securityagent

111 actions in the securityagent service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

securityagent:AddArtifact

Write

Grants permission to add an Artifact for the given Agent Space

securityagent:BatchCreateSecurityRequirements

Write

Grants permission to batch create security requirements in a customer managed pack

securityagent:BatchDeleteCodeReviews

Write

Grants permission to delete multiple code reviews in a single request

securityagent:BatchDeletePentests

Write

Grants permission to delete multiple penetration tests in a single request

securityagent:BatchDeleteSecurityRequirements

Write

Grants permission to batch delete security requirements from a customer managed pack

securityagent:BatchDeleteThreatModels

Write

Grants permission to delete multiple threat models in a single request

securityagent:BatchDeleteThreats

Write

Grants permission to delete multiple threats

securityagent:BatchGetAgentSpaces

Read

Grants permission to retrieve multiple agent spaces in a single request

securityagent:BatchGetArtifactMetadata

Read

Grants permission to retrieve one or more Artifact Metadata records for the given Agent Space

securityagent:BatchGetCodeReviewJobs

Read

Grants permission to retrieve multiple code review jobs in a single request

securityagent:BatchGetCodeReviewJobTasks

Read

Grants permission to retrieve multiple code review job tasks in a single request

securityagent:BatchGetCodeReviews

Read

Grants permission to retrieve multiple code reviews in a single request

securityagent:BatchGetFindings

Read

Grants permission to retrieve multiple security testing findings in a single request

securityagent:BatchGetPentestJobContentMetadata

Read

Grants permission to retrieve multiple pentest job contents metadata in a single request

securityagent:BatchGetPentestJobs

Read

Grants permission to retrieve multiple security testing jobs in a single request

securityagent:BatchGetPentestJobTasks

Read

Grants permission to retrieve multiple pentest job tasks in a single request

securityagent:BatchGetPentests

Read

Grants permission to retrieve multiple penetration tests in a single request

securityagent:BatchGetSecurityRequirements

Read

Grants permission to retrieve multiple security requirements in a single request

securityagent:BatchGetTargetDomains

Read

Grants permission to retrieve multiple target domains in a single request

securityagent:BatchGetThreatModelJobs

Read

Grants permission to retrieve details for one or more threat model jobs

securityagent:BatchGetThreatModelJobTasks

Read

Grants permission to retrieve multiple tasks for a threat model job in a single request

securityagent:BatchGetThreatModels

Read

Grants permission to retrieve multiple threat models in a single request

securityagent:BatchGetThreats

Read

Grants permission to retrieve details for one or more threats

securityagent:BatchUpdateSecurityRequirements

Write

Grants permission to batch update security requirements within a customer managed pack

securityagent:CreateAgentSpace

Write

Grants permission to create an agent space record

securityagent:CreateApplication

Write

Grants permission to create a new application

securityagent:CreateCodeReview

Write

Grants permission to create a new code review configuration

securityagent:CreateDesignReview

Write

Grants permission to create a design review

securityagent:CreateIntegration

Write

Grants permission to create a security testing integration

securityagent:CreateMembership

Write

Grants permission to add a single member to a agent space with specified role

securityagent:CreateOneTimeLoginSession

Write

Grants permission to create a one time login session

securityagent:CreatePentest

Write

Grants permission to create a new penetration test configuration

securityagent:CreatePrivateConnection

Write

Grants permission to create a private connection for VPC Lattice integration

securityagent:CreateSecurityRequirement

Write

Grants permission to add a customer managed Security Requirement

securityagent:CreateSecurityRequirementPack

Write

Grants permission to create a customer managed security requirement pack

securityagent:CreateTargetDomain

Write

Grants permission to create a target domain record

securityagent:CreateThreat

Write

Grants permission to create a threat in a threat model

securityagent:CreateThreatModel

Write

Grants permission to create a new threat model configuration

securityagent:DeleteAgentSpace

Write

Grants permission to delete an agent space record

securityagent:DeleteApplication

Write

Grants permission to delete application

securityagent:DeleteArtifact

Write

Grants permission to delete an Artifact

securityagent:DeleteDesignReview

Write

Grants permission to delete a design review

securityagent:DeleteIntegration

Write

Grants permission to delete the integration of an application

securityagent:DeleteMembership

Write

Grants permission to remove a single member associated to an agent space

securityagent:DeletePrivateConnection

Write

Grants permission to delete a private connection

securityagent:DeleteSecurityRequirement

Write

Grants permission to delete a customer managed Security Requirement

securityagent:DeleteSecurityRequirementPack

Write

Grants permission to delete a customer managed security requirement pack and all its associated security requirements

securityagent:DeleteTargetDomain

Write

Grants permission to delete a target domain record

securityagent:DescribePrivateConnection

Read

Grants permission to describe a private connection

securityagent:GetApplication

Read

Grants permission to get application details by application ID

securityagent:GetArtifact

Read

Grants permission to retrieve an Artifact for the given Agent Space

securityagent:GetDesignReview

Read

Grants permission to get the status of the associated agent space design review

securityagent:GetDesignReviewArtifact

Read

Grants permission to get design review artifact for a specific document

securityagent:GetDesignReviewFeedback

Read

Grants permission to get feedback for a design review comment

securityagent:GetIntegration

Read

Grants permission to get the integration metadata by ID

securityagent:GetProviderRegistrationManifest

Read

Grants permission to retrieve the provider registration manifest used for browser-based integration registration

