---
type: resource-type
title: Pentest
description: aws resource type AWS::SecurityAgent::Pentest
name: Pentest
lexicon: aws
resource_type: AWS::SecurityAgent::Pentest
---
`AWS::SecurityAgent::Pentest`, a resource type of the aws lexicon.

## Properties

- `AgentSpaceId` (`string`, required): Identifier of agent space where the pentest should be created
- `Assets` (`Pentest_Assets`, required): Collection of assets to be tested or used during the penetration test
- `ServiceRole` (`string`, required): Service role for accessing resources
- `CleanUpStrategy` (`Pentest_CleanUpStrategy`, optional): Strategy for cleaning up resources after pentest job completion
- `CodeRemediationStrategy` (`Pentest_CodeRemediationStrategy`, optional): Strategy for code remediation on findings
- `CreatedAt` (`string`, optional): Timestamp when the pentest was created
- `DisableManagedSkills` (`Pentest_SkillType[]`, optional): A list of managed skills to disable for this pentest
- `ExcludeRiskTypes` (`Pentest_RiskType[]`, optional): A list of risk types excluded from the pentest execution
- `LogConfig` (`Pentest_CloudWatchLog`, optional): CloudWatch logs config
- `NetworkTrafficConfig` (`Pentest_NetworkTrafficConfig`, optional): Configuration for network traffic filtering
- `PentestId` (`string`, optional): Unique identifier of the pentest
- `Title` (`string`, optional): Title of the penetration test
- `UpdatedAt` (`string`, optional): Timestamp when the pentest was last updated
- `VpcConfig` (`Pentest_VpcConfig`, optional): VPC configuration that the security testing environment accesses

## Attributes

- `CreatedAt`
- `PentestId`
- `UpdatedAt`