1. Packages
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. securityagent
  6. AgentSpace

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.62.0
published on Monday, Apr 20, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.securityagent.AgentSpace

aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.62.0
published on Monday, Apr 20, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource Type definition for AWS::SecurityAgent::AgentSpace

    Create AgentSpace Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AgentSpace(name: string, args?: AgentSpaceArgs, opts?: CustomResourceOptions);
    @overload
def AgentSpace(resource_name: str,
               args: Optional[AgentSpaceArgs] = None,
               opts: Optional[ResourceOptions] = None)

@overload
def AgentSpace(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               aws_resources: Optional[AgentSpaceAwsResourcesArgs] = None,
               code_review_settings: Optional[AgentSpaceCodeReviewSettingsArgs] = None,
               description: Optional[str] = None,
               integrated_resources: Optional[Sequence[AgentSpaceIntegratedResourceArgs]] = None,
               kms_key_id: Optional[str] = None,
               name: Optional[str] = None,
               tags: Optional[Sequence[_root_inputs.TagArgs]] = None,
               target_domain_ids: Optional[Sequence[str]] = None)
    func NewAgentSpace(ctx *Context, name string, args *AgentSpaceArgs, opts ...ResourceOption) (*AgentSpace, error)
    public AgentSpace(string name, AgentSpaceArgs? args = null, CustomResourceOptions? opts = null)
    public AgentSpace(String name, AgentSpaceArgs args)
public AgentSpace(String name, AgentSpaceArgs args, CustomResourceOptions options)

    type: aws-native:securityagent:AgentSpace
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AgentSpaceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AgentSpaceArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AgentSpaceArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AgentSpaceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AgentSpaceArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    AgentSpace Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AgentSpace resource accepts the following input properties:

    AwsResources Pulumi.AwsNative.SecurityAgent.Inputs.AgentSpaceAwsResources
    CodeReviewSettings Pulumi.AwsNative.SecurityAgent.Inputs.AgentSpaceCodeReviewSettings
    Description string
    Description of the agent space
    IntegratedResources List<Pulumi.AwsNative.SecurityAgent.Inputs.AgentSpaceIntegratedResource>
    KmsKeyId string
    Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.
    Name string
    Name of the agent space
    Tags List<Pulumi.AwsNative.Inputs.Tag>
    Tags for the agent space
    TargetDomainIds List<string>
    List of target domain identifiers registered with the agent space
    AwsResources AgentSpaceAwsResourcesArgs
    CodeReviewSettings AgentSpaceCodeReviewSettingsArgs
    Description string
    Description of the agent space
    IntegratedResources []AgentSpaceIntegratedResourceArgs
    KmsKeyId string
    Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.
    Name string
    Name of the agent space
    Tags TagArgs
    Tags for the agent space
    TargetDomainIds []string
    List of target domain identifiers registered with the agent space
    awsResources AgentSpaceAwsResources
    codeReviewSettings AgentSpaceCodeReviewSettings
    description String
    Description of the agent space
    integratedResources List<AgentSpaceIntegratedResource>
    kmsKeyId String
    Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.
    name String
    Name of the agent space
    tags List<Tag>
    Tags for the agent space
    targetDomainIds List<String>
    List of target domain identifiers registered with the agent space
    awsResources AgentSpaceAwsResources
    codeReviewSettings AgentSpaceCodeReviewSettings
    description string
    Description of the agent space
    integratedResources AgentSpaceIntegratedResource[]
    kmsKeyId string
    Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.
    name string
    Name of the agent space
    tags Tag[]
    Tags for the agent space
    targetDomainIds string[]
    List of target domain identifiers registered with the agent space
    aws_resources AgentSpaceAwsResourcesArgs
    code_review_settings AgentSpaceCodeReviewSettingsArgs
    description str
    Description of the agent space
    integrated_resources Sequence[AgentSpaceIntegratedResourceArgs]
    kms_key_id str
    Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.
    name str
    Name of the agent space
    tags Sequence[TagArgs]
    Tags for the agent space
    target_domain_ids Sequence[str]
    List of target domain identifiers registered with the agent space
    awsResources Property Map
    codeReviewSettings Property Map
    description String
    Description of the agent space
    integratedResources List<Property Map>
    kmsKeyId String
    Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.
    name String
    Name of the agent space
    tags List<Property Map>
    Tags for the agent space
    targetDomainIds List<String>
    List of target domain identifiers registered with the agent space

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AgentSpace resource produces the following output properties:

