Infrastructure as Code (IaC) scanning in Datadog automatically analyzes your Terraform files for security misconfigurations. Findings appear in the Code Security Vulnerabilities tab, where you can group, filter, and triage issues by severity, status, and more. For each finding, Datadog provides detailed remediation guidance, code diffs, and the ability to open a pull request or commit fixes directly from the UI.

When you click on a finding, the side panel reveals additional details, including a short description of the IaC rule related to the finding and a preview of the offending code.

Key capabilities

• Scan Terraform files for security misconfigurations
• Surface IaC misconfigurations in the Code Security Vulnerabilities tab
• Group and filter findings by severity, triage status, and other facets
• View detailed remediation guidance and code diffs for each finding
• Open a pull request or commit fixes directly from the UI
• Track finding status and history for triage and resolution
• Configure scanning exclusions

Getting started

1. Set up IaC scanning in your environment
2. Configure scanning exclusions if needed
3. Review and triage findings in the Code Security Vulnerabilities tab

Further reading

お役に立つドキュメント、リンクや記事:

Setting up IaC ScanningDOCUMENTATION Setting up IaC Scanning ExclusionsDOCUMENTATION