datadog.SecurityFindingsDefaultInboxRule

Datadog v5.12.0, Sep 25 26

Viewing docs for Datadog v5.12.0
published on Friday, Sep 25, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-datadog

Viewing docs for Datadog v5.12.0
published on Friday, Sep 25, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-datadog

Provides a Datadog security findings default inbox rule resource. Datadog manages default inbox rules. Their name, rule, and action are read-only, and each organization can change only whether they are enabled. Default inbox rules always exist, so this resource can only be imported, not created; removing it from the configuration does not delete the rule, it only stops managing it. Default inbox rules are not part of the evaluation order managed by the datadog.SecurityFindingsInboxRulesOrder resource.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as datadog from "@pulumi/datadog";

// Default inbox rules always exist server-side and can only be imported, not created.
// Only `enabled` can be managed; all other attributes are read from Datadog.
// Import the rule with its fixed ID before applying, e.g.:
//   terraform import datadog_security_findings_default_inbox_rule.secret secret_default_rule
// Known default rule IDs: identity_risk_default_rule, secret_default_rule,
// library_vulnerability_default_rule, attack_path_default_rule,
// host_and_container_vulnerability_default_rule, runtime_code_vulnerability_default_rule,
// iac_misconfiguration_default_rule, misconfiguration_default_rule.
const secret = new datadog.SecurityFindingsDefaultInboxRule("secret", {enabled: true});

import pulumi
import pulumi_datadog as datadog

# Default inbox rules always exist server-side and can only be imported, not created.
# Only `enabled` can be managed; all other attributes are read from Datadog.
# Import the rule with its fixed ID before applying, e.g.:
#   terraform import datadog_security_findings_default_inbox_rule.secret secret_default_rule
# Known default rule IDs: identity_risk_default_rule, secret_default_rule,
# library_vulnerability_default_rule, attack_path_default_rule,
# host_and_container_vulnerability_default_rule, runtime_code_vulnerability_default_rule,
# iac_misconfiguration_default_rule, misconfiguration_default_rule.
secret = datadog.SecurityFindingsDefaultInboxRule("secret", enabled=True)

package main

import (
	"github.com/pulumi/pulumi-datadog/sdk/v5/go/datadog"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Default inbox rules always exist server-side and can only be imported, not created.
		// Only `enabled` can be managed; all other attributes are read from Datadog.
		// Import the rule with its fixed ID before applying, e.g.:
		//
		//	terraform import datadog_security_findings_default_inbox_rule.secret secret_default_rule
		//
		// Known default rule IDs: identity_risk_default_rule, secret_default_rule,
		// library_vulnerability_default_rule, attack_path_default_rule,
		// host_and_container_vulnerability_default_rule, runtime_code_vulnerability_default_rule,
		// iac_misconfiguration_default_rule, misconfiguration_default_rule.
		_, err := datadog.NewSecurityFindingsDefaultInboxRule(ctx, "secret", &datadog.SecurityFindingsDefaultInboxRuleArgs{
			Enabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Datadog = Pulumi.Datadog;

return await Deployment.RunAsync(() => 
{
    // Default inbox rules always exist server-side and can only be imported, not created.
    // Only `enabled` can be managed; all other attributes are read from Datadog.
    // Import the rule with its fixed ID before applying, e.g.:
    //   terraform import datadog_security_findings_default_inbox_rule.secret secret_default_rule
    // Known default rule IDs: identity_risk_default_rule, secret_default_rule,
    // library_vulnerability_default_rule, attack_path_default_rule,
    // host_and_container_vulnerability_default_rule, runtime_code_vulnerability_default_rule,
    // iac_misconfiguration_default_rule, misconfiguration_default_rule.
    var secret = new Datadog.SecurityFindingsDefaultInboxRule("secret", new()
    {
        Enabled = true,
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.datadog.SecurityFindingsDefaultInboxRule;
import com.pulumi.datadog.SecurityFindingsDefaultInboxRuleArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Default inbox rules always exist server-side and can only be imported, not created.
        // Only `enabled` can be managed; all other attributes are read from Datadog.
        // Import the rule with its fixed ID before applying, e.g.:
        //   terraform import datadog_security_findings_default_inbox_rule.secret secret_default_rule
        // Known default rule IDs: identity_risk_default_rule, secret_default_rule,
        // library_vulnerability_default_rule, attack_path_default_rule,
        // host_and_container_vulnerability_default_rule, runtime_code_vulnerability_default_rule,
        // iac_misconfiguration_default_rule, misconfiguration_default_rule.
        var secret = new SecurityFindingsDefaultInboxRule("secret", SecurityFindingsDefaultInboxRuleArgs.builder()
            .enabled(true)
            .build());