    AgentSpaceId string
    Unique identifier of the agent space
    CreatedAt string
    Timestamp when the agent space was created
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    Timestamp when the agent space was last updated
    AgentSpaceId string
    Unique identifier of the agent space
    CreatedAt string
    Timestamp when the agent space was created
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    Timestamp when the agent space was last updated
    agentSpaceId String
    Unique identifier of the agent space
    createdAt String
    Timestamp when the agent space was created
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    Timestamp when the agent space was last updated
    agentSpaceId string
    Unique identifier of the agent space
    createdAt string
    Timestamp when the agent space was created
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    Timestamp when the agent space was last updated
    agent_space_id str
    Unique identifier of the agent space
    created_at str
    Timestamp when the agent space was created
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    Timestamp when the agent space was last updated
    agentSpaceId String
    Unique identifier of the agent space
    createdAt String
    Timestamp when the agent space was created
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    Timestamp when the agent space was last updated

    Supporting Types

    AgentSpaceAwsResources, AgentSpaceAwsResourcesArgs

    AWS resource configuration
    IamRoles List<string>
    IAM role ARNs
    LambdaFunctionArns List<string>
    Lambda function ARNs used to retrieve tester credentials for pentests
    LogGroups List<string>
    CloudWatch log group ARNs
    S3Buckets List<string>
    S3 bucket ARNs
    SecretArns List<string>
    SecretsManager secret ARNs used to store tester credentials for pentests
    Vpcs List<Pulumi.AwsNative.SecurityAgent.Inputs.AgentSpaceVpcConfig>
    VPC configurations
    IamRoles []string
    IAM role ARNs
    LambdaFunctionArns []string
    Lambda function ARNs used to retrieve tester credentials for pentests
    LogGroups []string
    CloudWatch log group ARNs
    S3Buckets []string
    S3 bucket ARNs
    SecretArns []string
    SecretsManager secret ARNs used to store tester credentials for pentests
    Vpcs []AgentSpaceVpcConfig
    VPC configurations
    iamRoles List<String>
    IAM role ARNs
    lambdaFunctionArns List<String>
    Lambda function ARNs used to retrieve tester credentials for pentests
    logGroups List<String>
    CloudWatch log group ARNs
    s3Buckets List<String>
    S3 bucket ARNs
    secretArns List<String>
    SecretsManager secret ARNs used to store tester credentials for pentests
    vpcs List<AgentSpaceVpcConfig>
    VPC configurations
    iamRoles string[]
    IAM role ARNs
    lambdaFunctionArns string[]
    Lambda function ARNs used to retrieve tester credentials for pentests
    logGroups string[]
    CloudWatch log group ARNs
    s3Buckets string[]
    S3 bucket ARNs
    secretArns string[]
    SecretsManager secret ARNs used to store tester credentials for pentests
    vpcs AgentSpaceVpcConfig[]
    VPC configurations
    iam_roles Sequence[str]
    IAM role ARNs
    lambda_function_arns Sequence[str]
    Lambda function ARNs used to retrieve tester credentials for pentests
    log_groups Sequence[str]
    CloudWatch log group ARNs
    s3_buckets Sequence[str]
    S3 bucket ARNs
    secret_arns Sequence[str]
    SecretsManager secret ARNs used to store tester credentials for pentests
    vpcs Sequence[AgentSpaceVpcConfig]
    VPC configurations
    iamRoles List<String>
    IAM role ARNs
    lambdaFunctionArns List<String>
    Lambda function ARNs used to retrieve tester credentials for pentests
    logGroups List<String>
    CloudWatch log group ARNs
    s3Buckets List<String>
    S3 bucket ARNs
    secretArns List<String>
    SecretsManager secret ARNs used to store tester credentials for pentests
    vpcs List<Property Map>
    VPC configurations

    AgentSpaceCodeReviewSettings, AgentSpaceCodeReviewSettingsArgs

    Details of code review settings
    ControlsScanning bool
    Whether Controls are utilized for code review analysis
    GeneralPurposeScanning bool
    Whether general purpose analysis is performed for code review
    ControlsScanning bool
    Whether Controls are utilized for code review analysis
    GeneralPurposeScanning bool
    Whether general purpose analysis is performed for code review
    controlsScanning Boolean
    Whether Controls are utilized for code review analysis
    generalPurposeScanning Boolean
    Whether general purpose analysis is performed for code review
    controlsScanning boolean
    Whether Controls are utilized for code review analysis
    generalPurposeScanning boolean
    Whether general purpose analysis is performed for code review
    controls_scanning bool
    Whether Controls are utilized for code review analysis
    general_purpose_scanning bool
    Whether general purpose analysis is performed for code review
    controlsScanning Boolean
    Whether Controls are utilized for code review analysis
    generalPurposeScanning Boolean
    Whether general purpose analysis is performed for code review

