISABLED.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the code review.

serviceRole
Type: string

The IAM service role to use for the code review.

title
Required: Yes
Type: string

The title of the code review.

validationMode
Type: string

The validation mode for the code review. Valid values are SIMULATED and DISABLED.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>',
                    'resourceId' => '<string>',
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'codeReviewId' => '<string>',
    'createdAt' => <DateTime>,
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'serviceRole' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
    'validationMode' => 'DISABLED|SIMULATED',
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space that contains the code review.

assets
Type: Assets structure

The assets included in the code review.

codeRemediationStrategy
Type: string

The code remediation strategy for the code review.

codeReviewId
Required: Yes
Type: string

The unique identifier of the created code review.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was created, in UTC format.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the code review.

serviceRole
Type: string

The IAM service role used for the code review.

title
Type: string

The title of the code review.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was last updated, in UTC format.

validationMode
Type: string

The validation mode for the code review.

Errors

There are no errors described for this operation.

CreateIntegration

$result = $client->createIntegration([/* ... */]);
$promise = $client->createIntegrationAsync([/* ... */]);

Creates a new integration with a third-party provider, such as GitHub, for code review and remediation.

Parameter Syntax

$result = $client->createIntegration([
    'input' => [ // REQUIRED
        'bitbucket' => [
            'code' => '<string>', // REQUIRED
            'installationId' => '<string>', // REQUIRED
            'state' => '<string>', // REQUIRED
            'workspace' => '<string>', // REQUIRED
        ],
        'confluence' => [
            'code' => '<string>', // REQUIRED
            'installationId' => '<string>', // REQUIRED
            'siteUrl' => '<string>', // REQUIRED
            'state' => '<string>', // REQUIRED
        ],
        'github' => [
            'code' => '<string>', // REQUIRED
            'installationId' => '<string>',
            'organizationName' => '<string>',
            'state' => '<string>', // REQUIRED
            'targetUrl' => '<string>',
        ],
        'gitlab' => [
            'accessToken' => '<string>', // REQUIRED
            'groupId' => '<string>',
            'targetUrl' => '<string>',
            'tokenType' => 'PERSONAL|GROUP', // REQUIRED
        ],
    ],
    'integrationDisplayName' => '<string>', // REQUIRED
    'kmsKeyId' => '<string>',
    'privateConnectionName' => '<string>',
    'provider' => 'GITHUB|GITLAB|BITBUCKET|CONFLUENCE', // REQUIRED
    'tags' => ['<string>', ...],
]);

Parameter Details

Members
input
Required: Yes
Type: ProviderInput structure

The provider-specific input required to create the integration.

integrationDisplayName
Required: Yes
Type: string

The display name for the integration.

kmsKeyId
Type: string

The identifier of the AWS KMS key to use for encrypting data associated with the integration.

privateConnectionName
Type: string

The name of an active private connection used to reach a self-hosted provider instance over private networking. Specify this when the instance is not publicly reachable.

provider
Required: Yes
Type: string

The integration provider. Currently, only GITHUB is supported.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags to associate with the integration.

Result Syntax

[
    'integrationId' => '<string>',
]

Result Details

Members
integrationId
Required: Yes
Type: string

The unique identifier of the created integration.

Errors

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ValidationException:

The input fails to satisfy the constraints specified by the service.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

CreateMembership

$result = $client->createMembership([/* ... */]);
$promise = $client->createMembershipAsync([/* ... */]);

Creates a new membership, granting a user access to an agent space within an application.

Parameter Syntax

$result = $client->createMembership([
    'agentSpaceId' => '<string>', // REQUIRED
    'applicationId' => '<string>', // REQUIRED
    'config' => [
        'user' => [
            'role' => 'MEMBER',
        ],
    ],
    'memberType' => 'USER', // REQUIRED
    'membershipId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to grant access to.

applicationId
Required: Yes
Type: string

The unique identifier of the application that contains the agent space.

config
Type: MembershipConfig structure

The configuration for the membership, such as the user role.

memberType
Required: Yes
Type: string

The type of member. Currently, only USER is supported.

membershipId
Required: Yes
Type: string

The unique identifier for the membership.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

CreatePentest

$result = $client->createPentest([/* ... */]);
$promise = $client->createPentestAsync([/* ... */]);

Creates a new pentest configuration in an agent space. A pentest defines the security test parameters, including target assets, risk type exclusions, and logging configuration.

Parameter Syntax

$result = $client->createPentest([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>', // REQUIRED
                    'resourceId' => '<string>', // REQUIRED
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'disableManagedSkills' => ['<string>', ...],
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'networkTrafficConfig' => [
        'customHeaders' => [
            [
                'name' => '<string>',
                'value' => '<string>',
            ],
            // ...
        ],
        'rules' => [
            [
                'effect' => 'ALLOW|DENY',
                'networkTrafficRuleType' => 'URL',
                'pattern' => '<string>',
            ],
            // ...
        ],
    ],
    'serviceRole' => '<string>',
    'title' => '<string>', // REQUIRED
    'vpcConfig' => [
        'securityGroupArns' => ['<string>', ...],
        'subnetArns' => ['<string>', ...],
        'vpcArn' => '<string>',
    ],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to create the pentest in.

assets
Type: Assets structure

The assets to include in the pentest, such as endpoints, actors, documents, and source code.

codeRemediationStrategy
Type: string

The code remediation strategy for the pentest. Valid values are AUTOMATIC and DISABLED.

disableManagedSkills
Type: Array of strings

A list of managed skills to disable for this pentest. Valid values include FINDING_PERSONALIZATION and LOGIN_OPTIMIZATION.

excludeRiskTypes
Type: Array of strings

The list of risk types to exclude from the pentest.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the pentest.

networkTrafficConfig
Type: NetworkTrafficConfig structure

The network traffic configuration for the pentest, including custom headers and traffic rules.

serviceRole
Type: string

The IAM service role to use for the pentest.

title
Required: Yes
Type: string

The title of the pentest.

vpcConfig
Type: VpcConfig structure

The VPC configuration for the pentest.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>',
                    'resourceId' => '<string>',
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'createdAt' => <DateTime>,
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'pentestId' => '<string>',
    'serviceRole' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space that contains the pentest.

assets
Type: Assets structure

The assets included in the pentest.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was created, in UTC format.

excludeRiskTypes
Type: Array of strings

The list of risk types excluded from the pentest.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the pentest.

pentestId
Type: string

The unique identifier of the created pentest.

serviceRole
Type: string

The IAM service role used for the pentest.

title
Type: string

The title of the pentest.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was last updated, in UTC format.

Errors

There are no errors described for this operation.

CreatePrivateConnection

$result = $client->createPrivateConnection([/* ... */]);
$promise = $client->createPrivateConnectionAsync([/* ... */]);

Creates a private connection for reaching a self-hosted provider instance over private networking using Amazon VPC Lattice.

Parameter Syntax

$result = $client->createPrivateConnection([
    'mode' => [ // REQUIRED
        'selfManaged' => [
            'certificate' => '<string>',
            'resourceConfigurationId' => '<string>', // REQUIRED
        ],
        'serviceManaged' => [
            'certificate' => '<string>',
            'dnsResolution' => 'PUBLIC|IN_VPC',
            'hostAddress' => '<string>', // REQUIRED
            'ipAddressType' => 'IPV4|IPV6|DUAL_STACK',
            'ipv4AddressesPerEni' => <integer>,
            'portRanges' => ['<string>', ...],
            'securityGroupIds' => ['<string>', ...],
            'subnetIds' => ['<string>', ...], // REQUIRED
            'vpcId' => '<string>', // REQUIRED
        ],
    ],
    'privateConnectionName' => '<string>', // REQUIRED
    'tags' => ['<string>', ...],
]);

Parameter Details

Members
mode
Required: Yes
Type: PrivateConnectionMode structure

The configuration for the private connection. Specify either a service-managed or a self-managed mode.

privateConnectionName
Required: Yes
Type: string

A unique name for the private connection within your account.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags to attach to the private connection.

Result Syntax

[
    'certificateExpiryTime' => <DateTime>,
    'dnsResolution' => 'PUBLIC|IN_VPC',
    'failureMessage' => '<string>',
    'hostAddress' => '<string>',
    'name' => '<string>',
    'resourceConfigurationId' => '<string>',
    'resourceGatewayId' => '<string>',
    'status' => 'ACTIVE|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_IN_PROGRESS|DELETE_FAILED',
    'tags' => ['<string>', ...],
    'type' => 'SERVICE_MANAGED|SELF_MANAGED',
    'vpcId' => '<string>',
]

Result Details

Members
certificateExpiryTime
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the connection's certificate expires, in UTC format.

dnsResolution
Type: string

The DNS resolution mode for the resource gateway.

failureMessage
Type: string

A message describing why the private connection entered a failed state, if applicable.

hostAddress
Type: string

The IP address or DNS name of the target resource.

name
Required: Yes
Type: string

The name of the private connection.

resourceConfigurationId
Type: string

The identifier or ARN of the VPC Lattice resource configuration.

resourceGatewayId
Type: string

The identifier or ARN of the VPC Lattice resource gateway.

status
Required: Yes
Type: string

The current status of the private connection.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags attached to the private connection.

type
Required: Yes
Type: string

The type of the private connection, indicating whether it is service-managed or self-managed.

vpcId
Type: string

The identifier of the VPC the resource gateway is created in.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

CreateSecurityRequirementPack

$result = $client->createSecurityRequirementPack([/* ... */]);
$promise = $client->createSecurityRequirementPackAsync([/* ... */]);

Creates a customer managed security requirement pack.

Parameter Syntax

$result = $client->createSecurityRequirementPack([
    'description' => '<string>',
    'kmsKeyId' => '<string>',
    'name' => '<string>', // REQUIRED
    'status' => 'ENABLED|DISABLED',
    'tags' => ['<string>', ...],
]);

Parameter Details

Members
description
Type: string

A description of the security requirement pack.

kmsKeyId
Type: string

The identifier of the AWS KMS key used to encrypt pack contents.

name
Required: Yes
Type: string

The name of the security requirement pack.

status
Type: string

The status of the pack. Defaults to ENABLED if not provided.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags to associate with the security requirement pack.

Result Syntax

[
    'kmsKeyId' => '<string>',
    'packId' => '<string>',
    'status' => 'ENABLED|DISABLED',
]

Result Details

Members
kmsKeyId
Type: string

The identifier of the AWS KMS key used to encrypt pack contents.

packId
Required: Yes
Type: string

The unique identifier of the created security requirement pack.

status
Required: Yes
Type: string

The status of the created security requirement pack.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ServiceQuotaExceededException:

The request exceeds a service quota. Review your current usage and request a quota increase if needed.

CreateTargetDomain

$result = $client->createTargetDomain([/* ... */]);
$promise = $client->createTargetDomainAsync([/* ... */]);

Creates a new target domain for penetration testing. A target domain is a web domain that must be registered and verified before it can be tested.

Parameter Syntax

$result = $client->createTargetDomain([
    'tags' => ['<string>', ...],
    'targetDomainName' => '<string>', // REQUIRED
    'verificationMethod' => 'DNS_TXT|HTTP_ROUTE|PRIVATE_VPC', // REQUIRED
]);

Parameter Details

Members
tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags to associate with the target domain.

targetDomainName
Required: Yes
Type: string

The domain name to register as a target domain.

verificationMethod
Required: Yes
Type: string

The method to use for verifying domain ownership. Valid values are DNS_TXT, HTTP_ROUTE, and PRIVATE_VPC.

Result Syntax

[
    'createdAt' => <DateTime>,
    'domainName' => '<string>',
    'targetDomainId' => '<string>',
    'verificationDetails' => [
        'dnsTxt' => [
            'dnsRecordName' => '<string>',
            'dnsRecordType' => 'TXT',
            'token' => '<string>',
        ],
        'httpRoute' => [
            'routePath' => '<string>',
            'token' => '<string>',
        ],
        'method' => 'DNS_TXT|HTTP_ROUTE|PRIVATE_VPC',
    ],
    'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
    'verificationStatusReason' => '<string>',
    'verifiedAt' => <DateTime>,
]

Result Details

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was created, in UTC format.

domainName
Required: Yes
Type: string

The domain name of the target domain.

targetDomainId
Required: Yes
Type: string

The unique identifier of the created target domain.

verificationDetails
Type: VerificationDetails structure

The verification details for the target domain, including the verification token and instructions.

verificationStatus
Required: Yes
Type: string

The current verification status of the target domain.

verificationStatusReason
Type: string

The reason for the current target domain verification status.

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was verified, in UTC format.

Errors

There are no errors described for this operation.

CreateThreat

$result = $client->createThreat([/* ... */]);
$promise = $client->createThreatAsync([/* ... */]);

Creates a new threat under a threat model job.

Parameter Syntax

$result = $client->createThreat([
    'agentSpaceId' => '<string>', // REQUIRED
    'anchor' => [
        'id' => '<string>',
        'kind' => '<string>',
        'packageId' => '<string>',
    ],
    'comments' => '<string>',
    'evidence' => [
        [
            'packageId' => '<string>',
            'path' => '<string>',
        ],
        // ...
    ],
    'impactedAssets' => ['<string>', ...],
    'impactedGoal' => ['<string>', ...],
    'prerequisites' => '<string>',
    'recommendation' => '<string>',
    'severity' => 'CRITICAL|HIGH|MEDIUM|LOW|INFO',
    'statement' => '<string>',
    'stride' => ['<string>', ...],
    'threatAction' => '<string>',
    'threatImpact' => '<string>',
    'threatJobId' => '<string>', // REQUIRED
    'threatSource' => '<string>',
    'title' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

anchor
Type: ThreatAnchorShape structure

The DFD element this threat is anchored to.

comments
Type: string

Optional customer comment on the threat.

evidence
Type: Array of ThreatEvidenceShape structures

The source code files supporting the threat.

impactedAssets
Type: Array of strings

The specific assets affected by the threat.

impactedGoal
Type: Array of strings

The security goals affected by the threat.

prerequisites
Type: string

The conditions required for the threat to be exploitable.

recommendation
Type: string

The recommended mitigation guidance for this threat.

severity
Type: string

The severity level of the threat.

statement
Type: string

The natural-language threat statement.

stride
Type: Array of strings

The STRIDE categories applicable to this threat.

threatAction
Type: string

What the threat source can do.

threatImpact
Type: string

The direct consequence of the threat action.

threatJobId
Required: Yes
Type: string

The unique identifier of the threat model job the threat belongs to.

threatSource
Type: string

The actor or origin of the threat.

title
Type: string

A short title summarizing the threat.

Result Syntax

[
    'anchor' => [
        'id' => '<string>',
        'kind' => '<string>',
        'packageId' => '<string>',
    ],
    'comments' => '<string>',
    'createdAt' => <DateTime>,
    'createdBy' => 'CUSTOMER|AGENT',
    'evidence' => [
        [
            'packageId' => '<string>',
            'path' => '<string>',
        ],
        // ...
    ],
    'impactedAssets' => ['<string>', ...],
    'impactedGoal' => ['<string>', ...],
    'prerequisites' => '<string>',
    'recommendation' => '<string>',
    'severity' => 'CRITICAL|HIGH|MEDIUM|LOW|INFO',
    'statement' => '<string>',
    'status' => 'OPEN|RESOLVED|DISMISSED',
    'stride' => ['<string>', ...],
    'threatAction' => '<string>',
    'threatId' => '<string>',
    'threatImpact' => '<string>',
    'threatJobId' => '<string>',
    'threatSource' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
    'updatedBy' => 'CUSTOMER|AGENT',
]

Result Details

Members
anchor
Type: ThreatAnchorShape structure

The DFD element this threat is anchored to.

comments
Type: string

Optional customer comment on the threat.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was created, in UTC format.

createdBy
Type: string

Who created this threat.

evidence
Type: Array of ThreatEvidenceShape structures

The source code files supporting the threat.

impactedAssets
Type: Array of strings

The specific assets affected by the threat.

impactedGoal
Type: Array of strings

The security goals affected by the threat.

prerequisites
Type: string

The conditions required for the threat to be exploitable.

recommendation
Type: string

The recommended mitigation guidance for this threat.

severity
Type: string

The severity level of the threat.

statement
Type: string

The natural-language threat statement.

status
Type: string

The current status of the threat.

stride
Type: Array of strings

The STRIDE categories applicable to this threat.

threatAction
Type: string

What the threat source can do.

threatId
Required: Yes
Type: string

The unique identifier of the created threat.

threatImpact
Type: string

The direct consequence of the threat action.

threatJobId
Required: Yes
Type: string

The unique identifier of the threat model job the threat belongs to.

threatSource
Type: string

The actor or origin of the threat.

title
Type: string

A short title summarizing the threat.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was last updated, in UTC format.

updatedBy
Type: string

Who last updated this threat.

Errors

There are no errors described for this operation.

CreateThreatModel

$result = $client->createThreatModel([/* ... */]);
$promise = $client->createThreatModelAsync([/* ... */]);

Creates a new threat model configuration in an agent space. A threat model defines the parameters for automated threat analysis.

