Workload Protection monitors file, network, and process activity across your environment to detect real-time threats to your infrastructure. See Workload Protection for more information on setting up Workload Protection.
Note: These endpoints are split based on whether you are using the US1-FED site or not. Please reference the specific resource for the site you are using.
# Get all Workload Protection agent rules returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.newpapi_instance.list_csm_threats_agent_rules()
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Get all Workload Protection agent rules returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);apiInstance.listCSMThreatsAgentRules().then((data: v2.CloudWorkloadSecurityAgentRulesListResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Get a Workload Protection agent rule returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApi# there is a valid "agent_rule_rc" in the systemAGENT_RULE_DATA_ID=environ["AGENT_RULE_DATA_ID"]# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=environ["POLICY_DATA_ID"]configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.get_csm_threats_agent_rule(agent_rule_id=AGENT_RULE_DATA_ID,policy_id=POLICY_DATA_ID,)print(response)
# Get a Workload Protection agent rule returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "agent_rule_rc" in the systemAGENT_RULE_DATA_ID=ENV["AGENT_RULE_DATA_ID"]# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=ENV["POLICY_DATA_ID"]opts={policy_id:POLICY_DATA_ID,}papi_instance.get_csm_threats_agent_rule(AGENT_RULE_DATA_ID,opts)
// Get a Workload Protection agent rule returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "agent_rule_rc" in the system
AgentRuleDataID:=os.Getenv("AGENT_RULE_DATA_ID")// there is a valid "policy_rc" in the system
PolicyDataID:=os.Getenv("POLICY_DATA_ID")ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.GetCSMThreatsAgentRule(ctx,AgentRuleDataID,*datadogV2.NewGetCSMThreatsAgentRuleOptionalParameters().WithPolicyId(PolicyDataID))iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.GetCSMThreatsAgentRule`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.GetCSMThreatsAgentRule`:\n%s\n",responseContent)}
// Get a Workload Protection agent rule returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.api.CsmThreatsApi.GetCSMThreatsAgentRuleOptionalParameters;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleResponse;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "agent_rule_rc" in the systemStringAGENT_RULE_DATA_ID=System.getenv("AGENT_RULE_DATA_ID");// there is a valid "policy_rc" in the systemStringPOLICY_DATA_ID=System.getenv("POLICY_DATA_ID");try{CloudWorkloadSecurityAgentRuleResponseresult=apiInstance.getCSMThreatsAgentRule(AGENT_RULE_DATA_ID,newGetCSMThreatsAgentRuleOptionalParameters().policyId(POLICY_DATA_ID));System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#getCSMThreatsAgentRule");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Get a Workload Protection agent rule returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;usedatadog_api_client::datadogV2::api_csm_threats::GetCSMThreatsAgentRuleOptionalParams;#[tokio::main]asyncfnmain(){// there is a valid "agent_rule_rc" in the system
letagent_rule_data_id=std::env::var("AGENT_RULE_DATA_ID").unwrap();// there is a valid "policy_rc" in the system
letpolicy_data_id=std::env::var("POLICY_DATA_ID").unwrap();letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.get_csm_threats_agent_rule(agent_rule_data_id.clone(),GetCSMThreatsAgentRuleOptionalParams::default().policy_id(policy_data_id.clone()),).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Get a Workload Protection agent rule returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "agent_rule_rc" in the system
constAGENT_RULE_DATA_ID=process.env.AGENT_RULE_DATA_IDasstring;// there is a valid "policy_rc" in the system
constPOLICY_DATA_ID=process.env.POLICY_DATA_IDasstring;constparams: v2.CSMThreatsApiGetCSMThreatsAgentRuleRequest={agentRuleId: AGENT_RULE_DATA_ID,policyId: POLICY_DATA_ID,};apiInstance.getCSMThreatsAgentRule(params).then((data: v2.CloudWorkloadSecurityAgentRuleResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
// Create a Workload Protection agent rule returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "policy_rc" in the system
PolicyDataID:=os.Getenv("POLICY_DATA_ID")body:=datadogV2.CloudWorkloadSecurityAgentRuleCreateRequest{Data:datadogV2.CloudWorkloadSecurityAgentRuleCreateData{Attributes:datadogV2.CloudWorkloadSecurityAgentRuleCreateAttributes{Description:datadog.PtrString("My Agent rule"),Enabled:datadog.PtrBool(true),Expression:`exec.file.name == "sh"`,Filters:[]string{},Name:"examplecsmthreat",PolicyId:datadog.PtrString(PolicyDataID),ProductTags:[]string{},},Type:datadogV2.CLOUDWORKLOADSECURITYAGENTRULETYPE_AGENT_RULE,},}ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.CreateCSMThreatsAgentRule(ctx,body)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.CreateCSMThreatsAgentRule`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.CreateCSMThreatsAgentRule`:\n%s\n",responseContent)}
// Create a Workload Protection agent rule returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleCreateAttributes;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleCreateData;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleCreateRequest;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleResponse;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleType;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "policy_rc" in the systemStringPOLICY_DATA_ID=System.getenv("POLICY_DATA_ID");CloudWorkloadSecurityAgentRuleCreateRequestbody=newCloudWorkloadSecurityAgentRuleCreateRequest().data(newCloudWorkloadSecurityAgentRuleCreateData().attributes(newCloudWorkloadSecurityAgentRuleCreateAttributes().description("My Agent rule").enabled(true).expression("""