securityagent:GetSecurityRequirement

Read

Grants permission to retrieve a Security Requirement

securityagent:GetSecurityRequirementPack

Read

Grants permission to retrieve a security requirement pack

securityagent:HandleProviderRegistrationCallback

Write

Grants permission to handle the provider OAuth registration callback that completes integration setup

securityagent:ImportSecurityRequirements

Write

Grants permission to import security requirements from uploaded documents for a customer managed security requirement pack

securityagent:InitiateProviderRegistration

Write

Grants permission to initiate the registration of Security Agent App for the given provider (eg: GitHub)

securityagent:ListAgentSpaces

List

Grants permission to list agent spaces

securityagent:ListApplications

List

Grants permission to list all applications in the account

securityagent:ListArtifacts

List

Grants permission to list all artifacts for the given agent space

securityagent:ListCodeReviewJobsForCodeReview

List

Grants permission to list code review jobs associated with a code review

securityagent:ListCodeReviewJobTasks

List

Grants permission to list tasks associated with a code review job

securityagent:ListCodeReviews

List

Grants permission to list code reviews with optional filtering by status

securityagent:ListDesignReviewComments

List

Grants permission to list design review comments

securityagent:ListDesignReviews

List

Grants permission to list all design reviews for the given agent space

securityagent:ListDiscoveredEndpoints

List

Grants permission to list discovered endpoints associated with a pentest job with optional URI prefix filtering

securityagent:ListFindings

List

Grants permission to list findings with filtering and pagination support

securityagent:ListIntegratedResources

List

Grants permission to list integrated resources for an agent space

securityagent:ListIntegrations

List

Grants permission to get the integrations owned by the caller's AWS account

securityagent:ListMemberships

List

Grants permission to list all members associated to an agent space with pagination support

securityagent:ListPentestJobsForPentest

List

Grants permission to list penetration test jobs associated with a penetration test

securityagent:ListPentestJobTasks

List

Grants permission to list pentest job tasks associated with a pentest job

securityagent:ListPentests

List

Grants permission to list penetration tests with optional filtering by status

securityagent:ListPrivateConnections

List

Grants permission to list private connections in the account

securityagent:ListResourcesFromIntegration

List

Grants permission to list resources from Integration

securityagent:ListSecurityRequirementPacks

List

Grants permission to list all security requirement packs in the account

securityagent:ListSecurityRequirements

List

Grants permission to list all Security Requirements

securityagent:ListTagsForResource

Read

Grants permission to list the tags for a resource

securityagent:ListTargetDomains

List

Grants permission to list target domains

securityagent:ListThreatModelJobs

List

Grants permission to list threat model jobs for a threat model

securityagent:ListThreatModelJobTasks

List

Grants permission to list tasks associated with a specific threat model job

securityagent:ListThreatModels

List

Grants permission to list threat models for an agent space

securityagent:ListThreats

List

Grants permission to list threats for a threat model job with filtering and pagination support

securityagent:PutDesignReviewFeedback

Write

Grants permission to submit feedback for a design review comment

securityagent:StartCodeRemediation

Write

Grants permission to start code remediation for the findings

securityagent:StartCodeReviewJob

Write

Grants permission to initiate the execution of a code review

securityagent:StartPentestJob

Write

Grants permission to initiate the execution of a penetration test

securityagent:StartThreatModelJob

Write

Grants permission to initiate the execution of a threat model job

securityagent:StopCodeReviewJob

Write

Grants permission to stop the execution of a running code review

securityagent:StopPentestJob

Write

Grants permission to stop the execution of a running penetration test

securityagent:StopThreatModelJob

Write

Grants permission to stop a running threat model job

securityagent:TagResource

Tagging

Grants permission to add tags to a resource

securityagent:ToggleManagedSecurityRequirement

Write

Grants permission to toggle the status of a managed Security Requirement

securityagent:UntagResource

Tagging

Grants permission to remove tags from a resource

securityagent:UpdateAgentSpace

Write

Grants permission to update an agent space record

securityagent:UpdateApplication

Write

Grants permission to update application configuration

securityagent:UpdateCodeReview

Write

Grants permission to update an existing code review with new configuration or settings

securityagent:UpdateFinding

Write

Grants permission to update an existing security finding with new details or status

securityagent:UpdateIntegratedResources

Write

Grants permission to update integrated resources for an agent space

securityagent:UpdatePentest

Write

Grants permission to update an existing penetration test with new configuration or settings

securityagent:UpdatePrivateConnectionCertificate

Write

Grants permission to update the certificate associated with a private connection

securityagent:UpdateSecurityRequirement

Write

Grants permission to update a customer managed Security Requirement

securityagent:UpdateSecurityRequirementPack

Write

Grants permission to update a security requirement pack

securityagent:UpdateTargetDomain

Write

Grants permission to update a target domain record

securityagent:UpdateThreat

Write

Grants permission to update a threat

securityagent:UpdateThreatModel

Write

Grants permission to update an existing threat model with new configuration

securityagent:VerifyTargetDomain

Write

Grants permission to verify ownership for a registered target domain