aws-native.securityagent.getPentest

AWS Cloud Control v1.62.0, Apr 20 26

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.62.0
published on Monday, Apr 20, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws-native

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.62.0
published on Monday, Apr 20, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws-native

Using getPentest

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getPentest(args: GetPentestArgs, opts?: InvokeOptions): Promise<GetPentestResult>
function getPentestOutput(args: GetPentestOutputArgs, opts?: InvokeOptions): Output<GetPentestResult>

def get_pentest(agent_space_id: Optional[str] = None,
                pentest_id: Optional[str] = None,
                opts: Optional[InvokeOptions] = None) -> GetPentestResult
def get_pentest_output(agent_space_id: Optional[pulumi.Input[str]] = None,
                pentest_id: Optional[pulumi.Input[str]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetPentestResult]

func LookupPentest(ctx *Context, args *LookupPentestArgs, opts ...InvokeOption) (*LookupPentestResult, error)
func LookupPentestOutput(ctx *Context, args *LookupPentestOutputArgs, opts ...InvokeOption) LookupPentestResultOutput

> Note: This function is named LookupPentest in the Go SDK.

public static class GetPentest 
{
    public static Task<GetPentestResult> InvokeAsync(GetPentestArgs args, InvokeOptions? opts = null)
    public static Output<GetPentestResult> Invoke(GetPentestInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetPentestResult> getPentest(GetPentestArgs args, InvokeOptions options)
public static Output<GetPentestResult> getPentest(GetPentestArgs args, InvokeOptions options)

fn::invoke:
  function: aws-native:securityagent:getPentest
  arguments:
    # arguments dictionary

The following arguments are supported:

AgentSpaceId string: Identifier of agent space where the pentest should be created
PentestId string: Unique identifier of the pentest

AgentSpaceId string: Identifier of agent space where the pentest should be created
PentestId string: Unique identifier of the pentest

agentSpaceId String: Identifier of agent space where the pentest should be created
pentestId String: Unique identifier of the pentest

agentSpaceId string: Identifier of agent space where the pentest should be created
pentestId string: Unique identifier of the pentest

agent_space_id str: Identifier of agent space where the pentest should be created
pentest_id str: Unique identifier of the pentest

agentSpaceId String: Identifier of agent space where the pentest should be created
pentestId String: Unique identifier of the pentest

getPentest Result

The following output properties are available:

Assets Pulumi.AwsNative.SecurityAgent.Outputs.PentestAssets: Collection of assets to be tested or used during the penetration test
CodeRemediationStrategy Pulumi.AwsNative.SecurityAgent.PentestCodeRemediationStrategy: Strategy for code remediation on findings
CreatedAt string: Timestamp when the pentest was created
ExcludeRiskTypes List<Pulumi.AwsNative.SecurityAgent.PentestRiskType>: A list of risk types excluded from the pentest execution
LogConfig Pulumi.AwsNative.SecurityAgent.Outputs.PentestCloudWatchLog: CloudWatch logs config
NetworkTrafficConfig Pulumi.AwsNative.SecurityAgent.Outputs.PentestNetworkTrafficConfig: Configuration for network traffic filtering
PentestId string: Unique identifier of the pentest
ServiceRole string: Service role for accessing resources
Title string: Title of the penetration test
UpdatedAt string: Timestamp when the pentest was last updated
VpcConfig Pulumi.AwsNative.SecurityAgent.Outputs.PentestVpcConfig: VPC configuration that the security testing environment accesses