exec.file.name == "sh"
""").name("examplecsmthreat").policyId(POLICY_DATA_ID)).type(CloudWorkloadSecurityAgentRuleType.AGENT_RULE));try{CloudWorkloadSecurityAgentRuleResponseresult=apiInstance.createCSMThreatsAgentRule(body);System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#createCSMThreatsAgentRule");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
"""
Create a Workload Protection agent rule returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApifromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_create_attributesimport(CloudWorkloadSecurityAgentRuleCreateAttributes,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_create_dataimport(CloudWorkloadSecurityAgentRuleCreateData,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_create_requestimport(CloudWorkloadSecurityAgentRuleCreateRequest,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_typeimportCloudWorkloadSecurityAgentRuleType# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=environ["POLICY_DATA_ID"]body=CloudWorkloadSecurityAgentRuleCreateRequest(data=CloudWorkloadSecurityAgentRuleCreateData(attributes=CloudWorkloadSecurityAgentRuleCreateAttributes(description="My Agent rule",enabled=True,expression='exec.file.name == "sh"',filters=[],name="examplecsmthreat",policy_id=POLICY_DATA_ID,product_tags=[],),type=CloudWorkloadSecurityAgentRuleType.AGENT_RULE,),)configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.create_csm_threats_agent_rule(body=body)print(response)
# Create a Workload Protection agent rule returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=ENV["POLICY_DATA_ID"]body=DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateRequest.new({data:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateData.new({attributes:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateAttributes.new({description:"My Agent rule",enabled:true,expression:'exec.file.name == "sh"',filters:[],name:"examplecsmthreat",policy_id:POLICY_DATA_ID,product_tags:[],}),type:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleType::AGENT_RULE,}),})papi_instance.create_csm_threats_agent_rule(body)
// Create a Workload Protection agent rule returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleCreateAttributes;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleCreateData;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleCreateRequest;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleType;#[tokio::main]asyncfnmain(){// there is a valid "policy_rc" in the system
letpolicy_data_id=std::env::var("POLICY_DATA_ID").unwrap();letbody=CloudWorkloadSecurityAgentRuleCreateRequest::new(CloudWorkloadSecurityAgentRuleCreateData::new(CloudWorkloadSecurityAgentRuleCreateAttributes::new(r#"exec.file.name == "sh""#.to_string(),"examplecsmthreat".to_string(),).description("My Agent rule".to_string()).enabled(true).filters(vec![]).policy_id(policy_data_id.clone()).product_tags(vec![]),CloudWorkloadSecurityAgentRuleType::AGENT_RULE,),);letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.create_csm_threats_agent_rule(body).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Create a Workload Protection agent rule returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "policy_rc" in the system
constPOLICY_DATA_ID=process.env.POLICY_DATA_IDasstring;constparams: v2.CSMThreatsApiCreateCSMThreatsAgentRuleRequest={body:{data:{attributes:{description:"My Agent rule",enabled: true,expression:`exec.file.name == "sh"`,filters:[],name:"examplecsmthreat",policyId: POLICY_DATA_ID,productTags:[],},type:"agent_rule",},},};apiInstance.createCSMThreatsAgentRule(params).then((data: v2.CloudWorkloadSecurityAgentRuleResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Update a Workload Protection agent rule returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApifromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_typeimportCloudWorkloadSecurityAgentRuleTypefromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_update_attributesimport(CloudWorkloadSecurityAgentRuleUpdateAttributes,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_update_dataimport(CloudWorkloadSecurityAgentRuleUpdateData,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_update_requestimport(CloudWorkloadSecurityAgentRuleUpdateRequest,)# there is a valid "agent_rule_rc" in the systemAGENT_RULE_DATA_ID=environ["AGENT_RULE_DATA_ID"]# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=environ["POLICY_DATA_ID"]body=CloudWorkloadSecurityAgentRuleUpdateRequest(data=CloudWorkloadSecurityAgentRuleUpdateData(attributes=CloudWorkloadSecurityAgentRuleUpdateAttributes(description="My Agent rule",enabled=True,expression='exec.file.name == "sh"',policy_id=POLICY_DATA_ID,product_tags=[],),id=AGENT_RULE_DATA_ID,type=CloudWorkloadSecurityAgentRuleType.AGENT_RULE,),)configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.update_csm_threats_agent_rule(agent_rule_id=AGENT_RULE_DATA_ID,policy_id=POLICY_DATA_ID,body=body)print(response)
