Create an entity context sync configuration
https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_confighttps://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_confighttps://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_confighttps://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_confighttps://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_confighttps://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_confighttps://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_confighttps://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_confighttps://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_configDescripción general
Create a new entity context sync configuration so Cloud SIEM can ingest entities from an external
source. The credentials provided in secrets are validated against the source before the configuration
is stored and never returned in subsequent responses.
OAuth apps require the manage_integrations authorization scope to access this endpoint.
Solicitud
Body Data (required)
The definition of the new integration configuration.
data [required]The entity context sync configuration to create.
attributes [required]The attributes of the entity context sync configuration to create.
<integration_type=GOOGLE_WORKSPACE>The attributes of a Google Workspace entity context sync configuration to create.
domain [required]The domain associated with the external entity source.
integration_type [required]The source type for a Google Workspace entity context sync.
GOOGLE_WORKSPACEname [required]The display name for the entity context sync configuration.
secrets [required]Credentials for a Google Workspace entity context sync.
admin_emailThe admin email to impersonate for domain-wide delegation.
service_account_json [required]The Google Cloud service account JSON used to authenticate against the Google Workspace Admin SDK. Additional keys beyond those documented are preserved.
client_email [required]The service account client email.
private_key [required]The service account private key.
project_id [required]The Google Cloud project ID that owns the service account.
type [required]The service account type. Must be service_account.
settingsFree-form, non-sensitive settings for the entity context sync. The accepted keys depend on the source type.
<integration_type=OKTA>The attributes of an Okta entity context sync configuration to create.
domain [required]The domain associated with the external entity source.
integration_type [required]The source type for an Okta entity context sync.
OKTAname [required]The display name for the entity context sync configuration.
secrets [required]Credentials for an Okta entity context sync.
api_token [required]The Okta API token used to authenticate against the Okta API.
settingsFree-form, non-sensitive settings for the entity context sync. The accepted keys depend on the source type.
<integration_type=ENTRA_ID>The attributes of an Entra ID entity context sync configuration to create.
domain [required]The domain associated with the external entity source.
integration_type [required]The source type for an Entra ID entity context sync.
ENTRA_IDname [required]The display name for the entity context sync configuration.
settingsFree-form, non-sensitive settings for the entity context sync. The accepted keys depend on the source type.
<integration_type=CROWDSTRIKE>The attributes of a CrowdStrike entity context sync configuration to create.
domain [required]The domain associated with the external entity source.
integration_type [required]The source type for a CrowdStrike entity context sync.
CROWDSTRIKEname [required]The display name for the entity context sync configuration.
secrets [required]Credentials for a CrowdStrike entity context sync.
client_id [required]The CrowdStrike API client ID.
client_secret [required]The CrowdStrike API client secret.
settingsFree-form, non-sensitive settings for the entity context sync. The accepted keys depend on the source type.
<integration_type=SENTINELONE>The attributes of a SentinelOne entity context sync configuration to create.
domain [required]The domain associated with the external entity source.
integration_type [required]The source type for a SentinelOne entity context sync.
SENTINELONEname [required]The display name for the entity context sync configuration.
secrets [required]Credentials for a SentinelOne entity context sync.
api_token [required]The SentinelOne API token.
settingsFree-form, non-sensitive settings for the entity context sync. The accepted keys depend on the source type.
type [required]The type of the resource. The value should always be integration_config.
integration_configintegration_config{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "admin@example.com",
"service_account_json": {
"client_email": "svc@my-project.iam.gserviceaccount.com",
"private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----",
"project_id": "my-project",
"type": "service_account"
}
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}Respuesta
OK
Response containing a single entity context sync configuration.
data [required]An entity context sync configuration.
attributes [required]The attributes of an entity context sync configuration as returned by the API.
created_atThe time at which the entity context sync configuration was created.
domain [required]The domain associated with the external entity source (for example, the customer's identity provider domain).
enabled [required]Whether the sync is enabled and actively ingesting entities into Cloud SIEM.
integration_type [required]The type of external source that provides entities to Cloud SIEM.