    }
}

resources:
  # Default inbox rules always exist server-side and can only be imported, not created.
  # Only `enabled` can be managed; all other attributes are read from Datadog.
  # Import the rule with its fixed ID before applying, e.g.:
  #   terraform import datadog_security_findings_default_inbox_rule.secret secret_default_rule
  # Known default rule IDs: identity_risk_default_rule, secret_default_rule,
  # library_vulnerability_default_rule, attack_path_default_rule,
  # host_and_container_vulnerability_default_rule, runtime_code_vulnerability_default_rule,
  # iac_misconfiguration_default_rule, misconfiguration_default_rule.
  secret:
    type: datadog:SecurityFindingsDefaultInboxRule
    properties:
      enabled: true

pulumi {
  required_providers {
    datadog = {
      source = "pulumi/datadog"
    }
  }
}

# Default inbox rules always exist server-side and can only be imported, not created.
# Only `enabled` can be managed; all other attributes are read from Datadog.
# Import the rule with its fixed ID before applying, e.g.:
#   terraform import datadog_security_findings_default_inbox_rule.secret secret_default_rule
# Known default rule IDs: identity_risk_default_rule, secret_default_rule,
# library_vulnerability_default_rule, attack_path_default_rule,
# host_and_container_vulnerability_default_rule, runtime_code_vulnerability_default_rule,
# iac_misconfiguration_default_rule, misconfiguration_default_rule.
resource "datadog_securityfindingsdefaultinboxrule" "secret" {
  enabled = true
}

Create SecurityFindingsDefaultInboxRule Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new SecurityFindingsDefaultInboxRule(name: string, args?: SecurityFindingsDefaultInboxRuleArgs, opts?: CustomResourceOptions);

@overload
def SecurityFindingsDefaultInboxRule(resource_name: str,
                                     args: Optional[SecurityFindingsDefaultInboxRuleArgs] = None,
                                     opts: Optional[ResourceOptions] = None)

@overload
def SecurityFindingsDefaultInboxRule(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     enabled: Optional[bool] = None)

func NewSecurityFindingsDefaultInboxRule(ctx *Context, name string, args *SecurityFindingsDefaultInboxRuleArgs, opts ...ResourceOption) (*SecurityFindingsDefaultInboxRule, error)

public SecurityFindingsDefaultInboxRule(string name, SecurityFindingsDefaultInboxRuleArgs? args = null, CustomResourceOptions? opts = null)

public SecurityFindingsDefaultInboxRule(String name, SecurityFindingsDefaultInboxRuleArgs args)
public SecurityFindingsDefaultInboxRule(String name, SecurityFindingsDefaultInboxRuleArgs args, CustomResourceOptions options)

type: datadog:SecurityFindingsDefaultInboxRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "datadog_security_findings_default_inbox_rule" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args SecurityFindingsDefaultInboxRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args SecurityFindingsDefaultInboxRuleArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args SecurityFindingsDefaultInboxRuleArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args SecurityFindingsDefaultInboxRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args SecurityFindingsDefaultInboxRuleArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var securityFindingsDefaultInboxRuleResource = new Datadog.SecurityFindingsDefaultInboxRule("securityFindingsDefaultInboxRuleResource", new()
{
    Enabled = false,
});