Parameter Syntax

$result = $client->createThreatModel([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>', // REQUIRED
                    'resourceId' => '<string>', // REQUIRED
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'description' => '<string>',
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'reportDestination' => [
        'containerId' => '<string>', // REQUIRED
        'documentId' => '<string>',
        'integrationId' => '<string>', // REQUIRED
        'parentId' => '<string>',
    ],
    'scopeDocs' => [
        [
            'artifactId' => '<string>',
            'integratedDocument' => [
                'integrationId' => '<string>', // REQUIRED
                'resourceId' => '<string>', // REQUIRED
            ],
            's3Location' => '<string>',
        ],
        // ...
    ],
    'serviceRole' => '<string>', // REQUIRED
    'title' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to create the threat model in.

assets
Type: Assets structure

The assets to include in the threat model.

description
Type: string

A description of the application or system being threat modeled.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the threat model.

reportDestination
Type: ReportDestination structure

The destination for publishing scan reports to an integrated document provider.

scopeDocs
Type: Array of DocumentInfo structures

The scoped documents for the agent to focus on during threat modeling.

serviceRole
Required: Yes
Type: string

The IAM service role to use for the threat model.

title
Required: Yes
Type: string

The title of the threat model.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>',
                    'resourceId' => '<string>',
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'createdAt' => <DateTime>,
    'description' => '<string>',
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'scopeDocs' => [
        [
            'artifactId' => '<string>',
            'integratedDocument' => [
                'integrationId' => '<string>',
                'resourceId' => '<string>',
            ],
            's3Location' => '<string>',
        ],
        // ...
    ],
    'serviceRole' => '<string>',
    'threatModelId' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space that contains the threat model.

assets
Type: Assets structure

The assets included in the threat model.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was created, in UTC format.

description
Type: string

A description of the application or system being threat modeled.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the threat model.

scopeDocs
Type: Array of DocumentInfo structures

The scoped documents for the agent to focus on during threat modeling.

serviceRole
Type: string

The IAM service role used for the threat model.

threatModelId
Required: Yes
Type: string

The unique identifier of the created threat model.

title
Type: string

The title of the threat model.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was last updated, in UTC format.

Errors

There are no errors described for this operation.

DeleteAgentSpace

$result = $client->deleteAgentSpace([/* ... */]);
$promise = $client->deleteAgentSpaceAsync([/* ... */]);

Deletes an agent space and all of its associated resources, including pentests, findings, and artifacts.

Parameter Syntax

$result = $client->deleteAgentSpace([
    'agentSpaceId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to delete.

Result Syntax

[
    'agentSpaceId' => '<string>',
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the deleted agent space.

Errors

There are no errors described for this operation.

DeleteApplication

$result = $client->deleteApplication([/* ... */]);
$promise = $client->deleteApplicationAsync([/* ... */]);

Deletes an application and its associated configuration, including IAM Identity Center settings.

Parameter Syntax

$result = $client->deleteApplication([
    'applicationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
applicationId
Required: Yes
Type: string

The unique identifier of the application to delete.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

DeleteArtifact

$result = $client->deleteArtifact([/* ... */]);
$promise = $client->deleteArtifactAsync([/* ... */]);

Deletes an artifact from an agent space.

Parameter Syntax

$result = $client->deleteArtifact([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the artifact.

artifactId
Required: Yes
Type: string

The unique identifier of the artifact to delete.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ValidationException:

The input fails to satisfy the constraints specified by the service.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

DeleteIntegration

$result = $client->deleteIntegration([/* ... */]);
$promise = $client->deleteIntegrationAsync([/* ... */]);

Deletes an integration with a third-party provider.

Parameter Syntax

$result = $client->deleteIntegration([
    'integrationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
integrationId
Required: Yes
Type: string

The unique identifier of the integration to delete.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

DeleteMembership

$result = $client->deleteMembership([/* ... */]);
$promise = $client->deleteMembershipAsync([/* ... */]);

Deletes a membership, revoking a user's access to an agent space.

Parameter Syntax

$result = $client->deleteMembership([
    'agentSpaceId' => '<string>', // REQUIRED
    'applicationId' => '<string>', // REQUIRED
    'memberType' => 'USER',
    'membershipId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to revoke access from.

applicationId
Required: Yes
Type: string

The unique identifier of the application that contains the agent space.

memberType
Type: string

The type of member to remove.

membershipId
Required: Yes
Type: string

The unique identifier of the membership to delete.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

DeletePrivateConnection

$result = $client->deletePrivateConnection([/* ... */]);
$promise = $client->deletePrivateConnectionAsync([/* ... */]);

Deletes a private connection.

Parameter Syntax

$result = $client->deletePrivateConnection([
    'privateConnectionName' => '<string>', // REQUIRED
]);

Parameter Details

Members
privateConnectionName
Required: Yes
Type: string

The name of the private connection to delete.

Result Syntax

[
    'certificateExpiryTime' => <DateTime>,
    'dnsResolution' => 'PUBLIC|IN_VPC',
    'failureMessage' => '<string>',
    'hostAddress' => '<string>',
    'name' => '<string>',
    'resourceConfigurationId' => '<string>',
    'resourceGatewayId' => '<string>',
    'status' => 'ACTIVE|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_IN_PROGRESS|DELETE_FAILED',
    'tags' => ['<string>', ...],
    'type' => 'SERVICE_MANAGED|SELF_MANAGED',
    'vpcId' => '<string>',
]

Result Details

Members
certificateExpiryTime
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the connection's certificate expires, in UTC format.

dnsResolution
Type: string

The DNS resolution mode for the resource gateway.

failureMessage
Type: string

A message describing why the private connection entered a failed state, if applicable.

hostAddress
Type: string

The IP address or DNS name of the target resource.

name
Required: Yes
Type: string

The name of the private connection.

resourceConfigurationId
Type: string

The identifier or ARN of the VPC Lattice resource configuration.

resourceGatewayId
Type: string

The identifier or ARN of the VPC Lattice resource gateway.

status
Required: Yes
Type: string

The current status of the private connection.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags attached to the private connection.

type
Required: Yes
Type: string

The type of the private connection, indicating whether it is service-managed or self-managed.

vpcId
Type: string

The identifier of the VPC the resource gateway is created in.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

DeleteSecurityRequirementPack

$result = $client->deleteSecurityRequirementPack([/* ... */]);
$promise = $client->deleteSecurityRequirementPackAsync([/* ... */]);

Deletes a customer managed security requirement pack and all its associated security requirements.

Parameter Syntax

$result = $client->deleteSecurityRequirementPack([
    'packId' => '<string>', // REQUIRED
]);

Parameter Details

Members
packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to delete.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

DeleteTargetDomain

$result = $client->deleteTargetDomain([/* ... */]);
$promise = $client->deleteTargetDomainAsync([/* ... */]);

Deletes a target domain registration. After deletion, the domain can no longer be used for penetration testing.

Parameter Syntax

$result = $client->deleteTargetDomain([
    'targetDomainId' => '<string>', // REQUIRED
]);

Parameter Details

Members
targetDomainId
Required: Yes
Type: string

The unique identifier of the target domain to delete.

Result Syntax

[
    'targetDomainId' => '<string>',
]

Result Details

Members
targetDomainId
Type: string

The unique identifier of the deleted target domain.

Errors

There are no errors described for this operation.

DescribePrivateConnection

$result = $client->describePrivateConnection([/* ... */]);
$promise = $client->describePrivateConnectionAsync([/* ... */]);

Retrieves the details of a private connection.

Parameter Syntax

$result = $client->describePrivateConnection([
    'privateConnectionName' => '<string>', // REQUIRED
]);

Parameter Details

Members
privateConnectionName
Required: Yes
Type: string

The name of the private connection to describe.

Result Syntax

[
    'certificateExpiryTime' => <DateTime>,
    'dnsResolution' => 'PUBLIC|IN_VPC',
    'failureMessage' => '<string>',
    'hostAddress' => '<string>',
    'name' => '<string>',
    'resourceConfigurationId' => '<string>',
    'resourceGatewayId' => '<string>',
    'status' => 'ACTIVE|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_IN_PROGRESS|DELETE_FAILED',
    'tags' => ['<string>', ...],
    'type' => 'SERVICE_MANAGED|SELF_MANAGED',
    'vpcId' => '<string>',
]

Result Details

Members
certificateExpiryTime
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the connection's certificate expires, in UTC format.

dnsResolution
Type: string

The DNS resolution mode for the resource gateway.

failureMessage
Type: string

A message describing why the private connection entered a failed state, if applicable.

hostAddress
Type: string

The IP address or DNS name of the target resource.

name
Required: Yes
Type: string

The name of the private connection.

resourceConfigurationId
Type: string

The identifier or ARN of the VPC Lattice resource configuration.

resourceGatewayId
Type: string

The identifier or ARN of the VPC Lattice resource gateway.

status
Required: Yes
Type: string

The current status of the private connection.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags attached to the private connection.

type
Required: Yes
Type: string

The type of the private connection, indicating whether it is service-managed or self-managed.

vpcId
Type: string

The identifier of the VPC the resource gateway is created in.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

GetApplication

$result = $client->getApplication([/* ... */]);
$promise = $client->getApplicationAsync([/* ... */]);

Retrieves information about an application.

Parameter Syntax

$result = $client->getApplication([
    'applicationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
applicationId
Required: Yes
Type: string

The unique identifier of the application to retrieve.

Result Syntax

[
    'applicationId' => '<string>',
    'applicationName' => '<string>',
    'defaultKmsKeyId' => '<string>',
    'domain' => '<string>',
    'idcConfiguration' => [
        'idcApplicationArn' => '<string>',
        'idcInstanceArn' => '<string>',
    ],
    'roleArn' => '<string>',
]

Result Details

Members
applicationId
Required: Yes
Type: string

The unique identifier of the application.

applicationName
Type: string

The name of the application.

defaultKmsKeyId
Type: string

The identifier of the default AWS KMS key used to encrypt data for the application.

domain
Required: Yes
Type: string

The domain associated with the application.

idcConfiguration
Type: IdCConfiguration structure

The IAM Identity Center configuration for the application.

roleArn
Type: string

The Amazon Resource Name (ARN) of the IAM role associated with the application.

Errors

There are no errors described for this operation.

GetArtifact

$result = $client->getArtifact([/* ... */]);
$promise = $client->getArtifactAsync([/* ... */]);

Retrieves an artifact from an agent space.

Parameter Syntax

$result = $client->getArtifact([
    'agentSpaceId' => '<string>', // REQUIRED
    'artifactId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the artifact.

artifactId
Required: Yes
Type: string

The unique identifier of the artifact to retrieve.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'artifact' => [
        'contents' => '<string>',
        'type' => 'TXT|PNG|JPEG|MD|PDF|DOCX|DOC|JSON|YAML',
    ],
    'artifactId' => '<string>',
    'fileName' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the artifact.

artifact
Required: Yes
Type: Artifact structure

The artifact content and type.

artifactId
Required: Yes
Type: string

The unique identifier of the artifact.

fileName
Required: Yes
Type: string

The file name of the artifact.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the artifact was last updated, in UTC format.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

GetIntegration

$result = $client->getIntegration([/* ... */]);
$promise = $client->getIntegrationAsync([/* ... */]);

Retrieves information about an integration.

Parameter Syntax

$result = $client->getIntegration([
    'integrationId' => '<string>', // REQUIRED
]);

Parameter Details

Members
integrationId
Required: Yes
Type: string

The unique identifier of the integration to retrieve.

Result Syntax

[
    'displayName' => '<string>',
    'installationId' => '<string>',
    'integrationId' => '<string>',
    'kmsKeyId' => '<string>',
    'privateConnectionName' => '<string>',
    'provider' => 'GITHUB|GITLAB|BITBUCKET|CONFLUENCE',
    'providerType' => 'SOURCE_CODE|DOCUMENTATION',
    'targetUrl' => '<string>',
]

Result Details

Members
displayName
Type: string

The display name of the integration.

installationId
Required: Yes
Type: string

The installation identifier from the integration provider.

integrationId
Required: Yes
Type: string

The unique identifier of the integration.

kmsKeyId
Type: string

The identifier of the AWS KMS key used to encrypt data associated with the integration.

privateConnectionName
Type: string

The name of the private connection used to reach the integration's self-hosted instance over private networking, if one is configured.

provider
Required: Yes
Type: string

The integration provider.

providerType
Required: Yes
Type: string

The type of the integration provider.

targetUrl
Type: string

The HTTPS URL of the customer self-hosted instance, such as a GitHub Enterprise Server or self-managed GitLab instance. This value is absent for SaaS integrations.

Errors

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

GetSecurityRequirementPack

$result = $client->getSecurityRequirementPack([/* ... */]);
$promise = $client->getSecurityRequirementPackAsync([/* ... */]);

Retrieves information about a security requirement pack.

Parameter Syntax

$result = $client->getSecurityRequirementPack([
    'packId' => '<string>', // REQUIRED
]);

Parameter Details

Members
packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to retrieve.

Result Syntax

[
    'createdAt' => <DateTime>,
    'description' => '<string>',
    'importStatus' => 'PENDING|IN_PROGRESS|FAILED|COMPLETED',
    'kmsKeyId' => '<string>',
    'managementType' => 'AWS_MANAGED|CUSTOMER_MANAGED',
    'name' => '<string>',
    'packId' => '<string>',
    'status' => 'ENABLED|DISABLED',
    'updatedAt' => <DateTime>,
    'vendorName' => '<string>',
]

Result Details

Members
createdAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement pack was created, in UTC format.

description
Type: string

A description of the security requirement pack.

importStatus
Type: string

The status of the security requirements import workflow for this pack.

kmsKeyId
Type: string

The identifier of the AWS KMS key used to encrypt pack contents.

managementType
Required: Yes
Type: string

The management type of the pack. Valid values are AWS_MANAGED and CUSTOMER_MANAGED.

name
Required: Yes
Type: string

The name of the security requirement pack.

packId
Required: Yes
Type: string

The unique identifier of the security requirement pack.

status
Required: Yes
Type: string

The status of the security requirement pack.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement pack was last updated, in UTC format.

vendorName
Type: string

The vendor name for AWS managed packs, such as ISO or NIST.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ImportSecurityRequirements

$result = $client->importSecurityRequirements([/* ... */]);
$promise = $client->importSecurityRequirementsAsync([/* ... */]);

Imports security requirements from uploaded documents into a customer managed security requirement pack. The import process asynchronously extracts and generates structured security requirements from the provided source files.

Parameter Syntax

$result = $client->importSecurityRequirements([
    'input' => [ // REQUIRED
        'documents' => [
            [
                'content' => <string || resource || Psr\Http\Message\StreamInterface>, // REQUIRED
                'format' => 'MD|PDF|TXT|DOCX|DOC', // REQUIRED
                'name' => '<string>', // REQUIRED
            ],
            // ...
        ],
    ],
    'packId' => '<string>', // REQUIRED
]);

Parameter Details

Members
input
Required: Yes
Type: ImportSource structure

The import source containing the documents to extract security requirements from.

packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to import requirements into.

Result Syntax

[
    'importStatus' => 'PENDING|IN_PROGRESS|FAILED|COMPLETED',
    'packId' => '<string>',
]

Result Details

Members
importStatus
Required: Yes
Type: string

The status of the import workflow.

packId
Required: Yes
Type: string

The unique identifier of the security requirement pack.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ServiceQuotaExceededException:

The request exceeds a service quota. Review your current usage and request a quota increase if needed.

InitiateProviderRegistration

$result = $client->initiateProviderRegistration([/* ... */]);
$promise = $client->initiateProviderRegistrationAsync([/* ... */]);

Initiates the OAuth registration flow with a third-party provider. Returns a redirect URL and CSRF state token for completing the authorization.

Parameter Syntax

$result = $client->initiateProviderRegistration([
    'provider' => 'GITHUB|GITLAB|BITBUCKET|CONFLUENCE', // REQUIRED
]);

Parameter Details

Members
provider
Required: Yes
Type: string

The provider to initiate registration with. Currently, only GITHUB is supported.

Result Syntax

[
    'csrfState' => '<string>',
    'redirectTo' => '<string>',
]

Result Details

Members
csrfState
Required: Yes
Type: string

The CSRF state token to use when completing the OAuth flow.

redirectTo
Required: Yes
Type: string

The URL to redirect the user to for completing the OAuth authorization.

Errors

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ValidationException:

The input fails to satisfy the constraints specified by the service.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ListAgentSpaces

$result = $client->listAgentSpaces([/* ... */]);
$promise = $client->listAgentSpacesAsync([/* ... */]);

Returns a paginated list of agent space summaries in your account.

Parameter Syntax

$result = $client->listAgentSpaces([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'agentSpaceSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'name' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
agentSpaceSummaries
Type: Array of AgentSpaceSummary structures

The list of agent space summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListApplications

$result = $client->listApplications([/* ... */]);
$promise = $client->listApplicationsAsync([/* ... */]);

Returns a paginated list of application summaries in your account.

Parameter Syntax

$result = $client->listApplications([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'applicationSummaries' => [
        [
            'applicationId' => '<string>',
            'applicationName' => '<string>',
            'defaultKmsKeyId' => '<string>',
            'domain' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
applicationSummaries
Required: Yes
Type: Array of ApplicationSummary structures

The list of application summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListArtifacts

$result = $client->listArtifacts([/* ... */]);
$promise = $client->listArtifactsAsync([/* ... */]);

Returns a paginated list of artifact summaries for the specified agent space.

