Cloud Security Management Agent Variables

Documentos > Datadog Security > Cloud Security Management > Guías de Cloud Security Management > Cloud Security Management Agent Variables

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

The Datadog Agent has several environment variables that can be enabled for Cloud Security Management. This article describes the purpose of each environment variable.

Variable	Description
`DD_COMPLIANCE_CONFIG_ENABLED`	Enables the Cloud Security Posture Management (CSPM) Agent (runs in the Security Agent).
`DD_COMPLIANCE_CONFIG_HOST_BENCHMARKS_ENABLED`	Enables CSPM host benchmarks. Requires the CSPM Agent (`DD_COMPLIANCE_CONFIG_ENABLED`).
`DD_RUNTIME_SECURITY_CONFIG_ENABLED`	Enables Cloud Workload Security (CWS). Must be enabled for both the System Probe and Security Agent.
`DD_SYSTEM_PROBE_ENABLED`	Enables the System Probe, which is an add-on Agent. Similar to the Trace Agent or Process Agent, it supports different functionalities than the vanilla Datadog Agent. It is primarily used with NPM and CWS.
`DD_RUNTIME_SECURITY_CONFIG_REMOTE _CONFIGURATION_ENABLED`	Enables Remote Configuration for automatic updates of default Agent rules and automatic deployment of custom Agent rules.
`DD_SBOM_ENABLED`	Enables the Software Bill of Materials (SBOM) collection subsystem.
`DD_SBOM_CONTAINER_IMAGE_ENABLED`	Enables SBOM collection on container images.
`DD_SBOM_HOST_ENABLED`	Enables SBOM collection on hosts.