example, err := datadog.NewSecurityFindingsDefaultInboxRule(ctx, "securityFindingsDefaultInboxRuleResource", &datadog.SecurityFindingsDefaultInboxRuleArgs{
	Enabled: pulumi.Bool(false),
})

resource "datadog_security_findings_default_inbox_rule" "securityFindingsDefaultInboxRuleResource" {
  lifecycle {
    create_before_destroy = true
  }
  enabled = false
}

var securityFindingsDefaultInboxRuleResource = new SecurityFindingsDefaultInboxRule("securityFindingsDefaultInboxRuleResource", SecurityFindingsDefaultInboxRuleArgs.builder()
    .enabled(false)
    .build());

security_findings_default_inbox_rule_resource = datadog.SecurityFindingsDefaultInboxRule("securityFindingsDefaultInboxRuleResource", enabled=False)

const securityFindingsDefaultInboxRuleResource = new datadog.SecurityFindingsDefaultInboxRule("securityFindingsDefaultInboxRuleResource", {enabled: false});

type: datadog:SecurityFindingsDefaultInboxRule
properties:
    enabled: false

SecurityFindingsDefaultInboxRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The SecurityFindingsDefaultInboxRule resource accepts the following input properties:

Enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.

Enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.

enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.

enabled Boolean: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.

enabled boolean: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.

enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.

enabled Boolean: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.

Outputs

All input properties are implicitly available as output properties. Additionally, the SecurityFindingsDefaultInboxRule resource produces the following output properties:

Action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
Id string: The provider-assigned unique ID for this managed resource.
Name string: The name of the default inbox rule.
Rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

Action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
Id string: The provider-assigned unique ID for this managed resource.
Name string: The name of the default inbox rule.
Rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

action object: The action to take when the inbox rule matches a finding.
id string: The provider-assigned unique ID for this managed resource.
name string: The name of the default inbox rule.
rule object: Defines the scope of findings to which the automation rule applies.

action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
id String: The provider-assigned unique ID for this managed resource.
name String: The name of the default inbox rule.
rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
id string: The provider-assigned unique ID for this managed resource.
name string: The name of the default inbox rule.
rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
id str: The provider-assigned unique ID for this managed resource.
name str: The name of the default inbox rule.
rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

action Property Map: The action to take when the inbox rule matches a finding.
id String: The provider-assigned unique ID for this managed resource.
name String: The name of the default inbox rule.
rule Property Map: Defines the scope of findings to which the automation rule applies.

Look up Existing SecurityFindingsDefaultInboxRule Resource

Get an existing SecurityFindingsDefaultInboxRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SecurityFindingsDefaultInboxRuleState, opts?: CustomResourceOptions): SecurityFindingsDefaultInboxRule

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[SecurityFindingsDefaultInboxRuleActionArgs] = None,
        enabled: Optional[bool] = None,
        name: Optional[str] = None,
        rule: Optional[SecurityFindingsDefaultInboxRuleRuleArgs] = None) -> SecurityFindingsDefaultInboxRule

func GetSecurityFindingsDefaultInboxRule(ctx *Context, name string, id IDInput, state *SecurityFindingsDefaultInboxRuleState, opts ...ResourceOption) (*SecurityFindingsDefaultInboxRule, error)

public static SecurityFindingsDefaultInboxRule Get(string name, Input<string> id, SecurityFindingsDefaultInboxRuleState? state, CustomResourceOptions? opts = null)

public static SecurityFindingsDefaultInboxRule get(String name, Output<String> id, SecurityFindingsDefaultInboxRuleState state, CustomResourceOptions options)

resources:  _:    type: datadog:SecurityFindingsDefaultInboxRule    get:      id: ${id}

import {
  to = datadog_security_findings_default_inbox_rule.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
Enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.
Name string: The name of the default inbox rule.
Rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

Action SecurityFindingsDefaultInboxRuleActionArgs: The action to take when the inbox rule matches a finding.
Enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.
Name string: The name of the default inbox rule.
Rule SecurityFindingsDefaultInboxRuleRuleArgs: Defines the scope of findings to which the automation rule applies.