Parameter Syntax

$result = $client->listArtifacts([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to list artifacts for.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'artifactSummaries' => [
        [
            'artifactId' => '<string>',
            'artifactType' => 'TXT|PNG|JPEG|MD|PDF|DOCX|DOC|JSON|YAML',
            'fileName' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
artifactSummaries
Required: Yes
Type: Array of ArtifactSummary structures

The list of artifact summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ValidationException:

The input fails to satisfy the constraints specified by the service.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ListCodeReviewJobTasks

$result = $client->listCodeReviewJobTasks([/* ... */]);
$promise = $client->listCodeReviewJobTasksAsync([/* ... */]);

Returns a paginated list of task summaries for the specified code review job, optionally filtered by step name or category.

Parameter Syntax

$result = $client->listCodeReviewJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'categoryName' => '<string>',
    'codeReviewJobId' => '<string>',
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'stepName' => 'PREFLIGHT|STATIC_ANALYSIS|PENTEST|FINALIZING|VALIDATION',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

categoryName
Type: string

Filter tasks by category name.

codeReviewJobId
Type: string

The unique identifier of the code review job to list tasks for.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

stepName
Type: string

Filter tasks by step name.

Result Syntax

[
    'codeReviewJobTaskSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'codeReviewId' => '<string>',
            'codeReviewJobId' => '<string>',
            'createdAt' => <DateTime>,
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'riskType' => 'CROSS_SITE_SCRIPTING|DEFAULT_CREDENTIALS|INSECURE_DIRECT_OBJECT_REFERENCE|PRIVILEGE_ESCALATION|SERVER_SIDE_TEMPLATE_INJECTION|COMMAND_INJECTION|CODE_INJECTION|SQL_INJECTION|ARBITRARY_FILE_UPLOAD|INSECURE_DESERIALIZATION|LOCAL_FILE_INCLUSION|INFORMATION_DISCLOSURE|PATH_TRAVERSAL|SERVER_SIDE_REQUEST_FORGERY|JSON_WEB_TOKEN_VULNERABILITIES|XML_EXTERNAL_ENTITY|FILE_DELETION|OTHER|GRAPHQL_VULNERABILITIES|BUSINESS_LOGIC_VULNERABILITIES|CRYPTOGRAPHIC_VULNERABILITIES|DENIAL_OF_SERVICE|FILE_ACCESS|FILE_CREATION|DATABASE_MODIFICATION|DATABASE_ACCESS|OUTBOUND_SERVICE_REQUEST|UNKNOWN',
            'taskId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
codeReviewJobTaskSummaries
Type: Array of CodeReviewJobTaskSummary structures

The list of code review job task summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListCodeReviewJobsForCodeReview

$result = $client->listCodeReviewJobsForCodeReview([/* ... */]);
$promise = $client->listCodeReviewJobsForCodeReviewAsync([/* ... */]);

Returns a paginated list of code review job summaries for the specified code review configuration.

Parameter Syntax

$result = $client->listCodeReviewJobsForCodeReview([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

codeReviewId
Required: Yes
Type: string

The unique identifier of the code review to list jobs for.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'codeReviewJobSummaries' => [
        [
            'codeReviewId' => '<string>',
            'codeReviewJobId' => '<string>',
            'createdAt' => <DateTime>,
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
codeReviewJobSummaries
Type: Array of CodeReviewJobSummary structures

The list of code review job summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListCodeReviews

$result = $client->listCodeReviews([/* ... */]);
$promise = $client->listCodeReviewsAsync([/* ... */]);

Returns a paginated list of code review summaries for the specified agent space.

Parameter Syntax

$result = $client->listCodeReviews([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to list code reviews for.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'codeReviewSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'codeReviewId' => '<string>',
            'createdAt' => <DateTime>,
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
codeReviewSummaries
Type: Array of CodeReviewSummary structures

The list of code review summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListDiscoveredEndpoints

$result = $client->listDiscoveredEndpoints([/* ... */]);
$promise = $client->listDiscoveredEndpointsAsync([/* ... */]);

Returns a paginated list of endpoints discovered during a pentest job execution.

Parameter Syntax

$result = $client->listDiscoveredEndpoints([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'pentestJobId' => '<string>', // REQUIRED
    'prefix' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

pentestJobId
Required: Yes
Type: string

The unique identifier of the pentest job to list discovered endpoints for.

prefix
Type: string

A prefix to filter discovered endpoints by URI.

Result Syntax

[
    'discoveredEndpoints' => [
        [
            'agentSpaceId' => '<string>',
            'description' => '<string>',
            'evidence' => '<string>',
            'operation' => '<string>',
            'pentestJobId' => '<string>',
            'taskId' => '<string>',
            'uri' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
discoveredEndpoints
Type: Array of DiscoveredEndpoint structures

The list of discovered endpoints.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListFindings

$result = $client->listFindings([/* ... */]);
$promise = $client->listFindingsAsync([/* ... */]);

Lists the security findings for a pentest job.

Parameter Syntax

$result = $client->listFindings([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewJobId' => '<string>',
    'confidence' => 'FALSE_POSITIVE|UNCONFIRMED|LOW|MEDIUM|HIGH',
    'maxResults' => <integer>,
    'name' => '<string>',
    'nextToken' => '<string>',
    'pentestJobId' => '<string>',
    'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
    'riskType' => '<string>',
    'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

codeReviewJobId
Type: string

The unique identifier of the code review job to list findings for. Mutually exclusive with pentestJobId.

confidence
Type: string

Filter findings by confidence level.

maxResults
Type: int

The maximum number of results to return in a single call.

name
Type: string

Filter findings by name.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

pentestJobId
Type: string

The unique identifier of the pentest job to list findings for.

riskLevel
Type: string

Filter findings by risk level.

riskType
Type: string

Filter findings by risk type.

status
Type: string

Filter findings by status.

Result Syntax

[
    'findingsSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'codeReviewId' => '<string>',
            'codeReviewJobId' => '<string>',
            'confidence' => 'FALSE_POSITIVE|UNCONFIRMED|LOW|MEDIUM|HIGH',
            'createdAt' => <DateTime>,
            'findingId' => '<string>',
            'name' => '<string>',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
            'riskType' => '<string>',
            'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
            'updatedAt' => <DateTime>,
            'validationStatus' => 'CONFIRMED|NOT_REPRODUCED|VALIDATION_FAILED|VALIDATING|NOT_VALIDATED',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
findingsSummaries
Type: Array of FindingSummary structures

The list of finding summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListIntegratedResources

$result = $client->listIntegratedResources([/* ... */]);
$promise = $client->listIntegratedResourcesAsync([/* ... */]);

Lists the integrated resources for an agent space, optionally filtered by integration or resource type.

Parameter Syntax

$result = $client->listIntegratedResources([
    'agentSpaceId' => '<string>', // REQUIRED
    'integrationId' => '<string>',
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'resourceType' => 'CODE_REPOSITORY|DOCUMENT',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to list integrated resources for.

integrationId
Type: string

The unique identifier of the integration to filter by.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

resourceType
Type: string

The type of resource to filter by.

Result Syntax

[
    'integratedResourceSummaries' => [
        [
            'capabilities' => [
                'bitbucket' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
                'confluence' => [
                    'createDocument' => true || false,
                    'fetchDocument' => true || false,
                    'updateDocument' => true || false,
                ],
                'github' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
                'gitlab' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
            ],
            'integrationId' => '<string>',
            'resource' => [
                'bitbucketRepository' => [
                    'accessType' => 'PRIVATE|PUBLIC',
                    'name' => '<string>',
                    'providerResourceId' => '<string>',
                    'workspace' => '<string>',
                ],
                'confluenceDocument' => [
                    'name' => '<string>',
                    'pageId' => '<string>',
                    'providerResourceId' => '<string>',
                    'spaceKey' => '<string>',
                    'spaceTitle' => '<string>',
                    'title' => '<string>',
                ],
                'githubRepository' => [
                    'accessType' => 'PRIVATE|PUBLIC',
                    'name' => '<string>',
                    'owner' => '<string>',
                    'providerResourceId' => '<string>',
                ],
                'gitlabRepository' => [
                    'accessType' => 'PRIVATE|PUBLIC',
                    'name' => '<string>',
                    'namespace' => '<string>',
                    'providerResourceId' => '<string>',
                ],
            ],
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
integratedResourceSummaries
Required: Yes
Type: Array of IntegratedResourceSummary structures

The list of integrated resource summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ValidationException:

The input fails to satisfy the constraints specified by the service.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ListIntegrations

$result = $client->listIntegrations([/* ... */]);
$promise = $client->listIntegrationsAsync([/* ... */]);

Lists the integrations in your account, optionally filtered by provider or provider type.

Parameter Syntax

$result = $client->listIntegrations([
    'filter' => [
        'provider' => 'GITHUB|GITLAB|BITBUCKET|CONFLUENCE',
        'providerType' => 'SOURCE_CODE|DOCUMENTATION',
    ],
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
filter
Type: IntegrationFilter structure

A filter to apply to the list of integrations.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'integrationSummaries' => [
        [
            'displayName' => '<string>',
            'installationId' => '<string>',
            'integrationId' => '<string>',
            'privateConnectionName' => '<string>',
            'provider' => 'GITHUB|GITLAB|BITBUCKET|CONFLUENCE',
            'providerType' => 'SOURCE_CODE|DOCUMENTATION',
            'targetUrl' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
integrationSummaries
Required: Yes
Type: Array of IntegrationSummary structures

The list of integration summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ValidationException:

The input fails to satisfy the constraints specified by the service.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ListMemberships

$result = $client->listMemberships([/* ... */]);
$promise = $client->listMembershipsAsync([/* ... */]);

Returns a paginated list of membership summaries for the specified agent space within an application.

Parameter Syntax

$result = $client->listMemberships([
    'agentSpaceId' => '<string>', // REQUIRED
    'applicationId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'memberType' => 'USER|ALL',
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to list memberships for.

applicationId
Required: Yes
Type: string

The unique identifier of the application that contains the agent space.

maxResults
Type: int

The maximum number of results to return in a single call.

memberType
Type: string

Filter memberships by member type.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'membershipSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'applicationId' => '<string>',
            'config' => [
                'user' => [
                    'role' => 'MEMBER',
                ],
            ],
            'createdAt' => <DateTime>,
            'createdBy' => '<string>',
            'memberType' => 'USER',
            'membershipId' => '<string>',
            'metadata' => [
                'user' => [
                    'email' => '<string>',
                    'username' => '<string>',
                ],
            ],
            'updatedAt' => <DateTime>,
            'updatedBy' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Members
membershipSummaries
Required: Yes
Type: Array of MembershipSummary structures

The list of membership summaries.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Errors

There are no errors described for this operation.

ListPentestJobTasks

$result = $client->listPentestJobTasks([/* ... */]);
$promise = $client->listPentestJobTasksAsync([/* ... */]);

Returns a paginated list of task summaries for the specified pentest job, optionally filtered by step name or category.

Parameter Syntax

$result = $client->listPentestJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'categoryName' => '<string>',
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'pentestJobId' => '<string>',
    'stepName' => 'PREFLIGHT|STATIC_ANALYSIS|PENTEST|FINALIZING|VALIDATION',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

categoryName
Type: string

Filter tasks by category name.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

pentestJobId
Type: string

The unique identifier of the pentest job to list tasks for.

stepName
Type: string

Filter tasks by step name. Valid values include PREFLIGHT, STATIC_ANALYSIS, PENTEST, VALIDATION, and FINALIZING.

Result Syntax

[
    'nextToken' => '<string>',
    'taskSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'riskType' => 'CROSS_SITE_SCRIPTING|DEFAULT_CREDENTIALS|INSECURE_DIRECT_OBJECT_REFERENCE|PRIVILEGE_ESCALATION|SERVER_SIDE_TEMPLATE_INJECTION|COMMAND_INJECTION|CODE_INJECTION|SQL_INJECTION|ARBITRARY_FILE_UPLOAD|INSECURE_DESERIALIZATION|LOCAL_FILE_INCLUSION|INFORMATION_DISCLOSURE|PATH_TRAVERSAL|SERVER_SIDE_REQUEST_FORGERY|JSON_WEB_TOKEN_VULNERABILITIES|XML_EXTERNAL_ENTITY|FILE_DELETION|OTHER|GRAPHQL_VULNERABILITIES|BUSINESS_LOGIC_VULNERABILITIES|CRYPTOGRAPHIC_VULNERABILITIES|DENIAL_OF_SERVICE|FILE_ACCESS|FILE_CREATION|DATABASE_MODIFICATION|DATABASE_ACCESS|OUTBOUND_SERVICE_REQUEST|UNKNOWN',
            'taskId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

taskSummaries
Type: Array of TaskSummary structures

The list of task summaries.

Errors

There are no errors described for this operation.

ListPentestJobsForPentest

$result = $client->listPentestJobsForPentest([/* ... */]);
$promise = $client->listPentestJobsForPentestAsync([/* ... */]);

Returns a paginated list of pentest job summaries for the specified pentest configuration.

Parameter Syntax

$result = $client->listPentestJobsForPentest([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'pentestId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

pentestId
Required: Yes
Type: string

The unique identifier of the pentest to list jobs for.

Result Syntax

[
    'nextToken' => '<string>',
    'pentestJobSummaries' => [
        [
            'createdAt' => <DateTime>,
            'pentestId' => '<string>',
            'pentestJobId' => '<string>',
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

pentestJobSummaries
Type: Array of PentestJobSummary structures

The list of pentest job summaries.

Errors

There are no errors described for this operation.

ListPentests

$result = $client->listPentests([/* ... */]);
$promise = $client->listPentestsAsync([/* ... */]);

Returns a paginated list of pentest summaries for the specified agent space.

Parameter Syntax

$result = $client->listPentests([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to list pentests for.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'nextToken' => '<string>',
    'pentestSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'pentestId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

pentestSummaries
Type: Array of PentestSummary structures

The list of pentest summaries.

Errors

There are no errors described for this operation.

ListPrivateConnections

$result = $client->listPrivateConnections([/* ... */]);
$promise = $client->listPrivateConnectionsAsync([/* ... */]);

Lists the private connections in your account.

Parameter Syntax

$result = $client->listPrivateConnections([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
maxResults
Type: int

The maximum number of private connections to return in a single response.

nextToken
Type: string

The token for the next page of results.

Result Syntax

[
    'nextToken' => '<string>',
    'privateConnections' => [
        [
            'certificateExpiryTime' => <DateTime>,
            'dnsResolution' => 'PUBLIC|IN_VPC',
            'failureMessage' => '<string>',
            'hostAddress' => '<string>',
            'name' => '<string>',
            'resourceConfigurationId' => '<string>',
            'resourceGatewayId' => '<string>',
            'status' => 'ACTIVE|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_IN_PROGRESS|DELETE_FAILED',
            'tags' => ['<string>', ...],
            'type' => 'SERVICE_MANAGED|SELF_MANAGED',
            'vpcId' => '<string>',
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

The token to use to retrieve the next page of results, if more results are available.

privateConnections
Required: Yes
Type: Array of PrivateConnectionSummary structures

The list of private connections.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ListSecurityRequirementPacks

$result = $client->listSecurityRequirementPacks([/* ... */]);
$promise = $client->listSecurityRequirementPacksAsync([/* ... */]);

Lists all security requirement packs in the caller's account.

Parameter Syntax

$result = $client->listSecurityRequirementPacks([
    'filter' => [
        'managementType' => 'AWS_MANAGED|CUSTOMER_MANAGED',
        'status' => 'ENABLED|DISABLED',
    ],
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
filter

The filter criteria for listing security requirement packs.

maxResults
Type: int

The maximum number of results to return in a single request.

nextToken
Type: string

The pagination token from a previous request to retrieve the next page of results.

Result Syntax

[
    'nextToken' => '<string>',
    'securityRequirementPackSummaries' => [
        [
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'managementType' => 'AWS_MANAGED|CUSTOMER_MANAGED',
            'name' => '<string>',
            'packId' => '<string>',
            'status' => 'ENABLED|DISABLED',
            'updatedAt' => <DateTime>,
            'vendorName' => '<string>',
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

The pagination token to use in a subsequent request to retrieve the next page of results.

securityRequirementPackSummaries
Required: Yes
Type: Array of SecurityRequirementPackSummary structures

The list of security requirement pack summaries.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ListSecurityRequirements

$result = $client->listSecurityRequirements([/* ... */]);
$promise = $client->listSecurityRequirementsAsync([/* ... */]);

Lists security requirements within a pack.

Parameter Syntax

$result = $client->listSecurityRequirements([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'packId' => '<string>', // REQUIRED
]);

Parameter Details

Members
maxResults
Type: int

The maximum number of results to return in a single request.

nextToken
Type: string

The pagination token from a previous request to retrieve the next page of results.

packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to list requirements for.

