Schedule a penetration test

In AWS Security Agent, you can schedule a penetration test to run automatically, either once at a date and time that you choose or on a repeating schedule. For example, you can run a penetration test every Monday at 09:00 to retest an application after each weekly release. AWS Security Agent uses Amazon EventBridge Scheduler to start each run.

Before you can schedule a penetration test, an administrator must enable scheduling for the Agent Space in the AWS Management Console. For information about how to enable it, see (Optional) Enable penetration test scheduling.

A scheduled run uses the configuration that the penetration test has when the run starts. For more information, see Create a penetration test.

Prerequisites

Before you begin, make sure that you have the following:

• Access to the AWS Security Agent web application

• A penetration test that you have created. You can’t schedule a draft penetration test.

• Scheduling enabled for the Agent Space. If it isn’t, the schedule page shows the message Scheduling isn’t enabled for this agent space.

Create a schedule

Each penetration test can have one schedule, either a one-time schedule or a repeating schedule. The time zone defaults to the time zone of your browser.

1. Sign in to the AWS Security Agent web application.

2. Choose Penetration tests.

3. Choose the penetration test that you want to schedule.

4. On the penetration test details page, choose Schedule, next to Start run.

5. On the Schedule pentest page, in the Occurrence section, choose Repeating schedule or One-time schedule, and then enter the settings. For descriptions of the settings, see Schedule settings.

6. In the Next runs section, review when the penetration test runs next.

7. Choose Save.

The penetration test details page opens, and the Scheduled runs table lists the upcoming runs.

Schedule settings

For a repeating schedule, the penetration test runs repeatedly until you remove the schedule. Enter the following settings:

• Frequency – Choose Daily, Weekly, or Monthly.

• Days of the week – For a weekly schedule, select one or more days.

• Days of the month – For a monthly schedule, select one or more days.

• Time – Enter the start time in 24-hour hh:mm format, and select the time zone.

• Advanced – (Optional) To run the schedule only in certain months, expand this section and select the months.

For a one-time schedule, the penetration test runs once, and AWS Security Agent removes the schedule after the run starts. Enter the Date and time for the run, and select the time zone. The date and time must be in the future.

View scheduled runs

After you save a schedule, the Scheduled runs table appears on the penetration test details page. The table lists each upcoming run with its scheduled start time, the time remaining until it starts, and whether it comes from a one-time or a repeating schedule.

A run appears in the Penetration test runs list only after it starts. You can review its progress and findings in the same way as a run that you start yourself. For more information, see Review findings from a penetration test.

Edit or remove a schedule

1. Sign in to the AWS Security Agent web application.

2. Choose Penetration tests.

3. Choose the penetration test.

4. On the penetration test details page, choose Edit schedule.

5. In the Occurrence section, do one of the following:

   • To change the schedule, update the settings. To switch between a one-time schedule and a repeating schedule, choose the other option.

   • To remove the schedule, choose No schedule.

6. Choose Save.

Removing a schedule doesn’t stop a run that has already started.