Assets PentestAssets: Collection of assets to be tested or used during the penetration test
CodeRemediationStrategy PentestCodeRemediationStrategy: Strategy for code remediation on findings
CreatedAt string: Timestamp when the pentest was created
ExcludeRiskTypes []PentestRiskType: A list of risk types excluded from the pentest execution
LogConfig PentestCloudWatchLog: CloudWatch logs config
NetworkTrafficConfig PentestNetworkTrafficConfig: Configuration for network traffic filtering
PentestId string: Unique identifier of the pentest
ServiceRole string: Service role for accessing resources
Title string: Title of the penetration test
UpdatedAt string: Timestamp when the pentest was last updated
VpcConfig PentestVpcConfig: VPC configuration that the security testing environment accesses

assets PentestAssets: Collection of assets to be tested or used during the penetration test
codeRemediationStrategy PentestCodeRemediationStrategy: Strategy for code remediation on findings
createdAt String: Timestamp when the pentest was created
excludeRiskTypes List<PentestRiskType>: A list of risk types excluded from the pentest execution
logConfig PentestCloudWatchLog: CloudWatch logs config
networkTrafficConfig PentestNetworkTrafficConfig: Configuration for network traffic filtering
pentestId String: Unique identifier of the pentest
serviceRole String: Service role for accessing resources
title String: Title of the penetration test
updatedAt String: Timestamp when the pentest was last updated
vpcConfig PentestVpcConfig: VPC configuration that the security testing environment accesses

assets PentestAssets: Collection of assets to be tested or used during the penetration test
codeRemediationStrategy PentestCodeRemediationStrategy: Strategy for code remediation on findings
createdAt string: Timestamp when the pentest was created
excludeRiskTypes PentestRiskType[]: A list of risk types excluded from the pentest execution
logConfig PentestCloudWatchLog: CloudWatch logs config
networkTrafficConfig PentestNetworkTrafficConfig: Configuration for network traffic filtering
pentestId string: Unique identifier of the pentest
serviceRole string: Service role for accessing resources
title string: Title of the penetration test
updatedAt string: Timestamp when the pentest was last updated
vpcConfig PentestVpcConfig: VPC configuration that the security testing environment accesses

assets PentestAssets: Collection of assets to be tested or used during the penetration test
code_remediation_strategy PentestCodeRemediationStrategy: Strategy for code remediation on findings
created_at str: Timestamp when the pentest was created
exclude_risk_types Sequence[PentestRiskType]: A list of risk types excluded from the pentest execution
log_config PentestCloudWatchLog: CloudWatch logs config
network_traffic_config PentestNetworkTrafficConfig: Configuration for network traffic filtering
pentest_id str: Unique identifier of the pentest
service_role str: Service role for accessing resources
title str: Title of the penetration test
updated_at str: Timestamp when the pentest was last updated
vpc_config PentestVpcConfig: VPC configuration that the security testing environment accesses

assets Property Map: Collection of assets to be tested or used during the penetration test
codeRemediationStrategy "AUTOMATIC" | "DISABLED": Strategy for code remediation on findings
createdAt String: Timestamp when the pentest was created
excludeRiskTypes List<"CROSS_SITE_SCRIPTING" | "DEFAULT_CREDENTIALS" | "INSECURE_DIRECT_OBJECT_REFERENCE" | "PRIVILEGE_ESCALATION" | "SERVER_SIDE_TEMPLATE_INJECTION" | "COMMAND_INJECTION" | "CODE_INJECTION" | "SQL_INJECTION" | "ARBITRARY_FILE_UPLOAD" | "INSECURE_DESERIALIZATION" | "LOCAL_FILE_INCLUSION" | "INFORMATION_DISCLOSURE" | "PATH_TRAVERSAL" | "SERVER_SIDE_REQUEST_FORGERY" | "JSON_WEB_TOKEN_VULNERABILITIES" | "XML_EXTERNAL_ENTITY" | "FILE_DELETION" | "OTHER" | "GRAPHQL_VULNERABILITIES" | "BUSINESS_LOGIC_VULNERABILITIES" | "CRYPTOGRAPHIC_VULNERABILITIES" | "DENIAL_OF_SERVICE" | "FILE_ACCESS" | "FILE_CREATION" | "DATABASE_MODIFICATION" | "DATABASE_ACCESS" | "OUTBOUND_SERVICE_REQUEST" | "UNKNOWN">: A list of risk types excluded from the pentest execution
logConfig Property Map: CloudWatch logs config
networkTrafficConfig Property Map: Configuration for network traffic filtering
pentestId String: Unique identifier of the pentest
serviceRole String: Service role for accessing resources
title String: Title of the penetration test
updatedAt String: Timestamp when the pentest was last updated
vpcConfig Property Map: VPC configuration that the security testing environment accesses