Result Syntax

[
    'nextToken' => '<string>',
    'securityRequirementSummaries' => [
        [
            'createdAt' => <DateTime>,
            'description' => '<string>',
            'name' => '<string>',
            'packId' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

The pagination token to use in a subsequent request to retrieve the next page of results.

securityRequirementSummaries
Required: Yes
Type: Array of SecurityRequirementSummary structures

The list of security requirement summaries.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

ListTagsForResource

$result = $client->listTagsForResource([/* ... */]);
$promise = $client->listTagsForResourceAsync([/* ... */]);

Returns the tags associated with the specified resource.

Parameter Syntax

$result = $client->listTagsForResource([
    'resourceArn' => '<string>', // REQUIRED
]);

Parameter Details

Members
resourceArn
Required: Yes
Type: string

The Amazon Resource Name (ARN) of the resource to list tags for.

Result Syntax

[
    'tags' => ['<string>', ...],
]

Result Details

Members
tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags associated with the resource.

Errors

There are no errors described for this operation.

ListTargetDomains

$result = $client->listTargetDomains([/* ... */]);
$promise = $client->listTargetDomainsAsync([/* ... */]);

Returns a paginated list of target domain summaries in your account.

Parameter Syntax

$result = $client->listTargetDomains([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

Result Syntax

[
    'nextToken' => '<string>',
    'targetDomainSummaries' => [
        [
            'domainName' => '<string>',
            'targetDomainId' => '<string>',
            'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

targetDomainSummaries
Type: Array of TargetDomainSummary structures

The list of target domain summaries.

Errors

There are no errors described for this operation.

ListThreatModelJobTasks

$result = $client->listThreatModelJobTasks([/* ... */]);
$promise = $client->listThreatModelJobTasksAsync([/* ... */]);

Returns a paginated list of task summaries for the specified threat model job.

Parameter Syntax

$result = $client->listThreatModelJobTasks([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'threatModelJobId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response.

threatModelJobId
Required: Yes
Type: string

The unique identifier of the threat model job to list tasks for.

Result Syntax

[
    'nextToken' => '<string>',
    'threatModelJobTaskSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'executionStatus' => 'IN_PROGRESS|ABORTED|COMPLETED|INTERNAL_ERROR|FAILED',
            'taskId' => '<string>',
            'threatModelId' => '<string>',
            'threatModelJobId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response.

threatModelJobTaskSummaries
Type: Array of ThreatModelJobTaskSummary structures

The list of threat model job task summaries.

Errors

There are no errors described for this operation.

ListThreatModelJobs

$result = $client->listThreatModelJobs([/* ... */]);
$promise = $client->listThreatModelJobsAsync([/* ... */]);

Returns a paginated list of threat model job summaries for the specified threat model.

Parameter Syntax

$result = $client->listThreatModelJobs([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'threatModelId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response.

threatModelId
Required: Yes
Type: string

The unique identifier of the threat model to list jobs for.

Result Syntax

[
    'nextToken' => '<string>',
    'threatModelJobSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
            'threatModelId' => '<string>',
            'threatModelJobId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response.

threatModelJobSummaries
Type: Array of ThreatModelJobSummary structures

The list of threat model job summaries.

Errors

There are no errors described for this operation.

ListThreatModels

$result = $client->listThreatModels([/* ... */]);
$promise = $client->listThreatModelsAsync([/* ... */]);

Returns a paginated list of threat model summaries for the specified agent space.

Parameter Syntax

$result = $client->listThreatModels([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to list threat models for.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response.

Result Syntax

[
    'nextToken' => '<string>',
    'threatModelSummaries' => [
        [
            'agentSpaceId' => '<string>',
            'createdAt' => <DateTime>,
            'threatModelId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response.

threatModelSummaries
Type: Array of ThreatModelSummary structures

The list of threat model summaries.

Errors

There are no errors described for this operation.

ListThreats

$result = $client->listThreats([/* ... */]);
$promise = $client->listThreatsAsync([/* ... */]);

Returns a paginated list of threats for a threat model job.

Parameter Syntax

$result = $client->listThreats([
    'agentSpaceId' => '<string>', // REQUIRED
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'threatJobId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

maxResults
Type: int

The maximum number of results to return in a single call.

nextToken
Type: string

A token to use for paginating results that are returned in the response.

threatJobId
Required: Yes
Type: string

The unique identifier of the threat model job to list threats for.

Result Syntax

[
    'nextToken' => '<string>',
    'threats' => [
        [
            'createdAt' => <DateTime>,
            'createdBy' => 'CUSTOMER|AGENT',
            'severity' => 'CRITICAL|HIGH|MEDIUM|LOW|INFO',
            'statement' => '<string>',
            'status' => 'OPEN|RESOLVED|DISMISSED',
            'stride' => ['<string>', ...],
            'threatId' => '<string>',
            'threatJobId' => '<string>',
            'title' => '<string>',
            'updatedAt' => <DateTime>,
            'updatedBy' => 'CUSTOMER|AGENT',
        ],
        // ...
    ],
]

Result Details

Members
nextToken
Type: string

A token to use for paginating results that are returned in the response.

threats
Type: Array of ThreatSummary structures

The list of threat summaries.

Errors

There are no errors described for this operation.

StartCodeRemediation

$result = $client->startCodeRemediation([/* ... */]);
$promise = $client->startCodeRemediationAsync([/* ... */]);

Initiates code remediation for one or more security findings. This creates pull requests in integrated repositories to fix the identified vulnerabilities.

Parameter Syntax

$result = $client->startCodeRemediation([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewJobId' => '<string>',
    'findingIds' => ['<string>', ...], // REQUIRED
    'pentestJobId' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

codeReviewJobId
Type: string

The unique identifier of the code review job that produced the findings. Mutually exclusive with pentestJobId.

findingIds
Required: Yes
Type: Array of strings

The list of finding identifiers to initiate code remediation for.

pentestJobId
Type: string

The unique identifier of the pentest job that produced the findings. Mutually exclusive with codeReviewJobId.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

StartCodeReviewJob

$result = $client->startCodeReviewJob([/* ... */]);
$promise = $client->startCodeReviewJobAsync([/* ... */]);

Starts a new code review job for a code review configuration. The job executes the security-focused code analysis defined in the code review.

Parameter Syntax

$result = $client->startCodeReviewJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewId' => '<string>', // REQUIRED
    'diffSource' => [
        's3Uri' => '<string>',
    ],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

codeReviewId
Required: Yes
Type: string

The unique identifier of the code review to start a job for.

diffSource
Type: DiffSource structure

Source of the diff for a differential scan. When present, the job analyzes only the changed lines instead of performing a full scan.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'codeReviewId' => '<string>',
    'codeReviewJobId' => '<string>',
    'createdAt' => <DateTime>,
    'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

codeReviewId
Required: Yes
Type: string

The unique identifier of the code review.

codeReviewJobId
Required: Yes
Type: string

The unique identifier of the started code review job.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review job was created, in UTC format.

status
Type: string

The current status of the code review job.

title
Type: string

The title of the code review job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review job was last updated, in UTC format.

Errors

There are no errors described for this operation.

StartPentestJob

$result = $client->startPentestJob([/* ... */]);
$promise = $client->startPentestJobAsync([/* ... */]);

Starts a new pentest job for a pentest configuration. The job executes the security tests defined in the pentest.

Parameter Syntax

$result = $client->startPentestJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

pentestId
Required: Yes
Type: string

The unique identifier of the pentest to start a job for.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'createdAt' => <DateTime>,
    'pentestId' => '<string>',
    'pentestJobId' => '<string>',
    'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest job was created, in UTC format.

pentestId
Type: string

The unique identifier of the pentest.

pentestJobId
Type: string

The unique identifier of the started pentest job.

status
Type: string

The current status of the pentest job.

title
Type: string

The title of the pentest job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest job was last updated, in UTC format.

Errors

There are no errors described for this operation.

StartThreatModelJob

$result = $client->startThreatModelJob([/* ... */]);
$promise = $client->startThreatModelJobAsync([/* ... */]);

Starts a new threat model job for a threat model configuration.

Parameter Syntax

$result = $client->startThreatModelJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'threatModelId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

threatModelId
Required: Yes
Type: string

The unique identifier of the threat model to start a job for.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'createdAt' => <DateTime>,
    'status' => 'IN_PROGRESS|STOPPING|STOPPED|FAILED|COMPLETED',
    'threatModelId' => '<string>',
    'threatModelJobId' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job was created, in UTC format.

status
Type: string

The current status of the threat model job.

threatModelId
Type: string

The unique identifier of the threat model.

threatModelJobId
Required: Yes
Type: string

The unique identifier of the started threat model job.

title
Type: string

The title of the threat model job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job was last updated, in UTC format.

Errors

There are no errors described for this operation.

StopCodeReviewJob

$result = $client->stopCodeReviewJob([/* ... */]);
$promise = $client->stopCodeReviewJobAsync([/* ... */]);

Stops a running code review job. The job transitions to a stopping state and then to stopped after cleanup completes.

Parameter Syntax

$result = $client->stopCodeReviewJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'codeReviewJobId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

codeReviewJobId
Required: Yes
Type: string

The unique identifier of the code review job to stop.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

StopPentestJob

$result = $client->stopPentestJob([/* ... */]);
$promise = $client->stopPentestJobAsync([/* ... */]);

Stops a running pentest job. The job transitions to a stopping state and then to stopped after cleanup completes.

Parameter Syntax

$result = $client->stopPentestJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'pentestJobId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

pentestJobId
Required: Yes
Type: string

The unique identifier of the pentest job to stop.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

StopThreatModelJob

$result = $client->stopThreatModelJob([/* ... */]);
$promise = $client->stopThreatModelJobAsync([/* ... */]);

Stops a running threat model job.

Parameter Syntax

$result = $client->stopThreatModelJob([
    'agentSpaceId' => '<string>', // REQUIRED
    'threatModelJobId' => '<string>', // REQUIRED
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

threatModelJobId
Required: Yes
Type: string

The unique identifier of the threat model job to stop.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

TagResource

$result = $client->tagResource([/* ... */]);
$promise = $client->tagResourceAsync([/* ... */]);

Adds tags to a resource.

Parameter Syntax

$result = $client->tagResource([
    'resourceArn' => '<string>', // REQUIRED
    'tags' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
resourceArn
Required: Yes
Type: string

The Amazon Resource Name (ARN) of the resource to tag.

tags
Required: Yes
Type: Associative array of custom strings keys (TagKey) to strings

The tags to add to the resource.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

UntagResource

$result = $client->untagResource([/* ... */]);
$promise = $client->untagResourceAsync([/* ... */]);

Removes tags from a resource.

Parameter Syntax

$result = $client->untagResource([
    'resourceArn' => '<string>', // REQUIRED
    'tagKeys' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Members
resourceArn
Required: Yes
Type: string

The Amazon Resource Name (ARN) of the resource to remove tags from.

tagKeys
Required: Yes
Type: Array of strings

The list of tag keys to remove from the resource.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

UpdateAgentSpace

$result = $client->updateAgentSpace([/* ... */]);
$promise = $client->updateAgentSpaceAsync([/* ... */]);

Updates the configuration of an existing agent space, including its name, description, AWS resources, target domains, and code review settings.

Parameter Syntax

$result = $client->updateAgentSpace([
    'agentSpaceId' => '<string>', // REQUIRED
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false, // REQUIRED
        'generalPurposeScanning' => true || false, // REQUIRED
    ],
    'description' => '<string>',
    'name' => '<string>',
    'targetDomainIds' => ['<string>', ...],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space to update.

awsResources
Type: AWSResources structure

The updated AWS resources to associate with the agent space.

codeReviewSettings
Type: CodeReviewSettings structure

The updated code review settings for the agent space.

description
Type: string

The updated description of the agent space.

name
Type: string

The updated name of the agent space.

targetDomainIds
Type: Array of strings

The updated list of target domain identifiers to associate with the agent space.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'awsResources' => [
        'iamRoles' => ['<string>', ...],
        'lambdaFunctionArns' => ['<string>', ...],
        'logGroups' => ['<string>', ...],
        's3Buckets' => ['<string>', ...],
        'secretArns' => ['<string>', ...],
        'vpcs' => [
            [
                'securityGroupArns' => ['<string>', ...],
                'subnetArns' => ['<string>', ...],
                'vpcArn' => '<string>',
            ],
            // ...
        ],
    ],
    'codeReviewSettings' => [
        'controlsScanning' => true || false,
        'generalPurposeScanning' => true || false,
    ],
    'createdAt' => <DateTime>,
    'description' => '<string>',
    'name' => '<string>',
    'targetDomainIds' => ['<string>', ...],
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the updated agent space.

awsResources
Type: AWSResources structure

The AWS resources associated with the agent space.

codeReviewSettings
Type: CodeReviewSettings structure

The code review settings for the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was created, in UTC format.

description
Type: string

The description of the agent space.

name
Required: Yes
Type: string

The name of the agent space.

targetDomainIds
Type: Array of strings

The list of target domain identifiers associated with the agent space.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was last updated, in UTC format.

Errors

There are no errors described for this operation.

UpdateApplication

$result = $client->updateApplication([/* ... */]);
$promise = $client->updateApplicationAsync([/* ... */]);

Updates the configuration of an existing application, including the IAM role and default KMS key.

Parameter Syntax

$result = $client->updateApplication([
    'applicationId' => '<string>', // REQUIRED
    'defaultKmsKeyId' => '<string>',
    'roleArn' => '<string>',
]);

Parameter Details

Members
applicationId
Required: Yes
Type: string

The unique identifier of the application to update.

defaultKmsKeyId
Type: string

The updated identifier of the default AWS KMS key for the application.

roleArn
Type: string

The updated Amazon Resource Name (ARN) of the IAM role for the application.

Result Syntax

[
    'applicationId' => '<string>',
]

Result Details

Members
applicationId
Required: Yes
Type: string

The unique identifier of the updated application.

Errors

There are no errors described for this operation.

UpdateCodeReview

$result = $client->updateCodeReview([/* ... */]);
$promise = $client->updateCodeReviewAsync([/* ... */]);

Updates an existing code review configuration.

Parameter Syntax

$result = $client->updateCodeReview([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>', // REQUIRED
                    'resourceId' => '<string>', // REQUIRED
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'codeReviewId' => '<string>', // REQUIRED
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'serviceRole' => '<string>',
    'title' => '<string>',
    'validationMode' => 'DISABLED|SIMULATED',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the code review.

assets
Type: Assets structure

The updated assets for the code review.

codeRemediationStrategy
Type: string

The updated code remediation strategy for the code review.

codeReviewId
Required: Yes
Type: string

The unique identifier of the code review to update.

logConfig
Type: CloudWatchLog structure

The updated CloudWatch Logs configuration for the code review.

serviceRole
Type: string

The updated IAM service role for the code review.

title
Type: string

The updated title of the code review.

validationMode
Type: string

The updated validation mode for the code review. Valid values are SIMULATED and DISABLED.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>',
                    'resourceId' => '<string>',
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'codeReviewId' => '<string>',
    'createdAt' => <DateTime>,
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'serviceRole' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
    'validationMode' => 'DISABLED|SIMULATED',
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space that contains the code review.

assets
Type: Assets structure

The assets included in the code review.

codeRemediationStrategy
Type: string

The code remediation strategy for the code review.

codeReviewId
Required: Yes
Type: string

The unique identifier of the code review.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was created, in UTC format.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the code review.

serviceRole
Type: string

The IAM service role used for the code review.

title
Type: string

The title of the code review.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was last updated, in UTC format.

validationMode
Type: string

The validation mode for the code review.

Errors

There are no errors described for this operation.

UpdateFinding

$result = $client->updateFinding([/* ... */]);
$promise = $client->updateFindingAsync([/* ... */]);

Updates the status or risk level of a security finding.

Parameter Syntax

$result = $client->updateFinding([
    'agentSpaceId' => '<string>', // REQUIRED
    'attackScript' => '<string>',
    'customerNote' => '<string>',
    'description' => '<string>',
    'findingId' => '<string>', // REQUIRED
    'name' => '<string>',
    'reasoning' => '<string>',
    'riskLevel' => 'UNKNOWN|INFORMATIONAL|LOW|MEDIUM|HIGH|CRITICAL',
    'riskScore' => '<string>',
    'riskType' => '<string>',
    'status' => 'ACTIVE|RESOLVED|ACCEPTED|FALSE_POSITIVE',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the finding.

attackScript
Type: string

The updated attack script for the finding.

customerNote
Type: string

A customer-provided note on the finding.

description
Type: string

The updated description for the finding.

findingId
Required: Yes
Type: string

The unique identifier of the finding to update.

name
Type: string

The updated name for the finding.

reasoning
Type: string

The updated reasoning for the finding.

riskLevel
Type: string

The updated risk level for the finding.

riskScore
Type: string

The updated numerical risk score for the finding.

riskType
Type: string

The updated risk type for the finding.

status
Type: string

The updated status for the finding.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

There are no errors described for this operation.

UpdateIntegratedResources

$result = $client->updateIntegratedResources([/* ... */]);
$promise = $client->updateIntegratedResourcesAsync([/* ... */]);

Updates the integrated resources for an agent space, including their capabilities.