# Update a Workload Protection agent rule returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "agent_rule_rc" in the systemAGENT_RULE_DATA_ID=ENV["AGENT_RULE_DATA_ID"]# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=ENV["POLICY_DATA_ID"]body=DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleUpdateRequest.new({data:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleUpdateData.new({attributes:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleUpdateAttributes.new({description:"My Agent rule",enabled:true,expression:'exec.file.name == "sh"',policy_id:POLICY_DATA_ID,product_tags:[],}),id:AGENT_RULE_DATA_ID,type:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleType::AGENT_RULE,}),})opts={policy_id:POLICY_DATA_ID,}papi_instance.update_csm_threats_agent_rule(AGENT_RULE_DATA_ID,body,opts)
// Update a Workload Protection agent rule returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "agent_rule_rc" in the system
AgentRuleDataID:=os.Getenv("AGENT_RULE_DATA_ID")// there is a valid "policy_rc" in the system
PolicyDataID:=os.Getenv("POLICY_DATA_ID")body:=datadogV2.CloudWorkloadSecurityAgentRuleUpdateRequest{Data:datadogV2.CloudWorkloadSecurityAgentRuleUpdateData{Attributes:datadogV2.CloudWorkloadSecurityAgentRuleUpdateAttributes{Description:datadog.PtrString("My Agent rule"),Enabled:datadog.PtrBool(true),Expression:datadog.PtrString(`exec.file.name == "sh"`),PolicyId:datadog.PtrString(PolicyDataID),ProductTags:[]string{},},Id:datadog.PtrString(AgentRuleDataID),Type:datadogV2.CLOUDWORKLOADSECURITYAGENTRULETYPE_AGENT_RULE,},}ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.UpdateCSMThreatsAgentRule(ctx,AgentRuleDataID,body,*datadogV2.NewUpdateCSMThreatsAgentRuleOptionalParameters().WithPolicyId(PolicyDataID))iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.UpdateCSMThreatsAgentRule`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.UpdateCSMThreatsAgentRule`:\n%s\n",responseContent)}
// Update a Workload Protection agent rule returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.api.CsmThreatsApi.UpdateCSMThreatsAgentRuleOptionalParameters;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleResponse;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleType;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleUpdateAttributes;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleUpdateData;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleUpdateRequest;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "agent_rule_rc" in the systemStringAGENT_RULE_DATA_ID=System.getenv("AGENT_RULE_DATA_ID");// there is a valid "policy_rc" in the systemStringPOLICY_DATA_ID=System.getenv("POLICY_DATA_ID");CloudWorkloadSecurityAgentRuleUpdateRequestbody=newCloudWorkloadSecurityAgentRuleUpdateRequest().data(newCloudWorkloadSecurityAgentRuleUpdateData().attributes(newCloudWorkloadSecurityAgentRuleUpdateAttributes().description("My Agent rule").enabled(true).expression("""
exec.file.name == "sh"
""").policyId(POLICY_DATA_ID)).id(AGENT_RULE_DATA_ID).type(CloudWorkloadSecurityAgentRuleType.AGENT_RULE));try{CloudWorkloadSecurityAgentRuleResponseresult=apiInstance.updateCSMThreatsAgentRule(AGENT_RULE_DATA_ID,body,newUpdateCSMThreatsAgentRuleOptionalParameters().policyId(POLICY_DATA_ID));System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#updateCSMThreatsAgentRule");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Update a Workload Protection agent rule returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;usedatadog_api_client::datadogV2::api_csm_threats::UpdateCSMThreatsAgentRuleOptionalParams;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleType;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleUpdateAttributes;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleUpdateData;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleUpdateRequest;#[tokio::main]asyncfnmain(){// there is a valid "agent_rule_rc" in the system
letagent_rule_data_id=std::env::var("AGENT_RULE_DATA_ID").unwrap();// there is a valid "policy_rc" in the system
letpolicy_data_id=std::env::var("POLICY_DATA_ID").unwrap();letbody=CloudWorkloadSecurityAgentRuleUpdateRequest::new(CloudWorkloadSecurityAgentRuleUpdateData::new(CloudWorkloadSecurityAgentRuleUpdateAttributes::new().description("My Agent rule".to_string()).enabled(true).expression(r#"exec.file.name == "sh""#.to_string()).policy_id(policy_data_id.clone()).product_tags(vec![]),CloudWorkloadSecurityAgentRuleType::AGENT_RULE,).id(agent_rule_data_id.clone()),);letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.update_csm_threats_agent_rule(agent_rule_data_id.clone(),body,UpdateCSMThreatsAgentRuleOptionalParams::default().policy_id(policy_data_id.clone()),).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Update a Workload Protection agent rule returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "agent_rule_rc" in the system
constAGENT_RULE_DATA_ID=process.env.AGENT_RULE_DATA_IDasstring;// there is a valid "policy_rc" in the system
constPOLICY_DATA_ID=process.env.POLICY_DATA_IDasstring;constparams: v2.CSMThreatsApiUpdateCSMThreatsAgentRuleRequest={body:{data:{attributes:{description:"My Agent rule",enabled: true,expression:`exec.file.name == "sh"`,policyId: POLICY_DATA_ID,productTags:[],},id: AGENT_RULE_DATA_ID,type:"agent_rule",},},agentRuleId: AGENT_RULE_DATA_ID,policyId: POLICY_DATA_ID,};apiInstance.updateCSMThreatsAgentRule(params).then((data: v2.CloudWorkloadSecurityAgentRuleResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Delete a Workload Protection agent rule returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApi# there is a valid "agent_rule_rc" in the systemAGENT_RULE_DATA_ID=environ["AGENT_RULE_DATA_ID"]# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=environ["POLICY_DATA_ID"]configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)api_instance.delete_csm_threats_agent_rule(agent_rule_id=AGENT_RULE_DATA_ID,policy_id=POLICY_DATA_ID,)