Supporting Types

PentestActor

Authentication Pulumi.AwsNative.SecurityAgent.Inputs.PentestAuthentication: Authentication credentials for this actor
Description string: Description of the actor
Identifier string: Identifier for the actor
Uris List<string>: List of URIs this actor is authorized to access

Authentication PentestAuthentication: Authentication credentials for this actor
Description string: Description of the actor
Identifier string: Identifier for the actor
Uris []string: List of URIs this actor is authorized to access

authentication PentestAuthentication: Authentication credentials for this actor
description String: Description of the actor
identifier String: Identifier for the actor
uris List<String>: List of URIs this actor is authorized to access

authentication PentestAuthentication: Authentication credentials for this actor
description string: Description of the actor
identifier string: Identifier for the actor
uris string[]: List of URIs this actor is authorized to access

authentication PentestAuthentication: Authentication credentials for this actor
description str: Description of the actor
identifier str: Identifier for the actor
uris Sequence[str]: List of URIs this actor is authorized to access

authentication Property Map: Authentication credentials for this actor
description String: Description of the actor
identifier String: Identifier for the actor
uris List<String>: List of URIs this actor is authorized to access

PentestAssets

Actors List<Pulumi.AwsNative.SecurityAgent.Inputs.PentestActor>: List of actors used during testing
Documents List<Pulumi.AwsNative.SecurityAgent.Inputs.PentestDocumentInfo>: List of documents providing additional context for the pentest
Endpoints List<Pulumi.AwsNative.SecurityAgent.Inputs.PentestEndpoint>: List of endpoints to test
IntegratedRepositories List<Pulumi.AwsNative.SecurityAgent.Inputs.PentestIntegratedRepository>: List of repositories connected via provider integrations
SourceCode List<Pulumi.AwsNative.SecurityAgent.Inputs.PentestSourceCodeRepository>: List of source code repositories to analyze

Actors []PentestActor: List of actors used during testing
Documents []PentestDocumentInfo: List of documents providing additional context for the pentest
Endpoints []PentestEndpoint: List of endpoints to test
IntegratedRepositories []PentestIntegratedRepository: List of repositories connected via provider integrations
SourceCode []PentestSourceCodeRepository: List of source code repositories to analyze

actors List<PentestActor>: List of actors used during testing
documents List<PentestDocumentInfo>: List of documents providing additional context for the pentest
endpoints List<PentestEndpoint>: List of endpoints to test
integratedRepositories List<PentestIntegratedRepository>: List of repositories connected via provider integrations
sourceCode List<PentestSourceCodeRepository>: List of source code repositories to analyze

actors PentestActor[]: List of actors used during testing
documents PentestDocumentInfo[]: List of documents providing additional context for the pentest
endpoints PentestEndpoint[]: List of endpoints to test
integratedRepositories PentestIntegratedRepository[]: List of repositories connected via provider integrations
sourceCode PentestSourceCodeRepository[]: List of source code repositories to analyze

actors Sequence[PentestActor]: List of actors used during testing
documents Sequence[PentestDocumentInfo]: List of documents providing additional context for the pentest
endpoints Sequence[PentestEndpoint]: List of endpoints to test
integrated_repositories Sequence[PentestIntegratedRepository]: List of repositories connected via provider integrations
source_code Sequence[PentestSourceCodeRepository]: List of source code repositories to analyze

actors List<Property Map>: List of actors used during testing
documents List<Property Map>: List of documents providing additional context for the pentest
endpoints List<Property Map>: List of endpoints to test
integratedRepositories List<Property Map>: List of repositories connected via provider integrations
sourceCode List<Property Map>: List of source code repositories to analyze