Parameter Syntax

$result = $client->updateIntegratedResources([
    'agentSpaceId' => '<string>', // REQUIRED
    'integrationId' => '<string>', // REQUIRED
    'items' => [ // REQUIRED
        [
            'capabilities' => [
                'bitbucket' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
                'confluence' => [
                    'createDocument' => true || false,
                    'fetchDocument' => true || false,
                    'updateDocument' => true || false,
                ],
                'github' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
                'gitlab' => [
                    'leaveComments' => true || false,
                    'remediateCode' => true || false,
                ],
            ],
            'resource' => [ // REQUIRED
                'bitbucketRepository' => [
                    'name' => '<string>', // REQUIRED
                    'workspace' => '<string>', // REQUIRED
                ],
                'confluenceDocument' => [
                    'name' => '<string>', // REQUIRED
                    'pageId' => '<string>', // REQUIRED
                    'spaceKey' => '<string>', // REQUIRED
                    'spaceTitle' => '<string>',
                    'title' => '<string>',
                ],
                'githubRepository' => [
                    'name' => '<string>', // REQUIRED
                    'owner' => '<string>', // REQUIRED
                ],
                'gitlabRepository' => [
                    'name' => '<string>', // REQUIRED
                    'namespace' => '<string>', // REQUIRED
                ],
            ],
        ],
        // ...
    ],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

integrationId
Required: Yes
Type: string

The unique identifier of the integration.

items
Required: Yes
Type: Array of IntegratedResourceInputItem structures

The list of integrated resource items to update.

Result Syntax

[]

Result Details

The results for this operation are always empty.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

UpdatePentest

$result = $client->updatePentest([/* ... */]);
$promise = $client->updatePentestAsync([/* ... */]);

Updates an existing pentest configuration.

Parameter Syntax

$result = $client->updatePentest([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>', // REQUIRED
                    'resourceId' => '<string>', // REQUIRED
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'codeRemediationStrategy' => 'AUTOMATIC|DISABLED',
    'disableManagedSkills' => ['<string>', ...],
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'networkTrafficConfig' => [
        'customHeaders' => [
            [
                'name' => '<string>',
                'value' => '<string>',
            ],
            // ...
        ],
        'rules' => [
            [
                'effect' => 'ALLOW|DENY',
                'networkTrafficRuleType' => 'URL',
                'pattern' => '<string>',
            ],
            // ...
        ],
    ],
    'pentestId' => '<string>', // REQUIRED
    'serviceRole' => '<string>',
    'title' => '<string>',
    'vpcConfig' => [
        'securityGroupArns' => ['<string>', ...],
        'subnetArns' => ['<string>', ...],
        'vpcArn' => '<string>',
    ],
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the pentest.

assets
Type: Assets structure

The updated assets for the pentest.

codeRemediationStrategy
Type: string

The updated code remediation strategy for the pentest.

disableManagedSkills
Type: Array of strings

The updated list of managed skills to disable for this pentest. Valid values include FINDING_PERSONALIZATION and LOGIN_OPTIMIZATION.

excludeRiskTypes
Type: Array of strings

The updated list of risk types to exclude from the pentest.

logConfig
Type: CloudWatchLog structure

The updated CloudWatch Logs configuration for the pentest.

networkTrafficConfig
Type: NetworkTrafficConfig structure

The updated network traffic configuration for the pentest.

pentestId
Required: Yes
Type: string

The unique identifier of the pentest to update.

serviceRole
Type: string

The updated IAM service role for the pentest.

title
Type: string

The updated title of the pentest.

vpcConfig
Type: VpcConfig structure

The updated VPC configuration for the pentest.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>',
                    'resourceId' => '<string>',
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'createdAt' => <DateTime>,
    'excludeRiskTypes' => ['<string>', ...],
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'pentestId' => '<string>',
    'serviceRole' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space that contains the pentest.

assets
Type: Assets structure

The assets included in the pentest.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was created, in UTC format.

excludeRiskTypes
Type: Array of strings

The list of risk types excluded from the pentest.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the pentest.

pentestId
Type: string

The unique identifier of the pentest.

serviceRole
Type: string

The IAM service role used for the pentest.

title
Type: string

The title of the pentest.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was last updated, in UTC format.

Errors

There are no errors described for this operation.

UpdatePrivateConnectionCertificate

$result = $client->updatePrivateConnectionCertificate([/* ... */]);
$promise = $client->updatePrivateConnectionCertificateAsync([/* ... */]);

Updates the certificate associated with a private connection. Certificates can be added or replaced but not removed.

Parameter Syntax

$result = $client->updatePrivateConnectionCertificate([
    'certificate' => '<string>', // REQUIRED
    'privateConnectionName' => '<string>', // REQUIRED
]);

Parameter Details

Members
certificate
Required: Yes
Type: string

The PEM-encoded certificate chain for the private connection.

privateConnectionName
Required: Yes
Type: string

The name of the private connection to update.

Result Syntax

[
    'certificateExpiryTime' => <DateTime>,
    'dnsResolution' => 'PUBLIC|IN_VPC',
    'failureMessage' => '<string>',
    'hostAddress' => '<string>',
    'name' => '<string>',
    'resourceConfigurationId' => '<string>',
    'resourceGatewayId' => '<string>',
    'status' => 'ACTIVE|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_IN_PROGRESS|DELETE_FAILED',
    'tags' => ['<string>', ...],
    'type' => 'SERVICE_MANAGED|SELF_MANAGED',
    'vpcId' => '<string>',
]

Result Details

Members
certificateExpiryTime
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the connection's certificate expires, in UTC format.

dnsResolution
Type: string

The DNS resolution mode for the resource gateway.

failureMessage
Type: string

A message describing why the private connection entered a failed state, if applicable.

hostAddress
Type: string

The IP address or DNS name of the target resource.

name
Required: Yes
Type: string

The name of the private connection.

resourceConfigurationId
Type: string

The identifier or ARN of the VPC Lattice resource configuration.

resourceGatewayId
Type: string

The identifier or ARN of the VPC Lattice resource gateway.

status
Required: Yes
Type: string

The current status of the private connection.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags attached to the private connection.

type
Required: Yes
Type: string

The type of the private connection, indicating whether it is service-managed or self-managed.

vpcId
Type: string

The identifier of the VPC the resource gateway is created in.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

InternalServerException:

An unexpected error occurred during the processing of your request.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

UpdateSecurityRequirementPack

$result = $client->updateSecurityRequirementPack([/* ... */]);
$promise = $client->updateSecurityRequirementPackAsync([/* ... */]);

Updates a security requirement pack. For customer managed packs, both metadata and status can be updated. For AWS managed packs, only status can be updated.

Parameter Syntax

$result = $client->updateSecurityRequirementPack([
    'description' => '<string>',
    'name' => '<string>',
    'packId' => '<string>', // REQUIRED
    'status' => 'ENABLED|DISABLED',
]);

Parameter Details

Members
description
Type: string

The updated description of the security requirement pack.

name
Type: string

The updated name of the security requirement pack.

packId
Required: Yes
Type: string

The unique identifier of the security requirement pack to update.

status
Type: string

The updated status of the security requirement pack.

Result Syntax

[
    'description' => '<string>',
    'name' => '<string>',
    'packId' => '<string>',
    'status' => 'ENABLED|DISABLED',
]

Result Details

Members
description
Type: string

The description of the security requirement pack.

name
Type: string

The name of the security requirement pack.

packId
Required: Yes
Type: string

The unique identifier of the security requirement pack.

status
Type: string

The status of the security requirement pack.

Errors

ValidationException:

The input fails to satisfy the constraints specified by the service.

InternalServerException:

An unexpected error occurred during the processing of your request.

ResourceNotFoundException:

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

ConflictException:

The request could not be completed due to a conflict with the current state of the resource.

ThrottlingException:

The request was denied due to request throttling.

AccessDeniedException:

You do not have sufficient access to perform this action.

UpdateTargetDomain

$result = $client->updateTargetDomain([/* ... */]);
$promise = $client->updateTargetDomainAsync([/* ... */]);

Updates the verification method for a target domain.

Parameter Syntax

$result = $client->updateTargetDomain([
    'targetDomainId' => '<string>', // REQUIRED
    'verificationMethod' => 'DNS_TXT|HTTP_ROUTE|PRIVATE_VPC', // REQUIRED
]);

Parameter Details

Members
targetDomainId
Required: Yes
Type: string

The unique identifier of the target domain to update.

verificationMethod
Required: Yes
Type: string

The updated verification method for the target domain.

Result Syntax

[
    'createdAt' => <DateTime>,
    'domainName' => '<string>',
    'targetDomainId' => '<string>',
    'verificationDetails' => [
        'dnsTxt' => [
            'dnsRecordName' => '<string>',
            'dnsRecordType' => 'TXT',
            'token' => '<string>',
        ],
        'httpRoute' => [
            'routePath' => '<string>',
            'token' => '<string>',
        ],
        'method' => 'DNS_TXT|HTTP_ROUTE|PRIVATE_VPC',
    ],
    'verificationStatus' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
    'verificationStatusReason' => '<string>',
    'verifiedAt' => <DateTime>,
]

Result Details

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was created, in UTC format.

domainName
Required: Yes
Type: string

The domain name of the target domain.

targetDomainId
Required: Yes
Type: string

The unique identifier of the target domain.

verificationDetails
Type: VerificationDetails structure

The updated verification details for the target domain.

verificationStatus
Required: Yes
Type: string

The current verification status of the target domain.

verificationStatusReason
Type: string

The reason for the current target domain verification status.

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was verified, in UTC format.

Errors

There are no errors described for this operation.

UpdateThreat

$result = $client->updateThreat([/* ... */]);
$promise = $client->updateThreatAsync([/* ... */]);

Updates a threat.

Parameter Syntax

$result = $client->updateThreat([
    'agentSpaceId' => '<string>', // REQUIRED
    'anchor' => [
        'id' => '<string>',
        'kind' => '<string>',
        'packageId' => '<string>',
    ],
    'comments' => '<string>',
    'evidence' => [
        [
            'packageId' => '<string>',
            'path' => '<string>',
        ],
        // ...
    ],
    'impactedAssets' => ['<string>', ...],
    'impactedGoal' => ['<string>', ...],
    'prerequisites' => '<string>',
    'recommendation' => '<string>',
    'severity' => 'CRITICAL|HIGH|MEDIUM|LOW|INFO',
    'statement' => '<string>',
    'status' => 'OPEN|RESOLVED|DISMISSED',
    'threatAction' => '<string>',
    'threatId' => '<string>', // REQUIRED
    'threatImpact' => '<string>',
    'threatSource' => '<string>',
    'title' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

anchor
Type: ThreatAnchorShape structure

The updated DFD element this threat is anchored to.

comments
Type: string

Optional customer comment.

evidence
Type: Array of ThreatEvidenceShape structures

The updated source code files supporting the threat.

impactedAssets
Type: Array of strings

The updated list of specific assets affected by the threat.

impactedGoal
Type: Array of strings

The updated security goals affected by the threat.

prerequisites
Type: string

The updated conditions required for the threat to be exploitable.

recommendation
Type: string

The updated recommended mitigation guidance for this threat.

severity
Type: string

The updated severity level of the threat.

statement
Type: string

The updated natural-language threat statement.

status
Type: string

The updated status of the threat.

threatAction
Type: string

The updated description of what the threat source can do.

threatId
Required: Yes
Type: string

The unique identifier of the threat to update.

threatImpact
Type: string

The updated direct consequence of the threat action.

threatSource
Type: string

The updated actor or origin of the threat.

title
Type: string

A short title summarizing the threat.

Result Syntax

[
    'anchor' => [
        'id' => '<string>',
        'kind' => '<string>',
        'packageId' => '<string>',
    ],
    'comments' => '<string>',
    'createdAt' => <DateTime>,
    'createdBy' => 'CUSTOMER|AGENT',
    'evidence' => [
        [
            'packageId' => '<string>',
            'path' => '<string>',
        ],
        // ...
    ],
    'impactedAssets' => ['<string>', ...],
    'impactedGoal' => ['<string>', ...],
    'prerequisites' => '<string>',
    'recommendation' => '<string>',
    'severity' => 'CRITICAL|HIGH|MEDIUM|LOW|INFO',
    'statement' => '<string>',
    'status' => 'OPEN|RESOLVED|DISMISSED',
    'stride' => ['<string>', ...],
    'threatAction' => '<string>',
    'threatId' => '<string>',
    'threatImpact' => '<string>',
    'threatJobId' => '<string>',
    'threatSource' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
    'updatedBy' => 'CUSTOMER|AGENT',
]

Result Details

Members
anchor
Type: ThreatAnchorShape structure

The DFD element this threat is anchored to.

comments
Type: string

Optional customer comment on the threat.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was created, in UTC format.

createdBy
Type: string

Who created this threat.

evidence
Type: Array of ThreatEvidenceShape structures

The source code files supporting the threat.

impactedAssets
Type: Array of strings

The specific assets affected by the threat.

impactedGoal
Type: Array of strings

The security goals affected by the threat.

prerequisites
Type: string

The conditions required for the threat to be exploitable.

recommendation
Type: string

The recommended mitigation guidance for this threat.

severity
Type: string

The severity level of the threat.

statement
Type: string

The natural-language threat statement.

status
Type: string

The current status of the threat.

stride
Type: Array of strings

The STRIDE categories applicable to this threat.

threatAction
Type: string

What the threat source can do.

threatId
Required: Yes
Type: string

The unique identifier of the threat.

threatImpact
Type: string

The direct consequence of the threat action.

threatJobId
Required: Yes
Type: string

The unique identifier of the threat model job the threat belongs to.

threatSource
Type: string

The actor or origin of the threat.

title
Type: string

A short title summarizing the threat.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was last updated, in UTC format.

updatedBy
Type: string

Who last updated this threat.

Errors

There are no errors described for this operation.

UpdateThreatModel

$result = $client->updateThreatModel([/* ... */]);
$promise = $client->updateThreatModelAsync([/* ... */]);

Updates an existing threat model configuration.

Parameter Syntax

$result = $client->updateThreatModel([
    'agentSpaceId' => '<string>', // REQUIRED
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>', // REQUIRED
                    'resourceId' => '<string>', // REQUIRED
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>', // REQUIRED
                'providerResourceId' => '<string>', // REQUIRED
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'description' => '<string>',
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'scopeDocs' => [
        [
            'artifactId' => '<string>',
            'integratedDocument' => [
                'integrationId' => '<string>', // REQUIRED
                'resourceId' => '<string>', // REQUIRED
            ],
            's3Location' => '<string>',
        ],
        // ...
    ],
    'serviceRole' => '<string>',
    'threatModelId' => '<string>', // REQUIRED
    'title' => '<string>',
]);

Parameter Details

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the threat model.

assets
Type: Assets structure

The updated assets for the threat model.

description
Type: string

The updated description of the application or system being threat modeled.

logConfig
Type: CloudWatchLog structure

The updated CloudWatch Logs configuration for the threat model.

scopeDocs
Type: Array of DocumentInfo structures

The updated scoped documents for the agent to focus on during threat modeling.

serviceRole
Type: string

The updated IAM service role for the threat model.

threatModelId
Required: Yes
Type: string

The unique identifier of the threat model to update.

title
Type: string

The updated title of the threat model.

Result Syntax

[
    'agentSpaceId' => '<string>',
    'assets' => [
        'actors' => [
            [
                'authentication' => [
                    'providerType' => 'SECRETS_MANAGER|AWS_LAMBDA|AWS_IAM_ROLE|AWS_INTERNAL',
                    'value' => '<string>',
                ],
                'description' => '<string>',
                'identifier' => '<string>',
                'uris' => ['<string>', ...],
            ],
            // ...
        ],
        'documents' => [
            [
                'artifactId' => '<string>',
                'integratedDocument' => [
                    'integrationId' => '<string>',
                    'resourceId' => '<string>',
                ],
                's3Location' => '<string>',
            ],
            // ...
        ],
        'endpoints' => [
            [
                'uri' => '<string>',
            ],
            // ...
        ],
        'integratedRepositories' => [
            [
                'integrationId' => '<string>',
                'providerResourceId' => '<string>',
            ],
            // ...
        ],
        'sourceCode' => [
            [
                's3Location' => '<string>',
            ],
            // ...
        ],
    ],
    'createdAt' => <DateTime>,
    'description' => '<string>',
    'logConfig' => [
        'logGroup' => '<string>',
        'logStream' => '<string>',
    ],
    'scopeDocs' => [
        [
            'artifactId' => '<string>',
            'integratedDocument' => [
                'integrationId' => '<string>',
                'resourceId' => '<string>',
            ],
            's3Location' => '<string>',
        ],
        // ...
    ],
    'serviceRole' => '<string>',
    'threatModelId' => '<string>',
    'title' => '<string>',
    'updatedAt' => <DateTime>,
]

Result Details

Members
agentSpaceId
Type: string

The unique identifier of the agent space that contains the threat model.

assets
Type: Assets structure

The assets included in the threat model.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was created, in UTC format.

description
Type: string

A description of the application or system being threat modeled.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the threat model.

scopeDocs
Type: Array of DocumentInfo structures

The scoped documents for the agent to focus on during threat modeling.

serviceRole
Type: string

The IAM service role used for the threat model.

threatModelId
Required: Yes
Type: string

The unique identifier of the threat model.

title
Type: string

The title of the threat model.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was last updated, in UTC format.

