For AI agents: A markdown version of this page is available at https://dnd37xeb23o8n.cloudfront.net/jen.gilbert/astro-base/api/latest/entity-risk-scores/get-entity-risk-score.md. A documentation index is available at /llms.txt.
homeHomedocsDocsapiAPI
Language
Datadog site

Get Entity Risk Score

WARNINGNote: This endpoint is in public beta and it's subject to change. If you have any feedback, contact Datadog support.
GEThttps://api.datadoghq.com/api/v2/security-entities/risk-scores/{entity_id}https://api.us3.datadoghq.com/api/v2/security-entities/risk-scores/{entity_id}https://api.us5.datadoghq.com/api/v2/security-entities/risk-scores/{entity_id}https://api.datadoghq.eu/api/v2/security-entities/risk-scores/{entity_id}https://api.ap1.datadoghq.com/api/v2/security-entities/risk-scores/{entity_id}https://api.ap2.datadoghq.com/api/v2/security-entities/risk-scores/{entity_id}https://api.uk1.datadoghq.com/api/v2/security-entities/risk-scores/{entity_id}https://api.ddog-gov.com/api/v2/security-entities/risk-scores/{entity_id}https://api.us2.ddog-gov.com/api/v2/security-entities/risk-scores/{entity_id}

Overview

Get the risk score for a specific entity by its ID. Returns security risk assessment including risk score, severity, detected signals, misconfigurations, and identity risks.

Arguments

Path Parameters

Name
Type
Description
entity_id [required]
string

The URL-encoded unique identifier for the entity.

Response

OK

Response containing a single entity risk score

Field
Type
Description
data [required]
object

An entity risk score containing security risk assessment information

Code Example

Get Entity Risk Score
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export entity_id="arn:aws:iam::123456789012:user/john.doe"

# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security-entities/risk-scores/${entity_id}" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"