action object: The action to take when the inbox rule matches a finding.
enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.
name string: The name of the default inbox rule.
rule object: Defines the scope of findings to which the automation rule applies.

action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
enabled Boolean: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.
name String: The name of the default inbox rule.
rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

action SecurityFindingsDefaultInboxRuleAction: The action to take when the inbox rule matches a finding.
enabled boolean: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.
name string: The name of the default inbox rule.
rule SecurityFindingsDefaultInboxRuleRule: Defines the scope of findings to which the automation rule applies.

action SecurityFindingsDefaultInboxRuleActionArgs: The action to take when the inbox rule matches a finding.
enabled bool: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.
name str: The name of the default inbox rule.
rule SecurityFindingsDefaultInboxRuleRuleArgs: Defines the scope of findings to which the automation rule applies.

action Property Map: The action to take when the inbox rule matches a finding.
enabled Boolean: Whether the default inbox rule is enabled for the organization. When not set, the rule's current server-side value is adopted; declare it to manage the value. Default inbox rules are enabled unless disabled.
name String: The name of the default inbox rule.
rule Property Map: Defines the scope of findings to which the automation rule applies.

Supporting Types

SecurityFindingsDefaultInboxRuleAction, SecurityFindingsDefaultInboxRuleActionArgs

Description string: An optional description providing more context for the rule.

Description string: An optional description providing more context for the rule.

description string: An optional description providing more context for the rule.

description String: An optional description providing more context for the rule.

description string: An optional description providing more context for the rule.

description str: An optional description providing more context for the rule.

description String: An optional description providing more context for the rule.

SecurityFindingsDefaultInboxRuleRule, SecurityFindingsDefaultInboxRuleRuleArgs

FindingTypes List<string>: The list of security finding types that the automation rule applies to.
Query string: A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

FindingTypes []string: The list of security finding types that the automation rule applies to.
Query string: A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

finding_types list(string): The list of security finding types that the automation rule applies to.
query string: A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

findingTypes List<String>: The list of security finding types that the automation rule applies to.
query String: A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

findingTypes string[]: The list of security finding types that the automation rule applies to.
query string: A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

finding_types Sequence[str]: The list of security finding types that the automation rule applies to.
query str: A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

findingTypes List<String>: The list of security finding types that the automation rule applies to.
query String: A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

Import

The pulumi import command can be used, for example:

$ pulumi import datadog:index/securityFindingsDefaultInboxRule:SecurityFindingsDefaultInboxRule secret secret_default_rule

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Datadog pulumi/pulumi-datadog
License: Apache-2.0
Notes: This Pulumi package is based on the datadog Terraform Provider.

Viewing docs for Datadog v5.12.0
published on Friday, Sep 25, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-datadog

datadog.SecurityFindingsDefaultInboxRule

On this page

On this page

Example Usage

Create SecurityFindingsDefaultInboxRule Resource

Constructor syntax

Parameters

Constructor example

SecurityFindingsDefaultInboxRule Resource Properties

Inputs

Outputs

Look up Existing SecurityFindingsDefaultInboxRule Resource

Supporting Types

SecurityFindingsDefaultInboxRuleAction, SecurityFindingsDefaultInboxRuleActionArgs

SecurityFindingsDefaultInboxRuleRule, SecurityFindingsDefaultInboxRuleRuleArgs

Import

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

datadog.SecurityFindingsDefaultInboxRule

On this page

On this page

Example Usage

Create SecurityFindingsDefaultInboxRule Resource

Constructor syntax

Parameters

Constructor example

SecurityFindingsDefaultInboxRule Resource Properties

Inputs

Outputs

Look up Existing SecurityFindingsDefaultInboxRule Resource

Supporting Types

SecurityFindingsDefaultInboxRuleAction, SecurityFindingsDefaultInboxRuleActionArgs

SecurityFindingsDefaultInboxRuleRule, SecurityFindingsDefaultInboxRuleRuleArgs

Import

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.