Errors

There are no errors described for this operation.

VerifyTargetDomain

$result = $client->verifyTargetDomain([/* ... */]);
$promise = $client->verifyTargetDomainAsync([/* ... */]);

Initiates verification of a target domain. This checks whether the domain ownership verification token has been properly configured.

Parameter Syntax

$result = $client->verifyTargetDomain([
    'targetDomainId' => '<string>', // REQUIRED
]);

Parameter Details

Members
targetDomainId
Required: Yes
Type: string

The unique identifier of the target domain to verify.

Result Syntax

[
    'createdAt' => <DateTime>,
    'domainName' => '<string>',
    'status' => 'PENDING|VERIFIED|FAILED|UNREACHABLE',
    'targetDomainId' => '<string>',
    'updatedAt' => <DateTime>,
    'verificationStatusReason' => '<string>',
    'verifiedAt' => <DateTime>,
]

Result Details

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was created, in UTC format.

domainName
Type: string

The domain name of the target domain.

status
Type: string

The verification status of the target domain.

targetDomainId
Type: string

The unique identifier of the target domain.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was last updated, in UTC format.

verificationStatusReason
Type: string

The reason for the current target domain verification status.

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was verified, in UTC format.

Errors

There are no errors described for this operation.

Shapes

AWSResources

Description

The AWS resources associated with an agent space, including VPCs, log groups, S3 buckets, secrets, Lambda functions, and IAM roles.

Members
iamRoles
Type: Array of strings

The IAM roles associated with the agent space.

lambdaFunctionArns
Type: Array of strings

The Amazon Resource Names (ARNs) of the Lambda functions associated with the agent space.

logGroups
Type: Array of strings

The Amazon Resource Names (ARNs) of the CloudWatch log groups associated with the agent space.

s3Buckets
Type: Array of strings

The Amazon Resource Names (ARNs) of the S3 buckets associated with the agent space.

secretArns
Type: Array of strings

The Amazon Resource Names (ARNs) of the Secrets Manager secrets associated with the agent space.

vpcs
Type: Array of VpcConfig structures

The VPC configurations associated with the agent space.

AccessDeniedException

Description

You do not have sufficient access to perform this action.

Members
message
Required: Yes
Type: string

Error description.

Actor

Description

Represents an actor used during penetration testing. An actor defines a user or entity that interacts with the target application, including authentication credentials and target URIs.

Members
authentication
Type: Authentication structure

The authentication configuration for the actor.

description
Type: string

A description of the actor.

identifier
Type: string

The unique identifier for the actor.

uris
Type: Array of strings

The list of URIs that the actor targets during testing.

AgentSpace

Description

Represents an agent space, which is a dedicated workspace for securing a specific application. An agent space contains the configuration, resources, and settings needed for security testing.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

awsResources
Type: AWSResources structure

The AWS resources associated with the agent space.

codeReviewSettings
Type: CodeReviewSettings structure

The code review settings for the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was created, in UTC format.

description
Type: string

A description of the agent space.

kmsKeyId
Type: string

The identifier of the AWS KMS key used to encrypt data in the agent space.

name
Required: Yes
Type: string

The name of the agent space.

targetDomainIds
Type: Array of strings

The list of target domain identifiers associated with the agent space.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was last updated, in UTC format.

AgentSpaceSummary

Description

Contains summary information about an agent space.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was created, in UTC format.

name
Required: Yes
Type: string

The name of the agent space.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the agent space was last updated, in UTC format.

ApplicationSummary

Description

Contains summary information about an application.

Members
applicationId
Required: Yes
Type: string

The unique identifier of the application.

applicationName
Required: Yes
Type: string

The name of the application.

defaultKmsKeyId
Type: string

The identifier of the default AWS KMS key used to encrypt data for the application.

domain
Required: Yes
Type: string

The domain associated with the application.

Artifact

Description

Represents an artifact that provides context for security testing, such as documentation, diagrams, or configuration files.

Members
contents
Required: Yes
Type: string

The content of the artifact.

type
Required: Yes
Type: string

The file type of the artifact.

ArtifactMetadataItem

Description

Contains metadata about an artifact.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the artifact.

artifactId
Required: Yes
Type: string

The unique identifier of the artifact.

fileName
Required: Yes
Type: string

The file name of the artifact.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the artifact was last updated, in UTC format.

ArtifactSummary

Description

Contains summary information about an artifact.

Members
artifactId
Required: Yes
Type: string

The unique identifier of the artifact.

artifactType
Required: Yes
Type: string

The file type of the artifact.

fileName
Required: Yes
Type: string

The file name of the artifact.

Assets

Description

The collection of assets used in a pentest configuration, including endpoints, actors, documents, source code repositories, and integrated repositories.

Members
actors
Type: Array of Actor structures

The list of actors used during penetration testing.

documents
Type: Array of DocumentInfo structures

The list of documents that provide context for the pentest.

endpoints
Type: Array of Endpoint structures

The list of endpoints to test during the pentest.

integratedRepositories
Type: Array of IntegratedRepository structures

The list of integrated repositories associated with the pentest.

sourceCode
Type: Array of SourceCodeRepository structures

The list of source code repositories to analyze during the pentest.

Authentication

Description

The authentication configuration for an actor, specifying the provider type and credentials.

Members
providerType
Type: string

The type of authentication provider. Valid values include SECRETS_MANAGER, AWS_LAMBDA, AWS_IAM_ROLE, and AWS_INTERNAL.

value
Type: string

The authentication value, such as a secret ARN, Lambda function ARN, or IAM role ARN, depending on the provider type.

BatchCreateSecurityRequirementResult

Description

Contains information about a successfully created security requirement.

Members
createdAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement was created, in UTC format.

description
Required: Yes
Type: string

A description of the security requirement.

domain
Required: Yes
Type: string

The security domain the requirement belongs to.

evaluation
Required: Yes
Type: string

The evaluation criteria used to assess compliance with this requirement.

name
Required: Yes
Type: string

The name of the security requirement.

packId
Required: Yes
Type: string

The unique identifier of the pack containing the security requirement.

remediation
Type: string

The recommended remediation steps when the requirement is not met.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement was last updated, in UTC format.

BatchGetSecurityRequirementResult

Description

Contains information about a successfully retrieved security requirement.

Members
createdAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement was created, in UTC format.

description
Required: Yes
Type: string

A description of the security requirement.

domain
Required: Yes
Type: string

The security domain the requirement belongs to.

evaluation
Required: Yes
Type: string

The evaluation criteria used to assess compliance with this requirement.

name
Required: Yes
Type: string

The name of the security requirement.

packId
Required: Yes
Type: string

The unique identifier of the pack containing the security requirement.

remediation
Type: string

The recommended remediation steps when the requirement is not met.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement was last updated, in UTC format.

BatchSecurityRequirementError

Description

Contains information about an error that occurred for a specific security requirement during a batch operation.

Members
code
Required: Yes
Type: string

The error code.

message
Required: Yes
Type: string

The error message.

securityRequirementName
Required: Yes
Type: string

The name of the security requirement that caused the error.

BitbucketIntegrationInput

Description

The configuration for creating a Bitbucket integration.

Members
code
Required: Yes
Type: string

The OAuth 2.0 authorization code returned from the consent redirect.

installationId
Required: Yes
Type: string

The Atlassian installation identifier, available from the Atlassian administration console.

state
Required: Yes
Type: string

The CSRF state token echoed back from the OAuth redirect.

workspace
Required: Yes
Type: string

The Bitbucket workspace slug that identifies the workspace to integrate, for example acme-corp.

BitbucketRepositoryMetadata

Description

Metadata for an integrated Bitbucket repository.

Members
accessType
Type: string

Defines the visibility level of provider resources. PRIVATE indicates restricted access, while PUBLIC indicates open access.

name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc.

providerResourceId
Required: Yes
Type: string

Provider Id of the resource e.g. GitHub repository id, etc.

workspace
Required: Yes
Type: string

The workspace slug that owns the repository.

BitbucketRepositoryResource

Description

A Bitbucket repository integrated as a resource.

Members
name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc.

workspace
Required: Yes
Type: string

The workspace slug that owns the repository.

BitbucketResourceCapabilities

Description

Capabilities for an integrated Bitbucket repository.

Members
leaveComments
Type: boolean

Whether to post code review comments on pull requests.

remediateCode
Type: boolean

Whether to create pull requests with automated fixes.

Category

Description

Represents a category assigned to a security testing task.

Members
isPrimary
Type: boolean

Indicates whether this is the primary category for the task.

name
Type: string

The name of the category.

CloudWatchLog

Description

The Amazon CloudWatch Logs configuration for pentest job logging.

Members
logGroup
Type: string

The name of the CloudWatch log group.

logStream
Type: string

The name of the CloudWatch log stream.

CodeLocation

Description

Represents a location in source code associated with a security finding.

Members
filePath
Required: Yes
Type: string

The absolute path to the file containing the code location.

label
Type: string

The role of this location in the vulnerability, such as source or sink.

lineEnd
Type: int

The ending line number of the code location.

lineStart
Type: int

The starting line number of the code location.

CodeRemediationTask

Description

Represents a code remediation task that was initiated to fix a security finding.

Members
status
Required: Yes
Type: string

The current status of the code remediation task.

statusReason
Type: string

The reason for the current status of the code remediation task.

taskDetails
Type: Array of CodeRemediationTaskDetails structures

The list of details for the code remediation task, including repository name, code diff link, and pull request link.

CodeRemediationTaskDetails

Description

Contains details about a code remediation task, including links to the code diff and pull request.

Members
codeDiffLink
Type: string

The link to the code diff for the remediation.

pullRequestLink
Type: string

The link to the pull request created for the remediation.

repoName
Type: string

The name of the repository where the remediation was applied.

CodeReview

Description

Represents a code review configuration that defines the parameters for automated security-focused code analysis, including target assets and logging configuration.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the code review.

assets
Required: Yes
Type: Assets structure

The assets included in the code review.

codeRemediationStrategy
Type: string

The code remediation strategy for the code review.

codeReviewId
Required: Yes
Type: string

The unique identifier of the code review.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was created, in UTC format.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the code review.

serviceRole
Type: string

The IAM service role used for the code review.

title
Required: Yes
Type: string

The title of the code review.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was last updated, in UTC format.

validationMode
Type: string

The validation mode for the code review. Valid values are SIMULATED and DISABLED.

CodeReviewJob

Description

Represents a code review job, which is an execution instance of a code review. A code review job progresses through preflight, static analysis, and finalizing steps.

Members
codeRemediationStrategy
Type: string

The code remediation strategy for the code review job.

codeReviewId
Type: string

The unique identifier of the code review associated with the job.

codeReviewJobId
Type: string

The unique identifier of the code review job.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review job was created, in UTC format.

documents
Type: Array of DocumentInfo structures

The list of documents providing context for the code review job.

errorInformation
Type: ErrorInformation structure

Error information if the code review job encountered an error.

executionContext
Type: Array of ExecutionContext structures

The execution context messages for the code review job.

integratedRepositories
Type: Array of IntegratedRepository structures

The list of integrated repositories associated with the code review job.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the code review job.

overview
Type: string

An overview of the code review job results.

serviceRole
Type: string

The IAM service role used for the code review job.

sourceCode
Type: Array of SourceCodeRepository structures

The list of source code repositories analyzed during the code review job.

status
Type: string

The current status of the code review job.

steps
Type: Array of Step structures

The list of steps in the code review job execution.

title
Type: string

The title of the code review job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review job was last updated, in UTC format.

CodeReviewJobSummary

Description

Contains summary information about a code review job.

Members
codeReviewId
Required: Yes
Type: string

The unique identifier of the code review associated with the job.

codeReviewJobId
Required: Yes
Type: string

The unique identifier of the code review job.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review job was created, in UTC format.

status
Type: string

The current status of the code review job.

title
Type: string

The title of the code review job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review job was last updated, in UTC format.

CodeReviewJobTask

Description

Represents an individual security test task within a code review job. Each task targets a specific risk type and executes independently.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

categories
Type: Array of Category structures

The list of categories assigned to the task.

codeReviewId
Type: string

The unique identifier of the code review associated with the task.

codeReviewJobId
Type: string

The unique identifier of the code review job that contains the task.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was created, in UTC format.

description
Type: string

A description of the task.

executionStatus
Type: string

The current execution status of the task.

logsLocation
Type: LogLocation structure

The location of the task execution logs.

riskType
Type: string

The type of security risk the task is testing for.

taskId
Required: Yes
Type: string

The unique identifier of the task.

title
Type: string

The title of the task.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was last updated, in UTC format.

CodeReviewJobTaskSummary

Description

Contains summary information about a code review job task.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

codeReviewId
Type: string

The unique identifier of the code review associated with the task.

codeReviewJobId
Type: string

The unique identifier of the code review job that contains the task.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was created, in UTC format.

executionStatus
Type: string

The current execution status of the task.

riskType
Type: string

The type of security risk the task is testing for.

taskId
Required: Yes
Type: string

The unique identifier of the task.

title
Type: string

The title of the task.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was last updated, in UTC format.

CodeReviewSettings

Description

The code review settings for an agent space, controlling which types of scanning are enabled.

Members
controlsScanning
Required: Yes
Type: boolean

Indicates whether controls scanning is enabled for code reviews.

generalPurposeScanning
Required: Yes
Type: boolean

Indicates whether general-purpose scanning is enabled for code reviews.

CodeReviewSummary

Description

Contains summary information about a code review.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the code review.

codeReviewId
Required: Yes
Type: string

The unique identifier of the code review.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was created, in UTC format.

title
Required: Yes
Type: string

The title of the code review.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the code review was last updated, in UTC format.

ConflictException

Description

The request could not be completed due to a conflict with the current state of the resource.

Members
message
Required: Yes
Type: string

Error description.

ConfluenceDocumentMetadata

Description

Metadata for an integrated Confluence document.

Members
name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc.

pageId
Required: Yes
Type: string

The Confluence page identifier.

providerResourceId
Required: Yes
Type: string

Provider Id of the resource e.g. GitHub repository id, etc.

spaceKey
Required: Yes
Type: string

The Confluence space key containing the document.

spaceTitle
Type: string

The display title of the Confluence space.

title
Type: string

The display title of the Confluence page.

ConfluenceDocumentResource

Description

A Confluence document (page) integrated as a resource.

Members
name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc.

pageId
Required: Yes
Type: string

The Confluence page identifier.

spaceKey
Required: Yes
Type: string

The Confluence space key containing the document.

spaceTitle
Type: string

The display title of the Confluence space.

title
Type: string

The display title of the Confluence page.

ConfluenceIntegrationInput

Description

The configuration for creating a Confluence integration.

Members
code
Required: Yes
Type: string

The OAuth 2.0 authorization code returned from the consent redirect.

installationId
Required: Yes
Type: string

The Atlassian installation identifier, available from the Atlassian administration console.

siteUrl
Required: Yes
Type: string

The Confluence Cloud site URL, for example https://mysite.atlassian.net.

state
Required: Yes
Type: string

The CSRF state token echoed back from the OAuth redirect.

ConfluenceResourceCapabilities

Description

Capabilities for an integrated Confluence space.

Members
createDocument
Type: boolean

Whether to create documents in this space.

fetchDocument
Type: boolean

Whether to fetch documents from this space.

updateDocument
Type: boolean

Whether to update documents in this space.

CreateSecurityRequirementEntry

Description

Contains the details for a security requirement to create within a pack.

Members
description
Required: Yes
Type: string

A description of the security requirement.

domain
Required: Yes
Type: string

The security domain the requirement belongs to.

evaluation
Required: Yes
Type: string

The evaluation criteria used to assess compliance with this requirement.

name
Required: Yes
Type: string

The name of the security requirement.

remediation
Type: string

The recommended remediation steps when the requirement is not met.

CustomHeader

Description

A custom HTTP header to include in network traffic during penetration testing.

Members
name
Type: string

The name of the custom header.

value
Type: string

The value of the custom header.

DeleteCodeReviewFailure

Description

Contains information about a code review that failed to delete.

Members
codeReviewId
Type: string

The unique identifier of the code review that failed to delete.

reason
Type: string

The reason the code review failed to delete.

DeletePentestFailure

Description

Contains information about a pentest that failed to delete.

Members
pentestId
Type: string

The unique identifier of the pentest that failed to delete.

reason
Type: string

The reason the pentest failed to delete.

DeleteThreatModelFailure

Description

Contains information about a threat model that failed to delete.

Members
reason
Type: string

The reason the threat model failed to delete.

threatModelId
Type: string

The unique identifier of the threat model that failed to delete.

DiffSource

Description

Source of the diff for a differential code scan.

Members
s3Uri
Type: string

S3 URI pointing to a unified diff file. The file must be in standard unified diff format and stored in an S3 bucket connected to your Agent Space.

