Aws/securityagent
@swamp/aws/securityagentv2026.10.25.1
01README
AWS SECURITYAGENT infrastructure models
02Release Notes
- Updated: application, integration, private_connection
03Behaviors
@swamp/aws/securityagent/agent-spacev2026.10.23.1agent_space.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Name | string | Name of the agent space |
| Description? | string | Description of the agent space |
| AwsResources? | object | AWS resource configuration |
| CodeReviewSettings? | object | Details of code review settings |
| KmsKeyId? | string | Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used. |
| IntegratedResources? | array | Integrated Resources configuration |
| TargetDomainIds? | array | List of target domain identifiers registered with the agent space |
| Tags? | array | Tags for the agent space |
fn create()
Create a SecurityAgent AgentSpace
fn get(identifier: string)
Get a SecurityAgent AgentSpace
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent AgentSpace |
fn update()
Update a SecurityAgent AgentSpace
fn delete(identifier: string)
Delete a SecurityAgent AgentSpace
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent AgentSpace |
fn sync()
Sync SecurityAgent AgentSpace state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent AgentSpace resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent AgentSpace resource state
@swamp/aws/securityagent/applicationv2026.10.25.1application.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| IdCConfiguration? | object | |
| RoleArn? | string | |
| DefaultKmsKeyId? | string | Identifier of a KMS key. Can be a key ID, key ARN, alias name, or alias ARN. |
| Tags? | array | Tags for the application |
fn create()
Create a SecurityAgent Application
fn get(identifier: string)
Get a SecurityAgent Application
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Application |
fn update()
Update a SecurityAgent Application
fn delete(identifier: string)
Delete a SecurityAgent Application
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Application |
fn sync()
Sync SecurityAgent Application state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent Application resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent Application resource state
@swamp/aws/securityagent/artifactv2026.10.23.1artifact.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| AgentSpaceId | string | The unique identifier of the agent space to add the artifact to. |
| ArtifactContent? | string | The binary content of the artifact to upload, encoded as a Base64 string. |
| ArtifactType | enum | The file type of the artifact. |
| FileName | string | The file name of the artifact. |
fn create()
Create a SecurityAgent Artifact
fn get(identifier: string)
Get a SecurityAgent Artifact
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Artifact |
fn delete(identifier: string)
Delete a SecurityAgent Artifact
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Artifact |
fn sync()
Sync SecurityAgent Artifact state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent Artifact resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent Artifact resource state
@swamp/aws/securityagent/integrationv2026.10.25.1integration.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Provider | enum | The integration provider. |
| ProviderInput? | object | The provider-specific input required to create the integration. Exactly one of the provider input objects must be specified. |
| DisplayName | string | The display name for the integration. |
| KmsKeyId? | string | The identifier of the AWS KMS key to use for encrypting data associated with the integration. Can be a key ID, key ARN, alias name, or alias ARN. |
| PrivateConnectionName? | string | The name of an active private connection used to reach a self-hosted provider instance over private networking. |
| Tags? | array | The tags to associate with the integration. |
fn create()
Create a SecurityAgent Integration
fn get(identifier: string)
Get a SecurityAgent Integration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Integration |
fn update()
Update a SecurityAgent Integration
fn delete(identifier: string)
Delete a SecurityAgent Integration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Integration |
fn sync()
Sync SecurityAgent Integration state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent Integration resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent Integration resource state
@swamp/aws/securityagent/pentestv2026.10.23.1pentest.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| AgentSpaceId | string | Identifier of agent space where the pentest should be created |
| Title? | string | Title of the penetration test |
| Assets | object | Collection of assets to be tested or used during the penetration test |
| ExcludeRiskTypes? | array | A list of risk types excluded from the pentest execution |
| ServiceRole | string | Service role for accessing resources |
| LogConfig? | object | CloudWatch logs config |
| VpcConfig? | object | VPC configuration that the security testing environment accesses |