PentestAuthentication

ProviderType Pulumi.AwsNative.SecurityAgent.PentestAuthenticationProviderType: Type of authentication provider
Value string: Reference value for the authentication provider, such as a secret ARN or Lambda ARN

ProviderType PentestAuthenticationProviderType: Type of authentication provider
Value string: Reference value for the authentication provider, such as a secret ARN or Lambda ARN

providerType PentestAuthenticationProviderType: Type of authentication provider
value String: Reference value for the authentication provider, such as a secret ARN or Lambda ARN

providerType PentestAuthenticationProviderType: Type of authentication provider
value string: Reference value for the authentication provider, such as a secret ARN or Lambda ARN

provider_type PentestAuthenticationProviderType: Type of authentication provider
value str: Reference value for the authentication provider, such as a secret ARN or Lambda ARN

providerType "SECRETS_MANAGER" | "AWS_LAMBDA" | "AWS_IAM_ROLE" | "AWS_INTERNAL": Type of authentication provider
value String: Reference value for the authentication provider, such as a secret ARN or Lambda ARN

PentestAuthenticationProviderType

PentestCloudWatchLog

LogGroup string: CloudWatch log group
LogStream string: CloudWatch log stream

LogGroup string: CloudWatch log group
LogStream string: CloudWatch log stream

logGroup String: CloudWatch log group
logStream String: CloudWatch log stream

logGroup string: CloudWatch log group
logStream string: CloudWatch log stream

log_group str: CloudWatch log group
log_stream str: CloudWatch log stream

logGroup String: CloudWatch log group
logStream String: CloudWatch log stream

PentestCodeRemediationStrategy

PentestCustomHeader

Name string: Name of the header
Value string: Value of the header

Name string: Name of the header
Value string: Value of the header

name String: Name of the header
value String: Value of the header

name string: Name of the header
value string: Value of the header

name str: Name of the header
value str: Value of the header

name String: Name of the header
value String: Value of the header

PentestDocumentInfo

ArtifactId string: Artifact identifier
S3Location string: S3 document location

ArtifactId string: Artifact identifier
S3Location string: S3 document location

artifactId String: Artifact identifier
s3Location String: S3 document location

artifactId string: Artifact identifier
s3Location string: S3 document location

artifact_id str: Artifact identifier
s3_location str: S3 document location

artifactId String: Artifact identifier
s3Location String: S3 document location

PentestEndpoint

Uri string: URI of the endpoint to test

Uri string: URI of the endpoint to test

uri String: URI of the endpoint to test

uri string: URI of the endpoint to test

uri str: URI of the endpoint to test

uri String: URI of the endpoint to test

PentestIntegratedRepository

IntegrationId string: Unique identifier of the provider integration
ProviderResourceId string: Identifier of the resource within the provider integration

IntegrationId string: Unique identifier of the provider integration
ProviderResourceId string: Identifier of the resource within the provider integration

integrationId String: Unique identifier of the provider integration
providerResourceId String: Identifier of the resource within the provider integration

integrationId string: Unique identifier of the provider integration
providerResourceId string: Identifier of the resource within the provider integration

integration_id str: Unique identifier of the provider integration
provider_resource_id str: Identifier of the resource within the provider integration

integrationId String: Unique identifier of the provider integration
providerResourceId String: Identifier of the resource within the provider integration

PentestNetworkTrafficConfig

CustomHeaders List<Pulumi.AwsNative.SecurityAgent.Inputs.PentestCustomHeader>: Custom headers to include in outbound requests
Rules List<Pulumi.AwsNative.SecurityAgent.Inputs.PentestNetworkTrafficRule>: Ordered list of network traffic rules

CustomHeaders []PentestCustomHeader: Custom headers to include in outbound requests
Rules []PentestNetworkTrafficRule: Ordered list of network traffic rules

customHeaders List<PentestCustomHeader>: Custom headers to include in outbound requests
rules List<PentestNetworkTrafficRule>: Ordered list of network traffic rules

customHeaders PentestCustomHeader[]: Custom headers to include in outbound requests
rules PentestNetworkTrafficRule[]: Ordered list of network traffic rules

custom_headers Sequence[PentestCustomHeader]: Custom headers to include in outbound requests
rules Sequence[PentestNetworkTrafficRule]: Ordered list of network traffic rules

customHeaders List<Property Map>: Custom headers to include in outbound requests
rules List<Property Map>: Ordered list of network traffic rules