GOOGLE_WORKSPACE, OKTA, ENTRA_ID, CROWDSTRIKE, SENTINELONEmodified_atThe time at which the entity context sync configuration was last modified.
nameThe display name of the entity context sync configuration.
settingsFree-form, non-sensitive settings for the entity context sync. The accepted keys depend on the source type.
stateThe state of the credentials configured on the entity context sync.
valid, invalid, initializingid [required]The unique identifier of the integration configuration.
type [required]The type of the resource. The value should always be integration_config.
integration_configintegration_config{
"data": {
"attributes": {
"created_at": "2026-05-01T12:00:00Z",
"domain": "siem-test.com",
"enabled": true,
"integration_type": "GOOGLE_WORKSPACE",
"modified_at": "2026-05-01T12:00:00Z",
"name": "My GWS Integration",
"settings": {
"setting1": "value1"
},
"state": "valid"
},
"id": "11111111-2222-3333-4444-555555555555",
"type": "integration_config"
}
}Bad Request
API error response.
errors [required]A list of errors.
{
"errors": [
"Bad Request"
]
}Not Authorized
API error response.
errors [required]A list of errors.
{
"errors": [
"Bad Request"
]
}Too many requests
API error response.
errors [required]A list of errors.
{
"errors": [
"Bad Request"
]
}Ejemplo de código
# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/configuration/integration_config" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"domain": "siem-test.com",
"integration_type": "GOOGLE_WORKSPACE",
"name": "My GWS Integration",
"secrets": {
"admin_email": "test@example.com"
},
"settings": {
"setting1": "value1"
}
},
"type": "integration_config"
}
}
EOF// Create an entity context sync configuration returns "OK" response
package main
import (
"context"
"encoding/json"
"fmt"
"os"
"github.com/DataDog/datadog-api-client-go/v2/api/datadog"
"github.com/DataDog/datadog-api-client-go/v2/api/datadogV2"
)
func main() {
body := datadogV2.SecurityMonitoringIntegrationConfigCreateRequest{
Data: datadogV2.SecurityMonitoringIntegrationConfigCreateData{
Attributes: datadogV2.SecurityMonitoringIntegrationConfigCreateAttributes{
SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes: &datadogV2.SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes{
Domain: "siem-test.com",
IntegrationType: datadogV2.SECURITYMONITORINGINTEGRATIONTYPEGOOGLEWORKSPACE_GOOGLE_WORKSPACE,
Name: "My GWS Integration",
Secrets: datadogV2.SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets{
AdminEmail: datadog.PtrString("admin@example.com"),
ServiceAccountJson: datadogV2.SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount{
ClientEmail: "svc@my-project.iam.gserviceaccount.com",
PrivateKey: `-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----`,
ProjectId: "my-project",
Type: "service_account",
},
},
Settings: map[string]interface{}{
"setting1": "value1",
},
}},
Type: datadogV2.SECURITYMONITORINGINTEGRATIONCONFIGRESOURCETYPE_INTEGRATION_CONFIG,
},
}
ctx := datadog.NewDefaultContext(context.Background())
ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN"))
configuration := datadog.NewConfiguration()
configuration.SetUnstableOperationEnabled("v2.CreateSecurityMonitoringIntegrationConfig", true)
apiClient := datadog.NewAPIClient(configuration)
api := datadogV2.NewSecurityMonitoringApi(apiClient)
resp, r, err := api.CreateSecurityMonitoringIntegrationConfig(ctx, body)
if err != nil {
fmt.Fprintf(os.Stderr, "Error when calling `SecurityMonitoringApi.CreateSecurityMonitoringIntegrationConfig`: %v\n", err)
fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r)
}
responseContent, _ := json.MarshalIndent(resp, "", " ")
fmt.Fprintf(os.Stdout, "Response from `SecurityMonitoringApi.CreateSecurityMonitoringIntegrationConfig`:\n%s\n", responseContent)
}
Instructions
First install the library and its dependencies and then save the example to main.go and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"// Create an entity context sync configuration returns "OK" response
import com.datadog.api.client.ApiClient;
import com.datadog.api.client.ApiException;
import com.datadog.api.client.v2.api.SecurityMonitoringApi;
import com.datadog.api.client.v2.model.SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationConfigCreateAttributes;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationConfigCreateData;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationConfigCreateRequest;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationConfigResourceType;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationConfigResponse;
import com.datadog.api.client.v2.model.SecurityMonitoringIntegrationTypeGoogleWorkspace;
import java.util.Map;
public class Example {
public static void main(String[] args) {
ApiClient defaultClient = ApiClient.getDefaultApiClient();
defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN"));
defaultClient.setUnstableOperationEnabled("v2.createSecurityMonitoringIntegrationConfig", true);
SecurityMonitoringApi apiInstance = new SecurityMonitoringApi(defaultClient);
SecurityMonitoringIntegrationConfigCreateRequest body =
new SecurityMonitoringIntegrationConfigCreateRequest()