# Delete a Workload Protection agent rule returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "agent_rule_rc" in the systemAGENT_RULE_DATA_ID=ENV["AGENT_RULE_DATA_ID"]# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=ENV["POLICY_DATA_ID"]opts={policy_id:POLICY_DATA_ID,}api_instance.delete_csm_threats_agent_rule(AGENT_RULE_DATA_ID,opts)
// Delete a Workload Protection agent rule returns "OK" response
packagemainimport("context""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "agent_rule_rc" in the system
AgentRuleDataID:=os.Getenv("AGENT_RULE_DATA_ID")// there is a valid "policy_rc" in the system
PolicyDataID:=os.Getenv("POLICY_DATA_ID")ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)r,err:=api.DeleteCSMThreatsAgentRule(ctx,AgentRuleDataID,*datadogV2.NewDeleteCSMThreatsAgentRuleOptionalParameters().WithPolicyId(PolicyDataID))iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.DeleteCSMThreatsAgentRule`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}}
// Delete a Workload Protection agent rule returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.api.CsmThreatsApi.DeleteCSMThreatsAgentRuleOptionalParameters;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "agent_rule_rc" in the systemStringAGENT_RULE_DATA_ID=System.getenv("AGENT_RULE_DATA_ID");// there is a valid "policy_rc" in the systemStringPOLICY_DATA_ID=System.getenv("POLICY_DATA_ID");try{apiInstance.deleteCSMThreatsAgentRule(AGENT_RULE_DATA_ID,newDeleteCSMThreatsAgentRuleOptionalParameters().policyId(POLICY_DATA_ID));}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#deleteCSMThreatsAgentRule");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Delete a Workload Protection agent rule returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;usedatadog_api_client::datadogV2::api_csm_threats::DeleteCSMThreatsAgentRuleOptionalParams;#[tokio::main]asyncfnmain(){// there is a valid "agent_rule_rc" in the system
letagent_rule_data_id=std::env::var("AGENT_RULE_DATA_ID").unwrap();// there is a valid "policy_rc" in the system
letpolicy_data_id=std::env::var("POLICY_DATA_ID").unwrap();letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.delete_csm_threats_agent_rule(agent_rule_data_id.clone(),DeleteCSMThreatsAgentRuleOptionalParams::default().policy_id(policy_data_id.clone()),).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Delete a Workload Protection agent rule returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "agent_rule_rc" in the system
constAGENT_RULE_DATA_ID=process.env.AGENT_RULE_DATA_IDasstring;// there is a valid "policy_rc" in the system
constPOLICY_DATA_ID=process.env.POLICY_DATA_IDasstring;constparams: v2.CSMThreatsApiDeleteCSMThreatsAgentRuleRequest={agentRuleId: AGENT_RULE_DATA_ID,policyId: POLICY_DATA_ID,};apiInstance.deleteCSMThreatsAgentRule(params).then((data: any)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Get all Workload Protection policies returns "OK" response
"""fromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApiconfiguration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.list_csm_threats_agent_policies()print(response)
# Get all Workload Protection policies returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.newpapi_instance.list_csm_threats_agent_policies()
// Get all Workload Protection policies returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.ListCSMThreatsAgentPolicies(ctx)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.ListCSMThreatsAgentPolicies`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.ListCSMThreatsAgentPolicies`:\n%s\n",responseContent)}
// Get all Workload Protection policies returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;#[tokio::main]asyncfnmain(){letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.list_csm_threats_agent_policies().await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Get all Workload Protection policies returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);apiInstance.listCSMThreatsAgentPolicies().then((data: v2.CloudWorkloadSecurityAgentPoliciesListResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Get a Workload Protection policy returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApi# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=environ["POLICY_DATA_ID"]configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.get_csm_threats_agent_policy(policy_id=POLICY_DATA_ID,)print(response)
# Get a Workload Protection policy returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=ENV["POLICY_DATA_ID"]papi_instance.get_csm_threats_agent_policy(POLICY_DATA_ID)
// Get a Workload Protection policy returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "policy_rc" in the system
PolicyDataID:=os.Getenv("POLICY_DATA_ID")ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.GetCSMThreatsAgentPolicy(ctx,PolicyDataID)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.GetCSMThreatsAgentPolicy`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.GetCSMThreatsAgentPolicy`:\n%s\n",responseContent)}
// Get a Workload Protection policy returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentPolicyResponse;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "policy_rc" in the systemStringPOLICY_DATA_ID=System.getenv("POLICY_DATA_ID");try{CloudWorkloadSecurityAgentPolicyResponseresult=apiInstance.getCSMThreatsAgentPolicy(POLICY_DATA_ID);System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#getCSMThreatsAgentPolicy");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Get a Workload Protection policy returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;#[tokio::main]asyncfnmain(){// there is a valid "policy_rc" in the system