    AgentSpaceGitHubCapabilitiesResource, AgentSpaceGitHubCapabilitiesResourceArgs

    GitHub repository capabilities
    LeaveComments bool
    Enables Code Review in the repository
    RemediateCode bool
    Enables creation of pull requests with automated fixes
    LeaveComments bool
    Enables Code Review in the repository
    RemediateCode bool
    Enables creation of pull requests with automated fixes
    leaveComments Boolean
    Enables Code Review in the repository
    remediateCode Boolean
    Enables creation of pull requests with automated fixes
    leaveComments boolean
    Enables Code Review in the repository
    remediateCode boolean
    Enables creation of pull requests with automated fixes
    leave_comments bool
    Enables Code Review in the repository
    remediate_code bool
    Enables creation of pull requests with automated fixes
    leaveComments Boolean
    Enables Code Review in the repository
    remediateCode Boolean
    Enables creation of pull requests with automated fixes

    AgentSpaceGitHubRepositoryResource, AgentSpaceGitHubRepositoryResourceArgs

    GitHub repository details
    Name string
    GitHub repository name
    Owner string
    GitHub repository owner (user or organization)
    Name string
    GitHub repository name
    Owner string
    GitHub repository owner (user or organization)
    name String
    GitHub repository name
    owner String
    GitHub repository owner (user or organization)
    name string
    GitHub repository name
    owner string
    GitHub repository owner (user or organization)
    name str
    GitHub repository name
    owner str
    GitHub repository owner (user or organization)
    name String
    GitHub repository name
    owner String
    GitHub repository owner (user or organization)

    AgentSpaceIntegratedResource, AgentSpaceIntegratedResourceArgs

    Integrated Resource details
    Integration string
    Unique identifier of the Provider Integration
    ProviderResources List<Pulumi.AwsNative.SecurityAgent.Inputs.AgentSpaceProviderResource>
    List of selected Resources from the Integration
    Integration string
    Unique identifier of the Provider Integration
    ProviderResources []AgentSpaceProviderResource
    List of selected Resources from the Integration
    integration String
    Unique identifier of the Provider Integration
    providerResources List<AgentSpaceProviderResource>
    List of selected Resources from the Integration
    integration string
    Unique identifier of the Provider Integration
    providerResources AgentSpaceProviderResource[]
    List of selected Resources from the Integration
    integration str
    Unique identifier of the Provider Integration
    provider_resources Sequence[AgentSpaceProviderResource]
    List of selected Resources from the Integration
    integration String
    Unique identifier of the Provider Integration
    providerResources List<Property Map>
    List of selected Resources from the Integration

    AgentSpaceProviderResource, AgentSpaceProviderResourceArgs

    Selected Resource (eg: Code Repository) from an Integration

    AgentSpaceVpcConfig, AgentSpaceVpcConfigArgs

    Customer VPC configuration that the security testing environment accesses
    SecurityGroupArns List<string>
    List of security group ARNs in the customer VPC
    SubnetArns List<string>
    List of subnet ARNs in the customer VPC
    VpcArn string
    ARN of the customer VPC
    SecurityGroupArns []string
    List of security group ARNs in the customer VPC
    SubnetArns []string
    List of subnet ARNs in the customer VPC
    VpcArn string
    ARN of the customer VPC
    securityGroupArns List<String>
    List of security group ARNs in the customer VPC
    subnetArns List<String>
    List of subnet ARNs in the customer VPC
    vpcArn String
    ARN of the customer VPC
    securityGroupArns string[]
    List of security group ARNs in the customer VPC
    subnetArns string[]
    List of subnet ARNs in the customer VPC
    vpcArn string
    ARN of the customer VPC
    security_group_arns Sequence[str]
    List of security group ARNs in the customer VPC
    subnet_arns Sequence[str]
    List of subnet ARNs in the customer VPC
    vpc_arn str
    ARN of the customer VPC
    securityGroupArns List<String>
    List of security group ARNs in the customer VPC
    subnetArns List<String>
    List of subnet ARNs in the customer VPC
    vpcArn String
    ARN of the customer VPC

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.62.0
    published on Monday, Apr 20, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native
      Try Pulumi Cloud free. Your team will thank you.