AWS Security Agent Recorder Autor: Jeremy

AWS Security Agent (now part of AWS Continuum) is a frontier agent that proactively secures your applications throughout the development lifecycle across all your environments. It performs on-demand penetration testing customized to your application, discovering and reporting verified security risks. 

What it does
When you start a recording session in the active tab:
- The extension captures the tab's origin as the target URL.
- It reloads the tab and watches every HTTP request it makes.
- Every other unique origin the page contacts is added to a list of accessible URLs.
- A pastel purple/blue border around the page reminds you a session is active.
- On AWS Security Agent's "create" pages, focusing a Target URL, Accessible URLs, or Out-of-scope URLs field shows a panel with the recorded values. Select one to fill the field. Filled entries get a green check, excluded entries get a red x.

The popup shows the target URL, the running list of accessible URLs, and buttons to Start, Stop, Copy all, and Clear. All data lives in storage.local and never leaves your browser.

Use
To use the extension, follow the steps below.

1. Open the page you want to record.
2. Choose the extension icon to open the popup.
3. Choose Start recording. The page reloads and a pastel border appears around it.
4. Use the app normally: navigate, log in, exercise the features you want covered. Each new origin shows up in the popup list.
5. Choose Stop recording when you're done. The border disappears.
6. Follow the steps on Create a penetration test. Focus the Target URL field and pick the recorded value from the panel; do the same for Accessible URLs and Out-of-scope URLs.