letpolicy_data_id=std::env::var("POLICY_DATA_ID").unwrap();letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.get_csm_threats_agent_policy(policy_data_id.clone()).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Get a Workload Protection policy returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "policy_rc" in the system
constPOLICY_DATA_ID=process.env.POLICY_DATA_IDasstring;constparams: v2.CSMThreatsApiGetCSMThreatsAgentPolicyRequest={policyId: POLICY_DATA_ID,};apiInstance.getCSMThreatsAgentPolicy(params).then((data: v2.CloudWorkloadSecurityAgentPolicyResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Create a Workload Protection policy returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);constparams: v2.CSMThreatsApiCreateCSMThreatsAgentPolicyRequest={body:{data:{attributes:{description:"My agent policy",enabled: true,hostTagsLists:[["env:test"]],name:"my_agent_policy",},type:"policy",},},};apiInstance.createCSMThreatsAgentPolicy(params).then((data: v2.CloudWorkloadSecurityAgentPolicyResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
// Update a Workload Protection policy returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "policy_rc" in the system
PolicyDataID:=os.Getenv("POLICY_DATA_ID")body:=datadogV2.CloudWorkloadSecurityAgentPolicyUpdateRequest{Data:datadogV2.CloudWorkloadSecurityAgentPolicyUpdateData{Attributes:datadogV2.CloudWorkloadSecurityAgentPolicyUpdateAttributes{Description:datadog.PtrString("Updated agent policy"),Enabled:datadog.PtrBool(true),HostTagsLists:[][]string{{"env:test",},},Name:datadog.PtrString("updated_agent_policy"),},Id:datadog.PtrString(PolicyDataID),Type:datadogV2.CLOUDWORKLOADSECURITYAGENTPOLICYTYPE_POLICY,},}ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.UpdateCSMThreatsAgentPolicy(ctx,PolicyDataID,body)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.UpdateCSMThreatsAgentPolicy`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.UpdateCSMThreatsAgentPolicy`:\n%s\n",responseContent)}
// Update a Workload Protection policy returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentPolicyResponse;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentPolicyType;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentPolicyUpdateAttributes;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentPolicyUpdateData;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentPolicyUpdateRequest;importjava.util.Collections;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "policy_rc" in the systemStringPOLICY_DATA_ID=System.getenv("POLICY_DATA_ID");CloudWorkloadSecurityAgentPolicyUpdateRequestbody=newCloudWorkloadSecurityAgentPolicyUpdateRequest().data(newCloudWorkloadSecurityAgentPolicyUpdateData().attributes(newCloudWorkloadSecurityAgentPolicyUpdateAttributes().description("Updated agent policy").enabled(true).hostTagsLists(Collections.singletonList(Collections.singletonList("env:test"))).name("updated_agent_policy")).id(POLICY_DATA_ID).type(CloudWorkloadSecurityAgentPolicyType.POLICY));try{CloudWorkloadSecurityAgentPolicyResponseresult=apiInstance.updateCSMThreatsAgentPolicy(POLICY_DATA_ID,body);System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#updateCSMThreatsAgentPolicy");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
"""
Update a Workload Protection policy returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApifromdatadog_api_client.v2.model.cloud_workload_security_agent_policy_typeimportCloudWorkloadSecurityAgentPolicyTypefromdatadog_api_client.v2.model.cloud_workload_security_agent_policy_update_attributesimport(CloudWorkloadSecurityAgentPolicyUpdateAttributes,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_policy_update_dataimport(CloudWorkloadSecurityAgentPolicyUpdateData,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_policy_update_requestimport(CloudWorkloadSecurityAgentPolicyUpdateRequest,)# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=environ["POLICY_DATA_ID"]body=CloudWorkloadSecurityAgentPolicyUpdateRequest(data=CloudWorkloadSecurityAgentPolicyUpdateData(attributes=CloudWorkloadSecurityAgentPolicyUpdateAttributes(description="Updated agent policy",enabled=True,host_tags_lists=[["env:test",],],name="updated_agent_policy",),id=POLICY_DATA_ID,type=CloudWorkloadSecurityAgentPolicyType.POLICY,),)configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.update_csm_threats_agent_policy(policy_id=POLICY_DATA_ID,body=body)print(response)
# Update a Workload Protection policy returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=ENV["POLICY_DATA_ID"]body=DatadogAPIClient::V2::CloudWorkloadSecurityAgentPolicyUpdateRequest.new({data:DatadogAPIClient::V2::CloudWorkloadSecurityAgentPolicyUpdateData.new({attributes:DatadogAPIClient::V2::CloudWorkloadSecurityAgentPolicyUpdateAttributes.new({description:"Updated agent policy",enabled:true,host_tags_lists:[["env:test",],],name:"updated_agent_policy",}),id:POLICY_DATA_ID,type:DatadogAPIClient::V2::CloudWorkloadSecurityAgentPolicyType::POLICY,}),})papi_instance.update_csm_threats_agent_policy(POLICY_DATA_ID,body)
// Update a Workload Protection policy returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentPolicyType;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentPolicyUpdateAttributes;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentPolicyUpdateData;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentPolicyUpdateRequest;#[tokio::main]asyncfnmain(){// there is a valid "policy_rc" in the system