DiscoveredEndpoint

Description

Represents an endpoint discovered during a pentest job.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space associated with the discovered endpoint.

description
Type: string

A description of the discovered endpoint.

evidence
Type: string

The evidence that led to the discovery of the endpoint.

operation
Type: string

The HTTP operation associated with the discovered endpoint.

pentestJobId
Required: Yes
Type: string

The unique identifier of the pentest job that discovered the endpoint.

taskId
Required: Yes
Type: string

The unique identifier of the task that discovered the endpoint.

uri
Required: Yes
Type: string

The URI of the discovered endpoint.

DnsVerification

Description

Contains DNS verification details for a target domain, including the DNS record to create for domain ownership verification.

Members
dnsRecordName
Type: string

The name of the DNS record to create for verification.

dnsRecordType
Type: string

The type of DNS record to create. Currently, only TXT is supported.

token
Type: string

The verification token to include in the DNS record value.

DocumentInfo

Description

Represents a document that provides context for security testing.

Members
artifactId
Type: string

The unique identifier of the artifact associated with the document.

integratedDocument
Type: IntegratedDocument structure

A reference to a document in an integrated third-party provider.

s3Location
Type: string

The Amazon S3 location of the document.

Endpoint

Description

Represents a target endpoint for penetration testing.

Members
uri
Type: string

The URI of the endpoint.

ErrorInformation

Description

Contains error information for a pentest job that encountered an error.

Members
code
Type: string

The error code. Valid values include CLIENT_ERROR, INTERNAL_ERROR, and STOPPED_BY_USER.

message
Type: string

A message describing the error.

ExecutionContext

Description

Contains contextual information about the execution of a pentest job, such as errors, warnings, or informational messages.

Members
context
Type: string

The context message.

contextType
Type: string

The type of context. Valid values include ERROR, CLIENT_ERROR, WARNING, and INFO.

timestamp
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the context was recorded, in UTC format.

Finding

Description

Represents a security finding discovered during a pentest job. A finding contains details about a vulnerability, including its risk level, confidence, and remediation status.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space associated with the finding.

alignmentRationale
Type: string

The rationale provided by the alignment agent explaining how the finding was adjusted based on customer preferences.

attackScript
Type: string

The attack script used to reproduce the finding.

codeLocations
Type: Array of CodeLocation structures

The file locations involved in the vulnerability, as reported by the code scanner.

codeRemediationTask
Type: CodeRemediationTask structure

The code remediation task associated with the finding, if code remediation was initiated.

codeReviewId
Type: string

The unique identifier of the code review associated with the finding.

codeReviewJobId
Type: string

The unique identifier of the code review job that produced the finding.

confidence
Type: string

The confidence level of the finding. Valid values include FALSE_POSITIVE, UNCONFIRMED, LOW, MEDIUM, and HIGH.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the finding was created, in UTC format.

customerNote
Type: string

A customer-provided note on the finding.

description
Type: string

A description of the finding.

findingId
Required: Yes
Type: string

The unique identifier of the finding.

lastUpdatedBy
Type: string

The identifier of the entity that last updated the finding.

name
Type: string

The name of the finding.

pentestId
Type: string

The unique identifier of the pentest associated with the finding.

pentestJobId
Type: string

The unique identifier of the pentest job that produced the finding.

reasoning
Type: string

The reasoning behind the finding, explaining why it was identified as a vulnerability.

riskLevel
Type: string

The risk level of the finding. Valid values include UNKNOWN, INFORMATIONAL, LOW, MEDIUM, HIGH, and CRITICAL.

riskScore
Type: string

The numerical risk score of the finding.

riskType
Type: string

The type of security risk identified by the finding.

status
Type: string

The current status of the finding. Valid values include ACTIVE, RESOLVED, ACCEPTED, and FALSE_POSITIVE.

taskId
Type: string

The unique identifier of the task that produced the finding.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the finding was last updated, in UTC format.

validationStatus
Type: string

The simulated validation status of the finding. Valid values are NOT_VALIDATED, VALIDATING, CONFIRMED, NOT_REPRODUCED, and VALIDATION_FAILED.

verificationScript
Type: VerificationScript structure

The verification script metadata for reproducing the finding, including download URL, instructions, and required environment variables.

FindingSummary

Description

Contains summary information about a security finding.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space associated with the finding.

codeReviewId
Type: string

The unique identifier of the code review associated with the finding.

codeReviewJobId
Type: string

The unique identifier of the code review job that produced the finding.

confidence
Type: string

The confidence level of the finding.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the finding was created, in UTC format.

findingId
Required: Yes
Type: string

The unique identifier of the finding.

name
Type: string

The name of the finding.

pentestId
Type: string

The unique identifier of the pentest associated with the finding.

pentestJobId
Type: string

The unique identifier of the pentest job that produced the finding.

riskLevel
Type: string

The risk level of the finding.

riskType
Type: string

The type of security risk identified by the finding.

status
Type: string

The current status of the finding.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the finding was last updated, in UTC format.

validationStatus
Type: string

The simulated validation status of the finding.

GitHubIntegrationInput

Description

The input required to create a GitHub integration, including the OAuth authorization code and CSRF state.

Members
code
Required: Yes
Type: string

The OAuth authorization code received from GitHub.

installationId
Type: string

The installation identifier provided by GitHub Enterprise Server on the install callback. Required for GitHub Enterprise Server integrations and ignored for GitHub.com.

organizationName
Type: string

The name of the GitHub organization to integrate with.

state
Required: Yes
Type: string

The CSRF state token for validating the OAuth flow.

targetUrl
Type: string

The HTTPS URL of a self-hosted GitHub Enterprise Server instance. Omit this value for GitHub.com.

GitHubRepositoryMetadata

Description

Contains metadata about a GitHub repository that is integrated with the service.

Members
accessType
Type: string

The access type of the GitHub repository. Valid values are PRIVATE and PUBLIC.

name
Required: Yes
Type: string

The name of the GitHub repository.

owner
Required: Yes
Type: string

The owner of the GitHub repository.

providerResourceId
Required: Yes
Type: string

The provider-specific resource identifier for the GitHub repository.

GitHubRepositoryResource

Description

Represents a GitHub repository resource used in an integration.

Members
name
Required: Yes
Type: string

The name of the GitHub repository.

owner
Required: Yes
Type: string

The owner of the GitHub repository.

GitHubResourceCapabilities

Description

The capabilities enabled for a GitHub resource integration.

Members
leaveComments
Type: boolean

Indicates whether the integration can leave comments on pull requests.

remediateCode
Type: boolean

Indicates whether the integration can create code remediation pull requests.

GitLabIntegrationInput

Description

The configuration for creating a GitLab integration.

Members
accessToken
Required: Yes
Type: string

The GitLab access token used to authenticate. This can be a personal access token or a group access token.

groupId
Type: string

The identifier of the GitLab group. Required when tokenType is group and ignored for personal tokens.

targetUrl
Type: string

The HTTPS URL of a self-managed GitLab instance. Omit this value for GitLab SaaS (gitlab.com).

tokenType
Required: Yes
Type: string

The type of GitLab access token provided in accessToken.

GitLabRepositoryMetadata

Description

Metadata for an integrated GitLab repository.

Members
accessType
Type: string

Defines the visibility level of provider resources. PRIVATE indicates restricted access, while PUBLIC indicates open access.

name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc.

namespace
Required: Yes
Type: string

The namespace (group or user path) that owns the project.

providerResourceId
Required: Yes
Type: string

Provider Id of the resource e.g. GitHub repository id, etc.

GitLabRepositoryResource

Description

A GitLab repository integrated as a resource.

Members
name
Required: Yes
Type: string

Name of the resource e.g. repository name, etc.

namespace
Required: Yes
Type: string

The namespace (group or user path) that owns the project.

GitLabResourceCapabilities

Description

Capabilities for an integrated GitLab repository.

Members
leaveComments
Type: boolean

Whether to post code review comments on merge request discussions.

remediateCode
Type: boolean

Whether to create merge requests with automated fixes.

HttpVerification

Description

Contains HTTP route verification details for a target domain, including the route path and token to serve for domain ownership verification.

Members
routePath
Type: string

The HTTP route path where the verification token must be served.

token
Type: string

The verification token to serve at the specified route path.

IdCConfiguration

Description

The IAM Identity Center configuration for an application.

Members
idcApplicationArn
Type: string

The Amazon Resource Name (ARN) of the IAM Identity Center application.

idcInstanceArn
Type: string

The Amazon Resource Name (ARN) of the IAM Identity Center instance.

ImportSource

Description

The source from which to import security requirements. Currently supports document uploads.

Members
documents
Type: Array of SecurityRequirementArtifact structures

The list of documents to extract security requirements from.

IntegratedDocument

Description

A reference to a document in a third-party provider, such as a Confluence page linked via an integration.

Members
integrationId
Required: Yes
Type: string

The identifier of the integration that provides access to the document.

resourceId
Required: Yes
Type: string

The provider-specific resource identifier for the document.

IntegratedRepository

Description

Represents a code repository that is integrated with the service through a third-party provider.

Members
integrationId
Required: Yes
Type: string

The unique identifier of the integration that provides access to the repository.

providerResourceId
Required: Yes
Type: string

The provider-specific resource identifier for the repository.

IntegratedResource

Description

Represents an integrated resource from a third-party provider. This is a union type that contains provider-specific resource information.

Members
bitbucketRepository
Type: BitbucketRepositoryResource structure

A Bitbucket repository integrated as a resource.

confluenceDocument
Type: ConfluenceDocumentResource structure

A Confluence document (page) integrated as a resource.

githubRepository
Type: GitHubRepositoryResource structure

The GitHub repository resource information.

gitlabRepository
Type: GitLabRepositoryResource structure

A GitLab repository integrated as a resource.

IntegratedResourceInputItem

Description

Represents an input item for updating integrated resources, including the resource and its capabilities.

Members
capabilities

The capabilities to enable for the integrated resource.

resource
Required: Yes
Type: IntegratedResource structure

The integrated resource to update.

IntegratedResourceMetadata

Description

Contains metadata about an integrated resource. This is a union type that contains provider-specific metadata.

Members
bitbucketRepository
Type: BitbucketRepositoryMetadata structure

Metadata for an integrated Bitbucket repository.

confluenceDocument
Type: ConfluenceDocumentMetadata structure

Metadata for an integrated Confluence document.

githubRepository
Type: GitHubRepositoryMetadata structure

The GitHub repository metadata.

gitlabRepository
Type: GitLabRepositoryMetadata structure

Metadata for an integrated GitLab repository.

IntegratedResourceSummary

Description

Contains summary information about an integrated resource.

Members
capabilities

The capabilities enabled for the integrated resource.

integrationId
Required: Yes
Type: string

The unique identifier of the integration that provides access to the resource.

resource
Required: Yes
Type: IntegratedResourceMetadata structure

The metadata for the integrated resource.

IntegrationFilter

Description

A filter for listing integrations. This is a union type where you can filter by provider or provider type.

Members
provider
Type: string

Filter integrations by provider.

providerType
Type: string

Filter integrations by provider type.

IntegrationSummary

Description

Contains summary information about an integration.

Members
displayName
Required: Yes
Type: string

The display name of the integration.

installationId
Required: Yes
Type: string

The installation identifier from the integration provider.

integrationId
Required: Yes
Type: string

The unique identifier of the integration.

privateConnectionName
Type: string

The name of the private connection used to reach the integration's self-hosted instance over private networking, if one is configured.

provider
Required: Yes
Type: string

The integration provider.

providerType
Required: Yes
Type: string

The type of the integration provider.

targetUrl
Type: string

The HTTPS URL of the customer self-hosted instance, such as a GitHub Enterprise Server or self-managed GitLab instance. This value is absent for SaaS integrations.

InternalServerException

Description

An unexpected error occurred during the processing of your request.

Members
message
Required: Yes
Type: string

Error description.

ListSecurityRequirementPackFilter

Description

Filter criteria for listing security requirement packs.

Members
managementType
Type: string

Filter packs by management type. Valid values are AWS_MANAGED and CUSTOMER_MANAGED.

status
Type: string

Filter packs by status. Valid values are ENABLED and DISABLED.

LogLocation

Description

The log location for a task, specifying where task execution logs are stored.

Members
cloudWatchLog
Type: CloudWatchLog structure

The CloudWatch Logs location for the task logs.

logType
Type: string

The type of log storage. Currently, only CLOUDWATCH is supported.

MemberMetadata

Description

Contains metadata about a member. This is a union type that contains member-type-specific metadata.

Members
user
Type: UserMetadata structure

The user metadata for the member.

MembershipConfig

Description

The configuration for a membership. This is a union type that contains member-type-specific configuration.

Members
user
Type: UserConfig structure

The user configuration for the membership.

MembershipSummary

Description

Contains summary information about a membership.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space.

applicationId
Required: Yes
Type: string

The unique identifier of the application.

config
Type: MembershipConfig structure

The configuration for the membership.

createdAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the membership was created, in UTC format.

createdBy
Required: Yes
Type: string

The identifier of the entity that created the membership.

memberType
Required: Yes
Type: string

The type of member.

membershipId
Required: Yes
Type: string

The unique identifier of the membership.

metadata
Type: MemberMetadata structure

The metadata for the member.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the membership was last updated, in UTC format.

updatedBy
Required: Yes
Type: string

The identifier of the entity that last updated the membership.

NetworkTrafficConfig

Description

The network traffic configuration for a pentest, including custom headers and traffic rules.

Members
customHeaders
Type: Array of CustomHeader structures

The list of custom HTTP headers to include in network traffic during testing.

rules
Type: Array of NetworkTrafficRule structures

The list of network traffic rules that control which URLs are allowed or denied during testing.

NetworkTrafficRule

Description

A rule that controls network traffic during penetration testing by allowing or denying traffic to specific URL patterns.

Members
effect
Type: string

The effect of the rule. Valid values are ALLOW and DENY.

networkTrafficRuleType
Type: string

The type of the network traffic rule. Currently, only URL is supported.

pattern
Type: string

The URL pattern to match for the rule.

Pentest

Description

Represents a pentest configuration that defines the parameters for security testing, including target assets, risk type exclusions, and infrastructure settings.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the pentest.

assets
Required: Yes
Type: Assets structure

The assets included in the pentest.

cleanUpStrategy
Type: string

Strategy for cleaning up resources after pentest job completion.

codeRemediationStrategy
Type: string

The code remediation strategy for the pentest.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was created, in UTC format.

disableManagedSkills
Type: Array of strings

A list of managed skills to disable for this pentest. Valid values include FINDING_PERSONALIZATION and LOGIN_OPTIMIZATION.

excludeRiskTypes
Type: Array of strings

The list of risk types excluded from the pentest.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the pentest.

networkTrafficConfig
Type: NetworkTrafficConfig structure

The network traffic configuration for the pentest.

pentestId
Required: Yes
Type: string

The unique identifier of the pentest.

serviceRole
Type: string

The IAM service role used for the pentest.

title
Required: Yes
Type: string

The title of the pentest.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was last updated, in UTC format.

vpcConfig
Type: VpcConfig structure

The VPC configuration for the pentest.

PentestJob

Description

Represents a pentest job, which is an execution instance of a pentest. A pentest job progresses through preflight, static analysis, pentest, and finalizing steps.

Members
actors
Type: Array of Actor structures

The list of actors used during the pentest job.

allowedDomains
Type: Array of Endpoint structures

The list of domains allowed during the pentest job.

cleanUpStrategy
Type: string

Strategy for cleaning up resources after pentest job completion.

codeRemediationStrategy
Type: string

The code remediation strategy for the pentest job.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest job was created, in UTC format.

disableManagedSkills
Type: Array of strings

A list of managed skills disabled for this pentest job. Valid values include FINDING_PERSONALIZATION and LOGIN_OPTIMIZATION.

documents
Type: Array of DocumentInfo structures

The list of documents providing context for the pentest job.

endpoints
Type: Array of Endpoint structures

The list of endpoints being tested in the pentest job.

errorInformation
Type: ErrorInformation structure

Error information if the pentest job encountered an error.

excludePaths
Type: Array of Endpoint structures

The list of paths excluded from the pentest job.

excludeRiskTypes
Type: Array of strings

The list of risk types excluded from the pentest job.

executionContext
Type: Array of ExecutionContext structures

The execution context messages for the pentest job.

integratedRepositories
Type: Array of IntegratedRepository structures

The list of integrated repositories associated with the pentest job.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the pentest job.

networkTrafficConfig
Type: NetworkTrafficConfig structure

The network traffic configuration for the pentest job.

overview
Type: string

An overview of the pentest job results.

pentestId
Type: string

The unique identifier of the pentest associated with the job.

pentestJobId
Type: string

The unique identifier of the pentest job.

serviceRole
Type: string

The IAM service role used for the pentest job.

sourceCode
Type: Array of SourceCodeRepository structures

The list of source code repositories analyzed during the pentest job.

status
Type: string

The current status of the pentest job.

steps
Type: Array of Step structures

The list of steps in the pentest job execution.

title
Type: string

The title of the pentest job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest job was last updated, in UTC format.

vpcConfig
Type: VpcConfig structure

The VPC configuration for the pentest job.

PentestJobSummary

Description

Contains summary information about a pentest job.