PentestNetworkTrafficRule

Effect Pulumi.AwsNative.SecurityAgent.PentestNetworkTrafficRuleEffect: Whether to allow or deny traffic matching this rule
NetworkTrafficRuleType Pulumi.AwsNative.SecurityAgent.PentestNetworkTrafficRuleNetworkTrafficRuleType: Type of pattern matching for this rule
Pattern string: URL pattern this rule applies to

Effect PentestNetworkTrafficRuleEffect: Whether to allow or deny traffic matching this rule
NetworkTrafficRuleType PentestNetworkTrafficRuleNetworkTrafficRuleType: Type of pattern matching for this rule
Pattern string: URL pattern this rule applies to

effect PentestNetworkTrafficRuleEffect: Whether to allow or deny traffic matching this rule
networkTrafficRuleType PentestNetworkTrafficRuleNetworkTrafficRuleType: Type of pattern matching for this rule
pattern String: URL pattern this rule applies to

effect PentestNetworkTrafficRuleEffect: Whether to allow or deny traffic matching this rule
networkTrafficRuleType PentestNetworkTrafficRuleNetworkTrafficRuleType: Type of pattern matching for this rule
pattern string: URL pattern this rule applies to

effect PentestNetworkTrafficRuleEffect: Whether to allow or deny traffic matching this rule
network_traffic_rule_type PentestNetworkTrafficRuleNetworkTrafficRuleType: Type of pattern matching for this rule
pattern str: URL pattern this rule applies to

effect "ALLOW" | "DENY": Whether to allow or deny traffic matching this rule
networkTrafficRuleType "URL": Type of pattern matching for this rule
pattern String: URL pattern this rule applies to

PentestNetworkTrafficRuleEffect

PentestNetworkTrafficRuleNetworkTrafficRuleType

PentestRiskType

PentestSourceCodeRepository

S3Location string: S3 source code location

S3Location string: S3 source code location

s3Location String: S3 source code location

s3Location string: S3 source code location

s3_location str: S3 source code location

s3Location String: S3 source code location

PentestVpcConfig

SecurityGroupArns List<string>: List of security groups in the VPC
SubnetArns List<string>: List of subnets in the VPC
VpcArn string

SecurityGroupArns []string: List of security groups in the VPC
SubnetArns []string: List of subnets in the VPC
VpcArn string

securityGroupArns List<String>: List of security groups in the VPC
subnetArns List<String>: List of subnets in the VPC
vpcArn String

securityGroupArns string[]: List of security groups in the VPC
subnetArns string[]: List of subnets in the VPC
vpcArn string

security_group_arns Sequence[str]: List of security groups in the VPC
subnet_arns Sequence[str]: List of subnets in the VPC
vpc_arn str

securityGroupArns List<String>: List of security groups in the VPC
subnetArns List<String>: List of subnets in the VPC
vpcArn String

Package Details

Repository: AWS Native pulumi/pulumi-aws-native
License: Apache-2.0

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.62.0
published on Monday, Apr 20, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws-native

aws-native.securityagent.getPentest

On this page

On this page

Using getPentest

getPentest Result

Supporting Types

PentestActor

PentestAssets

PentestAuthentication

PentestAuthenticationProviderType

PentestCloudWatchLog

PentestCodeRemediationStrategy

PentestCustomHeader

PentestDocumentInfo

PentestEndpoint

PentestIntegratedRepository

PentestNetworkTrafficConfig

PentestNetworkTrafficRule

PentestNetworkTrafficRuleEffect

PentestNetworkTrafficRuleNetworkTrafficRuleType

PentestRiskType

PentestSourceCodeRepository

PentestVpcConfig

Package Details

On this page

On this page