letpolicy_data_id=std::env::var("POLICY_DATA_ID").unwrap();letbody=CloudWorkloadSecurityAgentPolicyUpdateRequest::new(CloudWorkloadSecurityAgentPolicyUpdateData::new(CloudWorkloadSecurityAgentPolicyUpdateAttributes::new().description("Updated agent policy".to_string()).enabled(true).host_tags_lists(vec![vec!["env:test".to_string()]]).name("updated_agent_policy".to_string()),CloudWorkloadSecurityAgentPolicyType::POLICY,).id(policy_data_id.clone()),);letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.update_csm_threats_agent_policy(policy_data_id.clone(),body).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Update a Workload Protection policy returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "policy_rc" in the system
constPOLICY_DATA_ID=process.env.POLICY_DATA_IDasstring;constparams: v2.CSMThreatsApiUpdateCSMThreatsAgentPolicyRequest={body:{data:{attributes:{description:"Updated agent policy",enabled: true,hostTagsLists:[["env:test"]],name:"updated_agent_policy",},id: POLICY_DATA_ID,type:"policy",},},policyId: POLICY_DATA_ID,};apiInstance.updateCSMThreatsAgentPolicy(params).then((data: v2.CloudWorkloadSecurityAgentPolicyResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Delete a Workload Protection policy returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApi# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=environ["POLICY_DATA_ID"]configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)api_instance.delete_csm_threats_agent_policy(policy_id=POLICY_DATA_ID,)
# Delete a Workload Protection policy returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "policy_rc" in the systemPOLICY_DATA_ID=ENV["POLICY_DATA_ID"]api_instance.delete_csm_threats_agent_policy(POLICY_DATA_ID)
// Delete a Workload Protection policy returns "OK" response
packagemainimport("context""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "policy_rc" in the system
PolicyDataID:=os.Getenv("POLICY_DATA_ID")ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)r,err:=api.DeleteCSMThreatsAgentPolicy(ctx,PolicyDataID)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.DeleteCSMThreatsAgentPolicy`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}}
// Delete a Workload Protection policy returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "policy_rc" in the systemStringPOLICY_DATA_ID=System.getenv("POLICY_DATA_ID");try{apiInstance.deleteCSMThreatsAgentPolicy(POLICY_DATA_ID);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#deleteCSMThreatsAgentPolicy");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Delete a Workload Protection policy returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;#[tokio::main]asyncfnmain(){// there is a valid "policy_rc" in the system
letpolicy_data_id=std::env::var("POLICY_DATA_ID").unwrap();letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.delete_csm_threats_agent_policy(policy_data_id.clone()).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Delete a Workload Protection policy returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "policy_rc" in the system
constPOLICY_DATA_ID=process.env.POLICY_DATA_IDasstring;constparams: v2.CSMThreatsApiDeleteCSMThreatsAgentPolicyRequest={policyId: POLICY_DATA_ID,};apiInstance.deleteCSMThreatsAgentPolicy(params).then((data: any)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
The download endpoint generates a Workload Protection policy file from your currently active
Workload Protection agent rules, and downloads them as a .policy file. This file can then be deployed to
your agents to update the policy running in your environment.
Note: This endpoint is not available for the Government (US1-FED) site. Please reference the (US1-FED) specific resource below.
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Download the Workload Protection policy returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);apiInstance.downloadCSMThreatsPolicy().then((data: client.HttpFile)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Get all Workload Protection agent rules (US1-FED) returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);apiInstance.listCloudWorkloadSecurityAgentRules().then((data: v2.CloudWorkloadSecurityAgentRulesListResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Get a Workload Protection agent rule (US1-FED) returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApi# there is a valid "agent_rule" in the systemAGENT_RULE_DATA_ID=environ["AGENT_RULE_DATA_ID"]configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.get_cloud_workload_security_agent_rule(agent_rule_id=AGENT_RULE_DATA_ID,)print(response)
# Get a Workload Protection agent rule (US1-FED) returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "agent_rule" in the systemAGENT_RULE_DATA_ID=ENV["AGENT_RULE_DATA_ID"]papi_instance.get_cloud_workload_security_agent_rule(AGENT_RULE_DATA_ID)
// Get a Workload Protection agent rule (US1-FED) returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "agent_rule" in the system
AgentRuleDataID:=os.Getenv("AGENT_RULE_DATA_ID")ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.GetCloudWorkloadSecurityAgentRule(ctx,AgentRuleDataID)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.GetCloudWorkloadSecurityAgentRule`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.GetCloudWorkloadSecurityAgentRule`:\n%s\n",responseContent)}