| NetworkTrafficConfig? | object | Configuration for network traffic filtering |
| CodeRemediationStrategy? | enum | Strategy for code remediation on findings |
| DisableManagedSkills? | array | A list of managed skills to disable for this pentest |
| CleanUpStrategy? | enum | Strategy for cleaning up resources after pentest job completion |
fn create()
Create a SecurityAgent Pentest
fn get(identifier: string)
Get a SecurityAgent Pentest
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Pentest |
fn update()
Update a SecurityAgent Pentest
fn delete(identifier: string)
Delete a SecurityAgent Pentest
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent Pentest |
fn sync()
Sync SecurityAgent Pentest state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent Pentest resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent Pentest resource state
@swamp/aws/securityagent/private-connectionv2026.10.25.1private_connection.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| PrivateConnectionName | string | A unique name for the private connection within your account. |
| Mode? | object | The configuration for the private connection. Specify either a service-managed or a self-managed mode. |
| Certificate? | string | The PEM-encoded certificate chain for the private connection. |
| Tags? | array | The tags attached to the private connection. |
fn create()
Create a SecurityAgent PrivateConnection
fn get(identifier: string)
Get a SecurityAgent PrivateConnection
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent PrivateConnection |
fn update()
Update a SecurityAgent PrivateConnection
fn delete(identifier: string)
Delete a SecurityAgent PrivateConnection
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent PrivateConnection |
fn sync()
Sync SecurityAgent PrivateConnection state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent PrivateConnection resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent PrivateConnection resource state
@swamp/aws/securityagent/security-requirement-packv2026.10.23.1security_requirement_pack.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Name | string | Name of the security requirement pack |
| Description? | string | Description of the pack |
| Status? | enum | Whether the pack is enabled or disabled |
| KmsKeyId? | string | KMS key for client-side encryption of pack contents |
| SecurityRequirements? | array | Security requirements within this pack |
| Tags? | array | Tags for the security requirement pack |
fn create()
Create a SecurityAgent SecurityRequirementPack
fn get(identifier: string)
Get a SecurityAgent SecurityRequirementPack
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent SecurityRequirementPack |
fn update()
Update a SecurityAgent SecurityRequirementPack
fn delete(identifier: string)
Delete a SecurityAgent SecurityRequirementPack
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent SecurityRequirementPack |
fn sync()
Sync SecurityAgent SecurityRequirementPack state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent SecurityRequirementPack resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent SecurityRequirementPack resource state
@swamp/aws/securityagent/target-domainv2026.10.23.1target_domain.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| TargetDomainName | string | Domain name of the target domain |
| VerificationMethod | enum | Verification method for the target domain |
| VerificationDetails? | object | Verification details to verify registered target domain |
| Tags? | array | Tags for the target domain |
fn create()
Create a SecurityAgent TargetDomain
fn get(identifier: string)
Get a SecurityAgent TargetDomain
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent TargetDomain |
fn update()
Update a SecurityAgent TargetDomain
fn delete(identifier: string)
Delete a SecurityAgent TargetDomain
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityAgent TargetDomain |
fn sync()
Sync SecurityAgent TargetDomain state from AWS
fn list(maxPages?: number, resourceModel?: string)
List SecurityAgent TargetDomain resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— SecurityAgent TargetDomain resource state
04Previous Versions
2026.10.24.1AGPL-3.0-or-later
- Added: private_connection
Added 1 behaviors
2026.10.23.1AGPL-3.0-or-later(was none)
- Updated: agent_space, application, artifact, integration, pentest, security_requirement_pack, target_domain
2026.10.13.1
- Updated: agent_space, application, artifact, integration, pentest, security_requirement_pack, target_domain
2026.10.09.1
- Added: integration
Added 1 behaviors
2026.10.08.1
2026.10.06.1
2026.10.04.1
2026.10.03.1
2026.10.02.1
2026.10.01.1
2026.09.30.1
2026.09.29.1
2026.09.28.1
2026.09.27.1
2026.09.26.1
2026.09.25.1
2026.09.24.1
2026.09.23.1
2026.09.21.1
05Stats
A
100 / 100
Downloads
191
Archive size
1.6 MB
Verified by Swamp
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Docs keep secrets in a vault1/1earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License2/2earned
- Verified public repository2/2earned
06Platforms
07Labels