.data(
new SecurityMonitoringIntegrationConfigCreateData()
.attributes(
new SecurityMonitoringIntegrationConfigCreateAttributes(
new SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes()
.domain("siem-test.com")
.integrationType(
SecurityMonitoringIntegrationTypeGoogleWorkspace
.GOOGLE_WORKSPACE)
.name("My GWS Integration")
.secrets(
new SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets()
.adminEmail("admin@example.com")
.serviceAccountJson(
new SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount()
.clientEmail(
"svc@my-project.iam.gserviceaccount.com")
.privateKey(
"""
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
""")
.projectId("my-project")
.type("service_account")))
.settings(Map.ofEntries(Map.entry("setting1", "value1")))))
.type(SecurityMonitoringIntegrationConfigResourceType.INTEGRATION_CONFIG));
try {
SecurityMonitoringIntegrationConfigResponse result =
apiInstance.createSecurityMonitoringIntegrationConfig(body);
System.out.println(result);
} catch (ApiException e) {
System.err.println(
"Exception when calling SecurityMonitoringApi#createSecurityMonitoringIntegrationConfig");
System.err.println("Status code: " + e.getCode());
System.err.println("Reason: " + e.getResponseBody());
System.err.println("Response headers: " + e.getResponseHeaders());
e.printStackTrace();
}
}
}
Instructions
First install the library and its dependencies and then save the example to Example.java and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java""""
Create an entity context sync configuration returns "OK" response
"""
from os import environ
from datadog_api_client import ApiClient, Configuration
from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
from datadog_api_client.v2.model.security_monitoring_google_workspace_integration_config_create_attributes import (
SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes,
)
from datadog_api_client.v2.model.security_monitoring_integration_config_create_data import (
SecurityMonitoringIntegrationConfigCreateData,
)
from datadog_api_client.v2.model.security_monitoring_integration_config_create_request import (
SecurityMonitoringIntegrationConfigCreateRequest,
)
from datadog_api_client.v2.model.security_monitoring_integration_config_google_workspace_secrets import (
SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets,
)
from datadog_api_client.v2.model.security_monitoring_integration_config_google_workspace_service_account import (
SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount,
)
from datadog_api_client.v2.model.security_monitoring_integration_config_resource_type import (
SecurityMonitoringIntegrationConfigResourceType,
)
from datadog_api_client.v2.model.security_monitoring_integration_config_settings import (
SecurityMonitoringIntegrationConfigSettings,
)
from datadog_api_client.v2.model.security_monitoring_integration_type_google_workspace import (
SecurityMonitoringIntegrationTypeGoogleWorkspace,
)
body = SecurityMonitoringIntegrationConfigCreateRequest(
data=SecurityMonitoringIntegrationConfigCreateData(
attributes=SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes(
domain="siem-test.com",
integration_type=SecurityMonitoringIntegrationTypeGoogleWorkspace.GOOGLE_WORKSPACE,
name="My GWS Integration",
secrets=SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets(
admin_email="admin@example.com",
service_account_json=SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount(
client_email="svc@my-project.iam.gserviceaccount.com",
private_key="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----",
project_id="my-project",
type="service_account",
),
),
settings=SecurityMonitoringIntegrationConfigSettings([("setting1", "value1")]),
),
type=SecurityMonitoringIntegrationConfigResourceType.INTEGRATION_CONFIG,
),
)
configuration = Configuration()
configuration.access_token = environ["DD_BEARER_TOKEN"]
configuration.unstable_operations["create_security_monitoring_integration_config"] = True
with ApiClient(configuration) as api_client:
api_instance = SecurityMonitoringApi(api_client)
response = api_instance.create_security_monitoring_integration_config(body=body)
print(response)
Instructions
First install the library and its dependencies and then save the example to example.py and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"# Create an entity context sync configuration returns "OK" response
require "datadog_api_client"
DatadogAPIClient.configure do |config|
config.access_token = ENV["DD_BEARER_TOKEN"]
config.unstable_operations["v2.create_security_monitoring_integration_config".to_sym] = true
end
api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
body = DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateRequest.new({
data: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateData.new({
attributes: DatadogAPIClient::V2::SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes.new({
domain: "siem-test.com",
integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationTypeGoogleWorkspace::GOOGLE_WORKSPACE,
name: "My GWS Integration",
secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets.new({