// Get a Workload Protection agent rule (US1-FED) returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleResponse;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "agent_rule" in the systemStringAGENT_RULE_DATA_ID=System.getenv("AGENT_RULE_DATA_ID");try{CloudWorkloadSecurityAgentRuleResponseresult=apiInstance.getCloudWorkloadSecurityAgentRule(AGENT_RULE_DATA_ID);System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#getCloudWorkloadSecurityAgentRule");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Get a Workload Protection agent rule (US1-FED) returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;#[tokio::main]asyncfnmain(){// there is a valid "agent_rule" in the system
letagent_rule_data_id=std::env::var("AGENT_RULE_DATA_ID").unwrap();letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.get_cloud_workload_security_agent_rule(agent_rule_data_id.clone()).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Get a Workload Protection agent rule (US1-FED) returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "agent_rule" in the system
constAGENT_RULE_DATA_ID=process.env.AGENT_RULE_DATA_IDasstring;constparams: v2.CSMThreatsApiGetCloudWorkloadSecurityAgentRuleRequest={agentRuleId: AGENT_RULE_DATA_ID,};apiInstance.getCloudWorkloadSecurityAgentRule(params).then((data: v2.CloudWorkloadSecurityAgentRuleResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Create a Workload Protection agent rule (US1-FED) returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);constparams: v2.CSMThreatsApiCreateCloudWorkloadSecurityAgentRuleRequest={body:{data:{attributes:{description:"My Agent rule",enabled: true,expression:`exec.file.name == "sh"`,filters:[],name:"examplecsmthreat",},type:"agent_rule",},},};apiInstance.createCloudWorkloadSecurityAgentRule(params).then((data: v2.CloudWorkloadSecurityAgentRuleResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
// Update a Workload Protection agent rule (US1-FED) returns "OK" response
packagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "agent_rule" in the system
AgentRuleDataID:=os.Getenv("AGENT_RULE_DATA_ID")body:=datadogV2.CloudWorkloadSecurityAgentRuleUpdateRequest{Data:datadogV2.CloudWorkloadSecurityAgentRuleUpdateData{Attributes:datadogV2.CloudWorkloadSecurityAgentRuleUpdateAttributes{Description:datadog.PtrString("Updated Agent rule"),Expression:datadog.PtrString(`exec.file.name == "sh"`),},Id:datadog.PtrString(AgentRuleDataID),Type:datadogV2.CLOUDWORKLOADSECURITYAGENTRULETYPE_AGENT_RULE,},}ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)resp,r,err:=api.UpdateCloudWorkloadSecurityAgentRule(ctx,AgentRuleDataID,body)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.UpdateCloudWorkloadSecurityAgentRule`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `CSMThreatsApi.UpdateCloudWorkloadSecurityAgentRule`:\n%s\n",responseContent)}
// Update a Workload Protection agent rule (US1-FED) returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleResponse;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleType;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleUpdateAttributes;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleUpdateData;importcom.datadog.api.client.v2.model.CloudWorkloadSecurityAgentRuleUpdateRequest;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "agent_rule" in the systemStringAGENT_RULE_DATA_ID=System.getenv("AGENT_RULE_DATA_ID");CloudWorkloadSecurityAgentRuleUpdateRequestbody=newCloudWorkloadSecurityAgentRuleUpdateRequest().data(newCloudWorkloadSecurityAgentRuleUpdateData().attributes(newCloudWorkloadSecurityAgentRuleUpdateAttributes().description("Updated Agent rule").expression("""
exec.file.name == "sh"
""")).id(AGENT_RULE_DATA_ID).type(CloudWorkloadSecurityAgentRuleType.AGENT_RULE));try{CloudWorkloadSecurityAgentRuleResponseresult=apiInstance.updateCloudWorkloadSecurityAgentRule(AGENT_RULE_DATA_ID,body);System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#updateCloudWorkloadSecurityAgentRule");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
"""
Update a Workload Protection agent rule (US1-FED) returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApifromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_typeimportCloudWorkloadSecurityAgentRuleTypefromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_update_attributesimport(CloudWorkloadSecurityAgentRuleUpdateAttributes,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_update_dataimport(CloudWorkloadSecurityAgentRuleUpdateData,)fromdatadog_api_client.v2.model.cloud_workload_security_agent_rule_update_requestimport(CloudWorkloadSecurityAgentRuleUpdateRequest,)# there is a valid "agent_rule" in the systemAGENT_RULE_DATA_ID=environ["AGENT_RULE_DATA_ID"]body=CloudWorkloadSecurityAgentRuleUpdateRequest(data=CloudWorkloadSecurityAgentRuleUpdateData(attributes=CloudWorkloadSecurityAgentRuleUpdateAttributes(description="Updated Agent rule",expression='exec.file.name == "sh"',),id=AGENT_RULE_DATA_ID,type=CloudWorkloadSecurityAgentRuleType.AGENT_RULE,),)configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)response=api_instance.update_cloud_workload_security_agent_rule(agent_rule_id=AGENT_RULE_DATA_ID,body=body)print(response)