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest job was created, in UTC format.

pentestId
Required: Yes
Type: string

The unique identifier of the pentest associated with the job.

pentestJobId
Required: Yes
Type: string

The unique identifier of the pentest job.

status
Type: string

The current status of the pentest job.

title
Type: string

The title of the pentest job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest job was last updated, in UTC format.

PentestSummary

Description

Contains summary information about a pentest.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the pentest.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was created, in UTC format.

pentestId
Required: Yes
Type: string

The unique identifier of the pentest.

title
Required: Yes
Type: string

The title of the pentest.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the pentest was last updated, in UTC format.

PrivateConnectionMode

Description

The configuration for a private connection. Specify either a service-managed or a self-managed mode.

Members
selfManaged
Type: SelfManagedInput structure

The configuration for a self-managed private connection, where you manage your own resource configuration.

serviceManaged
Type: ServiceManagedInput structure

The configuration for a service-managed private connection, where the service manages the resource gateway lifecycle.

PrivateConnectionSummary

Description

Summarizes a private connection.

Members
certificateExpiryTime
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the connection's certificate expires, in UTC format.

dnsResolution
Type: string

The DNS resolution mode for the resource gateway.

failureMessage
Type: string

A message describing why the private connection entered a failed state, if applicable.

hostAddress
Type: string

The IP address or DNS name of the target resource.

name
Required: Yes
Type: string

The name of the private connection.

resourceConfigurationId
Type: string

The identifier or ARN of the VPC Lattice resource configuration.

resourceGatewayId
Type: string

The identifier or ARN of the VPC Lattice resource gateway.

status
Required: Yes
Type: string

The current status of the private connection.

tags
Type: Associative array of custom strings keys (TagKey) to strings

The tags attached to the private connection.

type
Required: Yes
Type: string

The type of the private connection, indicating whether it is service-managed or self-managed.

vpcId
Type: string

The identifier of the VPC the resource gateway is created in.

ProviderInput

Description

The provider-specific input for creating an integration. This is a union type that contains provider-specific configuration.

Members
bitbucket
Type: BitbucketIntegrationInput structure

The configuration for a Bitbucket integration.

confluence
Type: ConfluenceIntegrationInput structure

The configuration for a Confluence integration.

github
Type: GitHubIntegrationInput structure

The GitHub-specific input for creating an integration.

gitlab
Type: GitLabIntegrationInput structure

The configuration for a GitLab integration.

ProviderResourceCapabilities

Description

The capabilities for an integrated resource from a third-party provider. This is a union type that contains provider-specific capabilities.

Members
bitbucket

Capabilities for an integrated Bitbucket repository.

confluence

Capabilities for an integrated Confluence space.

github
Type: GitHubResourceCapabilities structure

The GitHub-specific resource capabilities.

gitlab
Type: GitLabResourceCapabilities structure

Capabilities for an integrated GitLab repository.

ReportDestination

Description

Destination for publishing scan reports to an integrated document provider.

Members
containerId
Required: Yes
Type: string

The container identifier where the report will be published.

documentId
Type: string

The existing document identifier to update instead of creating a new document.

integrationId
Required: Yes
Type: string

The integration identifier for the document provider.

parentId
Type: string

The parent document identifier under which the report will be created.

ResourceNotFoundException

Description

The specified resource was not found. Verify that the resource identifier is correct and that the resource exists in the specified agent space or account.

Members
message
Required: Yes
Type: string

Error description.

SecurityRequirementArtifact

Description

A document used as source material for importing security requirements.

Members
content
Required: Yes
Type: blob (string|resource|Psr\Http\Message\StreamInterface)

The binary content of the document.

format
Required: Yes
Type: string

The format of the document. Valid values are MD, PDF, TXT, DOCX, and DOC.

name
Required: Yes
Type: string

The file name of the document.

SecurityRequirementPackSummary

Description

Contains summary information about a security requirement pack.

Members
createdAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement pack was created, in UTC format.

description
Type: string

A description of the security requirement pack.

managementType
Required: Yes
Type: string

The management type of the pack.

name
Required: Yes
Type: string

The name of the security requirement pack.

packId
Required: Yes
Type: string

The unique identifier of the security requirement pack.

status
Required: Yes
Type: string

The status of the security requirement pack.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement pack was last updated, in UTC format.

vendorName
Type: string

The vendor name for AWS managed packs.

SecurityRequirementSummary

Description

Contains summary information about a security requirement.

Members
createdAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement was created, in UTC format.

description
Required: Yes
Type: string

A description of the security requirement.

name
Required: Yes
Type: string

The name of the security requirement.

packId
Required: Yes
Type: string

The unique identifier of the pack containing the security requirement.

updatedAt
Required: Yes
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the security requirement was last updated, in UTC format.

SelfManagedInput

Description

The configuration for a self-managed private connection.

Members
certificate
Type: string

The certificate for the private connection.

resourceConfigurationId
Required: Yes
Type: string

The identifier or ARN of the resource configuration.

ServiceManagedInput

Description

The configuration for a service-managed private connection.

Members
certificate
Type: string

The certificate for the private connection.

dnsResolution
Type: string

The DNS resolution mode for the resource gateway. Defaults to PUBLIC when not set.

hostAddress
Required: Yes
Type: string

The IP address or DNS name of the target resource.

ipAddressType
Type: string

The IP address type of the service-managed resource gateway.

ipv4AddressesPerEni
Type: int

The number of IPv4 addresses in each elastic network interface for the service-managed resource gateway.

portRanges
Type: Array of strings

The TCP port ranges that a consumer can use to access the resource.

securityGroupIds
Type: Array of strings

The security groups to attach to the service-managed resource gateway.

subnetIds
Required: Yes
Type: Array of strings

The subnets that the service-managed resource gateway spans.

vpcId
Required: Yes
Type: string

The VPC to create the service-managed resource gateway in.

ServiceQuotaExceededException

Description

The request exceeds a service quota. Review your current usage and request a quota increase if needed.

Members
message
Required: Yes
Type: string

SourceCodeRepository

Description

Represents a source code repository used for security analysis during a pentest.

Members
s3Location
Type: string

The Amazon S3 location of the source code repository archive.

Step

Description

Represents a step in the pentest job execution pipeline. Steps include preflight, static analysis, pentest, and finalizing.

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the step was created, in UTC format.

name
Type: string

The name of the step. Valid values include PREFLIGHT, STATIC_ANALYSIS, PENTEST, VALIDATION, and FINALIZING.

status
Type: string

The current status of the step.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the step was last updated, in UTC format.

TargetDomain

Description

Represents a target domain registered for penetration testing. A target domain must be verified through DNS TXT or HTTP route verification before it can be used in pentests.

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was created, in UTC format.

domainName
Required: Yes
Type: string

The domain name of the target domain.

targetDomainId
Required: Yes
Type: string

The unique identifier of the target domain.

verificationDetails
Type: VerificationDetails structure

The verification details for the target domain.

verificationStatus
Type: string

The current verification status of the target domain.

verificationStatusReason
Type: string

The reason for the current target domain verification status.

verifiedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the target domain was verified, in UTC format.

TargetDomainSummary

Description

Contains summary information about a target domain.

Members
domainName
Required: Yes
Type: string

The domain name of the target domain.

targetDomainId
Required: Yes
Type: string

The unique identifier of the target domain.

verificationStatus
Type: string

The current verification status of the target domain.

Task

Description

Represents an individual security test task within a pentest job. Each task targets a specific risk type or endpoint and executes independently.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

categories
Type: Array of Category structures

The list of categories assigned to the task.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was created, in UTC format.

description
Type: string

A description of the task.

executionStatus
Type: string

The current execution status of the task.

logsLocation
Type: LogLocation structure

The location of the task execution logs.

pentestId
Type: string

The unique identifier of the pentest associated with the task.

pentestJobId
Type: string

The unique identifier of the pentest job that contains the task.

riskType
Type: string

The type of security risk the task is testing for.

targetEndpoint
Type: Endpoint structure

The target endpoint being tested by the task.

taskId
Required: Yes
Type: string

The unique identifier of the task.

title
Type: string

The title of the task.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was last updated, in UTC format.

TaskSummary

Description

Contains summary information about a task.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was created, in UTC format.

executionStatus
Type: string

The current execution status of the task.

pentestId
Type: string

The unique identifier of the pentest associated with the task.

pentestJobId
Type: string

The unique identifier of the pentest job that contains the task.

riskType
Type: string

The type of security risk the task is testing for.

taskId
Required: Yes
Type: string

The unique identifier of the task.

title
Type: string

The title of the task.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was last updated, in UTC format.

Threat

Description

Represents a threat identified during threat modeling.

Members
anchor
Type: ThreatAnchorShape structure

The DFD element this threat is anchored to.

comments
Type: string

Optional customer comment on the threat.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was created, in UTC format.

createdBy
Type: string

Who created this threat.

evidence
Type: Array of ThreatEvidenceShape structures

The source code files supporting the threat.

impactedAssets
Type: Array of strings

The specific assets affected by the threat.

impactedGoal
Type: Array of strings

The security goals affected by the threat.

prerequisites
Type: string

The conditions required for the threat to be exploitable.

recommendation
Type: string

The recommended mitigation guidance for this threat.

severity
Type: string

The severity level of the threat.

statement
Type: string

The natural-language threat statement.

status
Type: string

The current status of the threat.

stride
Type: Array of strings

The STRIDE categories applicable to this threat.

threatAction
Type: string

What the threat source can do.

threatId
Type: string

The unique identifier of the threat.

threatImpact
Type: string

The direct consequence of the threat action.

threatJobId
Type: string

The unique identifier of the threat model job that produced the threat.

threatSource
Type: string

The actor or origin of the threat.

title
Type: string

A short title summarizing the threat.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was last updated, in UTC format.

updatedBy
Type: string

Who last updated this threat.

ThreatAnchorShape

Description

DFD element that a threat is anchored to.

Members
id
Type: string

The identifier of the DFD element.

kind
Type: string

The kind of DFD element.

packageId
Type: string

The package identifier containing the DFD element.

ThreatEvidenceShape

Description

Source code file supporting a threat.

Members
packageId
Type: string

The package identifier containing the evidence file.

path
Type: string

The file path of the evidence.

ThreatModel

Description

Represents a threat model configuration that defines the parameters for automated threat analysis, including target assets and logging configuration.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the threat model.

assets
Required: Yes
Type: Assets structure

The assets included in the threat model.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was created, in UTC format.

description
Type: string

A description of the application or system being threat modeled.

logConfig
Type: CloudWatchLog structure

The CloudWatch Logs configuration for the threat model.

scopeDocs
Type: Array of DocumentInfo structures

The scoped documents for the agent to focus on during threat modeling.

serviceRole
Type: string

The IAM service role used for the threat model.

threatModelId
Required: Yes
Type: string

The unique identifier of the threat model.

title
Required: Yes
Type: string

The title of the threat model.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was last updated, in UTC format.

ThreatModelJob

Description

Represents a threat model job, which is an execution instance of a threat model.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job was created, in UTC format.

documents
Type: Array of DocumentInfo structures

The list of documents used for threat modeling.

errorInformation
Type: ErrorInformation structure

Error information if the threat model job encountered an error.

executionEndTime
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job execution ended, in UTC format.

executionStartTime
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job execution started, in UTC format.

integratedRepositories
Type: Array of IntegratedRepository structures

The list of integrated repositories used for threat modeling.

scopeDocs
Type: Array of DocumentInfo structures

The scoped documents for the agent to focus on during threat modeling.

sourceCode
Type: Array of SourceCodeRepository structures

The list of source code repositories used for threat modeling.

status
Type: string

The current status of the threat model job.

systemOverview
Type: string

The system overview generated during threat modeling.

threatModelId
Type: string

The unique identifier of the threat model associated with the job.

threatModelJobId
Type: string

The unique identifier of the threat model job.

title
Type: string

The title of the threat model job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job was last updated, in UTC format.

ThreatModelJobSummary

Description

Contains summary information about a threat model job.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job was created, in UTC format.

status
Type: string

The current status of the threat model job.

threatModelId
Required: Yes
Type: string

The unique identifier of the threat model associated with the job.

threatModelJobId
Required: Yes
Type: string

The unique identifier of the threat model job.

title
Type: string

The title of the threat model job.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model job was last updated, in UTC format.

ThreatModelJobTask

Description

Represents an individual task within a threat model job.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was created, in UTC format.

description
Type: string

A description of the task.

executionStatus
Type: string

The current execution status of the task.

logsLocation
Type: LogLocation structure

The location of the task execution logs.

taskId
Required: Yes
Type: string

The unique identifier of the task.

threatModelId
Type: string

The unique identifier of the threat model associated with the task.

threatModelJobId
Type: string

The unique identifier of the threat model job that contains the task.

title
Type: string

The title of the task.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was last updated, in UTC format.

ThreatModelJobTaskSummary

Description

Contains summary information about a threat model job task.

Members
agentSpaceId
Type: string

The unique identifier of the agent space.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was created, in UTC format.

executionStatus
Type: string

The current execution status of the task.

taskId
Required: Yes
Type: string

The unique identifier of the task.

threatModelId
Type: string

The unique identifier of the threat model associated with the task.

threatModelJobId
Type: string

The unique identifier of the threat model job that contains the task.

title
Type: string

The title of the task.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the task was last updated, in UTC format.

ThreatModelSummary

Description

Contains summary information about a threat model.

Members
agentSpaceId
Required: Yes
Type: string

The unique identifier of the agent space that contains the threat model.

createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was created, in UTC format.

threatModelId
Required: Yes
Type: string

The unique identifier of the threat model.

title
Required: Yes
Type: string

The title of the threat model.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat model was last updated, in UTC format.

ThreatSummary

Description

Contains summary information about a threat.

Members
createdAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was created, in UTC format.

createdBy
Type: string

Who created this threat.

severity
Type: string

The severity level of the threat.

statement
Type: string

The natural-language threat statement.

status
Type: string

The current status of the threat.

stride
Type: Array of strings

The STRIDE categories applicable to this threat.

threatId
Type: string

The unique identifier of the threat.

threatJobId
Type: string

The unique identifier of the threat model job that produced the threat.

title
Type: string

A short title summarizing the threat.

updatedAt
Type: timestamp (string|DateTime or anything parsable by strtotime)

The date and time the threat was last updated, in UTC format.

updatedBy
Type: string

Who last updated this threat.

ThrottlingException

Description

The request was denied due to request throttling.

Members
message
Required: Yes
Type: string

Error description.

quotaCode
Type: string

Quota code for throttling limit.

serviceCode
Type: string

Service code for throttling limit.

UpdateSecurityRequirementEntry

Description

Contains the details for updating an existing security requirement within a pack. The name is an immutable identifier used to locate the requirement and cannot be modified.

Members
description
Type: string

The updated description of the security requirement.

domain
Type: string

The updated security domain the requirement belongs to.

evaluation
Type: string

The updated evaluation criteria used to assess compliance with this requirement.

name
Required: Yes
Type: string

The name of the security requirement to update. This is an immutable identifier and cannot be changed once the requirement is created.

remediation
Type: string

The updated remediation steps when the requirement is not met.

UserConfig

Description

The configuration for a user membership, including the role assigned to the user within the agent space.

Members
role
Type: string

The role assigned to the user. Currently, only MEMBER is supported.

UserMetadata

Description

Contains metadata about a user member, including the username and email address.

Members
email
Required: Yes
Type: string

The email address of the user.

username
Required: Yes
Type: string

The username of the user.

ValidationException

Description

The input fails to satisfy the constraints specified by the service.

Members
fieldList
Type: Array of ValidationExceptionField structures

A list of specific failures encountered during validation.

message
Required: Yes
Type: string

A summary of the validation failure.

ValidationExceptionField

Description

Describes one specific validation failure for an input member.

Members
message
Required: Yes
Type: string

A detailed description of the validation failure.

path
Required: Yes
Type: string

A JSONPointer expression to the structure member whose value failed to satisfy the modeled constraint.

VerificationDetails

Description

Contains the verification details for a target domain, including the verification method and provider-specific details.

Members
dnsTxt
Type: DnsVerification structure

The DNS TXT verification details.

httpRoute
Type: HttpVerification structure

The HTTP route verification details.

method
Type: string

The verification method used for the target domain.

VerificationScript

Description

Contains metadata for a verification script that can be used to reproduce a security finding.

Members
envVars
Type: Array of VerificationScriptEnvVar structures

The list of environment variables required to run the verification script.

instructions
Type: string

Instructions for running the verification script, including prerequisites and how to interpret results.

scriptType
Type: string

The type of script. Valid values are python and bash.

scriptUrl
Type: string

URL to download the verification script.

VerificationScriptEnvVar

Description

Represents an environment variable required to run a verification script.

Members
name
Type: string

The name of the environment variable.

value
Type: string

The value of the environment variable.

VpcConfig

Description

The VPC configuration for a pentest, specifying the VPC, security groups, and subnets to use during testing.

Members
securityGroupArns
Type: Array of strings

The Amazon Resource Names (ARNs) of the security groups for the VPC configuration.

subnetArns
Type: Array of strings

The Amazon Resource Names (ARNs) of the subnets for the VPC configuration.

vpcArn
Type: string

The Amazon Resource Name (ARN) of the VPC.