admin_email: "admin@example.com",
service_account_json: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount.new({
client_email: "svc@my-project.iam.gserviceaccount.com",
private_key: '-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----',
project_id: "my-project",
type: "service_account",
}),
}),
settings: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSettings.new({}),
}),
type: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
}),
})
p api_instance.create_security_monitoring_integration_config(body)
Instructions
First install the library and its dependencies and then save the example to example.rb and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"// Create an entity context sync configuration returns "OK" response
use datadog_api_client::datadog;
use datadog_api_client::datadogV2::api_security_monitoring::SecurityMonitoringAPI;
use datadog_api_client::datadogV2::model::SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes;
use datadog_api_client::datadogV2::model::SecurityMonitoringIntegrationConfigCreateAttributes;
use datadog_api_client::datadogV2::model::SecurityMonitoringIntegrationConfigCreateData;
use datadog_api_client::datadogV2::model::SecurityMonitoringIntegrationConfigCreateRequest;
use datadog_api_client::datadogV2::model::SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets;
use datadog_api_client::datadogV2::model::SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount;
use datadog_api_client::datadogV2::model::SecurityMonitoringIntegrationConfigResourceType;
use datadog_api_client::datadogV2::model::SecurityMonitoringIntegrationTypeGoogleWorkspace;
use serde_json::Value;
use std::collections::BTreeMap;
#[tokio::main]
async fn main() {
let body =
SecurityMonitoringIntegrationConfigCreateRequest::new(
SecurityMonitoringIntegrationConfigCreateData::new(
SecurityMonitoringIntegrationConfigCreateAttributes
::SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes(
Box::new(
SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes::new(
"siem-test.com".to_string(),
SecurityMonitoringIntegrationTypeGoogleWorkspace::GOOGLE_WORKSPACE,
"My GWS Integration".to_string(),
SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets::new(
SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount::new(
"svc@my-project.iam.gserviceaccount.com".to_string(),
r#"-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----"#.to_string(),
"my-project".to_string(),
"service_account".to_string(),
),
).admin_email("admin@example.com".to_string()),
).settings(BTreeMap::from([("setting1".to_string(), Value::from("value1"))])),
),
),
SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
),
);
let mut configuration = datadog::Configuration::new();
configuration
.set_unstable_operation_enabled("v2.create_security_monitoring_integration_config", true);
let api = SecurityMonitoringAPI::with_config(configuration);
let resp = api
.create_security_monitoring_integration_config(body)
.await;
if let Ok(value) = resp {
println!("{:#?}", value);
} else {
println!("{:#?}", resp.unwrap_err());
}
}
Instructions
First install the library and its dependencies and then save the example to src/main.rs and run following commands:
DD_SITE="datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="us3.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="us5.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="datadoghq.eu" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="ap1.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="ap2.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="uk1.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="ddog-gov.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="us2.ddog-gov.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo run/**
* Create an entity context sync configuration returns "OK" response
*/
import { client, v2 } from "@datadog/datadog-api-client";
const configuration = client.createConfiguration({
authMethods: {
AuthZ: {
accessToken: process.env.DD_BEARER_TOKEN as string,
},
},
});
configuration.unstableOperations[
"v2.createSecurityMonitoringIntegrationConfig"
] = true;
const apiInstance = new v2.SecurityMonitoringApi(configuration);
const params: v2.SecurityMonitoringApiCreateSecurityMonitoringIntegrationConfigRequest =
{
body: {
data: {
attributes: {
domain: "siem-test.com",
integrationType: "GOOGLE_WORKSPACE",
name: "My GWS Integration",
secrets: {
adminEmail: "admin@example.com",
serviceAccountJson: {
clientEmail: "svc@my-project.iam.gserviceaccount.com",
privateKey:
"-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----",
projectId: "my-project",
type: "service_account",
},
},
settings: {
setting1: "value1",
},
},
type: "integration_config",
},
},
};
apiInstance
.createSecurityMonitoringIntegrationConfig(params)
.then((data: v2.SecurityMonitoringIntegrationConfigResponse) => {
console.log(
"API called successfully. Returned data: " + JSON.stringify(data)
);
})
.catch((error: any) => console.error(error));
Instructions
First install the library and its dependencies and then save the example to example.ts and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"