# Update a Workload Protection agent rule (US1-FED) returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "agent_rule" in the systemAGENT_RULE_DATA_ID=ENV["AGENT_RULE_DATA_ID"]body=DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleUpdateRequest.new({data:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleUpdateData.new({attributes:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleUpdateAttributes.new({description:"Updated Agent rule",expression:'exec.file.name == "sh"',}),id:AGENT_RULE_DATA_ID,type:DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleType::AGENT_RULE,}),})papi_instance.update_cloud_workload_security_agent_rule(AGENT_RULE_DATA_ID,body)
// Update a Workload Protection agent rule (US1-FED) returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleType;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleUpdateAttributes;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleUpdateData;usedatadog_api_client::datadogV2::model::CloudWorkloadSecurityAgentRuleUpdateRequest;#[tokio::main]asyncfnmain(){// there is a valid "agent_rule" in the system
letagent_rule_data_id=std::env::var("AGENT_RULE_DATA_ID").unwrap();letbody=CloudWorkloadSecurityAgentRuleUpdateRequest::new(CloudWorkloadSecurityAgentRuleUpdateData::new(CloudWorkloadSecurityAgentRuleUpdateAttributes::new().description("Updated Agent rule".to_string()).expression(r#"exec.file.name == "sh""#.to_string()),CloudWorkloadSecurityAgentRuleType::AGENT_RULE,).id(agent_rule_data_id.clone()),);letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.update_cloud_workload_security_agent_rule(agent_rule_data_id.clone(),body).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Update a Workload Protection agent rule (US1-FED) returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "agent_rule" in the system
constAGENT_RULE_DATA_ID=process.env.AGENT_RULE_DATA_IDasstring;constparams: v2.CSMThreatsApiUpdateCloudWorkloadSecurityAgentRuleRequest={body:{data:{attributes:{description:"Updated Agent rule",expression:`exec.file.name == "sh"`,},id: AGENT_RULE_DATA_ID,type:"agent_rule",},},agentRuleId: AGENT_RULE_DATA_ID,};apiInstance.updateCloudWorkloadSecurityAgentRule(params).then((data: v2.CloudWorkloadSecurityAgentRuleResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
"""
Delete a Workload Protection agent rule (US1-FED) returns "OK" response
"""fromosimportenvironfromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.csm_threats_apiimportCSMThreatsApi# there is a valid "agent_rule" in the systemAGENT_RULE_DATA_ID=environ["AGENT_RULE_DATA_ID"]configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=CSMThreatsApi(api_client)api_instance.delete_cloud_workload_security_agent_rule(agent_rule_id=AGENT_RULE_DATA_ID,)
# Delete a Workload Protection agent rule (US1-FED) returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::CSMThreatsAPI.new# there is a valid "agent_rule" in the systemAGENT_RULE_DATA_ID=ENV["AGENT_RULE_DATA_ID"]api_instance.delete_cloud_workload_security_agent_rule(AGENT_RULE_DATA_ID)
// Delete a Workload Protection agent rule (US1-FED) returns "OK" response
packagemainimport("context""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){// there is a valid "agent_rule" in the system
AgentRuleDataID:=os.Getenv("AGENT_RULE_DATA_ID")ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewCSMThreatsApi(apiClient)r,err:=api.DeleteCloudWorkloadSecurityAgentRule(ctx,AgentRuleDataID)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `CSMThreatsApi.DeleteCloudWorkloadSecurityAgentRule`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}}
// Delete a Workload Protection agent rule (US1-FED) returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.CsmThreatsApi;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();CsmThreatsApiapiInstance=newCsmThreatsApi(defaultClient);// there is a valid "agent_rule" in the systemStringAGENT_RULE_DATA_ID=System.getenv("AGENT_RULE_DATA_ID");try{apiInstance.deleteCloudWorkloadSecurityAgentRule(AGENT_RULE_DATA_ID);}catch(ApiExceptione){System.err.println("Exception when calling CsmThreatsApi#deleteCloudWorkloadSecurityAgentRule");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Delete a Workload Protection agent rule (US1-FED) returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_csm_threats::CSMThreatsAPI;#[tokio::main]asyncfnmain(){// there is a valid "agent_rule" in the system
letagent_rule_data_id=std::env::var("AGENT_RULE_DATA_ID").unwrap();letconfiguration=datadog::Configuration::new();letapi=CSMThreatsAPI::with_config(configuration);letresp=api.delete_cloud_workload_security_agent_rule(agent_rule_data_id.clone()).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Delete a Workload Protection agent rule (US1-FED) returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);// there is a valid "agent_rule" in the system
constAGENT_RULE_DATA_ID=process.env.AGENT_RULE_DATA_IDasstring;constparams: v2.CSMThreatsApiDeleteCloudWorkloadSecurityAgentRuleRequest={agentRuleId: AGENT_RULE_DATA_ID,};apiInstance.deleteCloudWorkloadSecurityAgentRule(params).then((data: any)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
The download endpoint generates a Workload Protection policy file from your currently active
Workload Protection agent rules, and downloads them as a .policy file. This file can then be deployed to
your agents to update the policy running in your environment.
Note: This endpoint should only be used for the Government (US1-FED) site.
This endpoint requires the security_monitoring_cws_agent_rules_read permission.
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comddog-gov.com"DD_API_KEY="<API-KEY>"DD_APP_KEY="<APP-KEY>"cargo run
/**
* Download the Workload Protection policy (US1-FED) returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.CSMThreatsApi(configuration);apiInstance.downloadCloudWorkloadPolicyFile().then((data: client.HttpFile)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));