Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Datadog Provider
  4. API Docs
  5. SecurityFindingsDueDateRule
Viewing docs for Datadog v5.9.0
published on Saturday, Jul 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-datadog

datadog.SecurityFindingsDueDateRule

datadog logo
Viewing docs for Datadog v5.9.0
published on Saturday, Jul 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-datadog

    Provides a Datadog security findings automation due date rule resource. This can be used to create and manage due date rules that automatically assign remediation deadlines to matching security findings. Use the datadog.SecurityFindingsDueDateRulesOrder resource to manage the evaluation order of due date rules.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as datadog from "@pulumi/datadog";

// Create a due date rule that assigns remediation SLAs to production misconfigurations.
const prodSla = new datadog.SecurityFindingsDueDateRule("prod_sla", {
    name: "SLA for production misconfigurations",
    enabled: true,
    rule: {
        finding_types: ["misconfiguration"],
        query: "env:prod",
    },
    action: {
        due_from: "first_seen",
        due_days_per_severity: [
            {
                severity: "critical",
                dueInDays: 7,
            },
            {
                severity: "high",
                dueInDays: 30,
            },
            {
                severity: "medium",
                dueInDays: 90,
            },
        ],
    },
});

    import pulumi
import pulumi_datadog as datadog

# Create a due date rule that assigns remediation SLAs to production misconfigurations.
prod_sla = datadog.SecurityFindingsDueDateRule("prod_sla",
    name="SLA for production misconfigurations",
    enabled=True,
    rule={
        "finding_types": ["misconfiguration"],
        "query": "env:prod",
    },
    action={
        "due_from": "first_seen",
        "due_days_per_severity": [
            {
                "severity": "critical",
                "dueInDays": 7,
            },
            {
                "severity": "high",
                "dueInDays": 30,
            },
            {
                "severity": "medium",
                "dueInDays": 90,
            },
        ],
    })

    package main

import (
	"github.com/pulumi/pulumi-datadog/sdk/v5/go/datadog"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Create a due date rule that assigns remediation SLAs to production misconfigurations.
		_, err := datadog.NewSecurityFindingsDueDateRule(ctx, "prod_sla", &datadog.SecurityFindingsDueDateRuleArgs{
			Name:    pulumi.String("SLA for production misconfigurations"),
			Enabled: pulumi.Bool(true),
			Rule: &datadog.SecurityFindingsDueDateRuleRuleArgs{
				Finding_types: []string{
					"misconfiguration",
				},
				Query: pulumi.String("env:prod"),
			},
			Action: &datadog.SecurityFindingsDueDateRuleActionArgs{
				Due_from: "first_seen",
				Due_days_per_severity: []interface{}{
					map[string]interface{}{
						"severity":  "critical",
						"dueInDays": 7,
					},
					map[string]interface{}{
						"severity":  "high",
						"dueInDays": 30,
					},
					map[string]interface{}{
						"severity":  "medium",
						"dueInDays": 90,
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Datadog = Pulumi.Datadog;

return await Deployment.RunAsync(() => 
{
    // Create a due date rule that assigns remediation SLAs to production misconfigurations.
    var prodSla = new Datadog.SecurityFindingsDueDateRule("prod_sla", new()
    {
        Name = "SLA for production misconfigurations",
        Enabled = true,
        Rule = new Datadog.Inputs.SecurityFindingsDueDateRuleRuleArgs
        {
            Finding_types = new[]
            {
                "misconfiguration",
            },
            Query = "env:prod",
        },
        Action = new Datadog.Inputs.SecurityFindingsDueDateRuleActionArgs
        {
            Due_from = "first_seen",
            Due_days_per_severity = new[]
            {
                
                {
                    { "severity", "critical" },
                    { "dueInDays", 7 },
                },
                
                {
                    { "severity", "high" },
                    { "dueInDays", 30 },
                },
                
                {
                    { "severity", "medium" },
                    { "dueInDays", 90 },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.datadog.SecurityFindingsDueDateRule;
import com.pulumi.datadog.SecurityFindingsDueDateRuleArgs;
import com.pulumi.datadog.inputs.SecurityFindingsDueDateRuleRuleArgs;
import com.pulumi.datadog.inputs.SecurityFindingsDueDateRuleActionArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Create a due date rule that assigns remediation SLAs to production misconfigurations.
        var prodSla = new SecurityFindingsDueDateRule("prodSla", SecurityFindingsDueDateRuleArgs.builder()
            .name("SLA for production misconfigurations")
            .enabled(true)
            .rule(SecurityFindingsDueDateRuleRuleArgs.builder()
                .finding_types(Arrays.asList("misconfiguration"))
                .query("env:prod")
                .build())
            .action(SecurityFindingsDueDateRuleActionArgs.builder()
                .due_from("first_seen")
                .due_days_per_severity(Arrays.asList(                
                    Map.ofEntries(
                        Map.entry("severity", "critical"),
                        Map.entry("dueInDays", 7)
                    ),
                    Map.ofEntries(
                        Map.entry("severity", "high"),
                        Map.entry("dueInDays", 30)
                    ),
                    Map.ofEntries(
                        Map.entry("severity", "medium"),
                        Map.entry("dueInDays", 90)
                    )))
                .build())
            .build());

    }
}

    resources:
  # Create a due date rule that assigns remediation SLAs to production misconfigurations.
  prodSla:
    type: datadog:SecurityFindingsDueDateRule
    name: prod_sla
    properties:
      name: SLA for production misconfigurations
      enabled: true
      rule:
        finding_types:
          - misconfiguration
        query: env:prod
      action:
        due_from: first_seen
        due_days_per_severity:
          - severity: critical
            dueInDays: 7
          - severity: high
            dueInDays: 30
          - severity: medium
            dueInDays: 90

    pulumi {
  required_providers {
    datadog = {
      source = "pulumi/datadog"
    }
  }
}

# Create a due date rule that assigns remediation SLAs to production misconfigurations.
resource "datadog_securityfindingsduedaterule" "prod_sla" {
  name    = "SLA for production misconfigurations"
  enabled = true
  rule = {
    finding_types = ["misconfiguration"]
    query         = "env:prod"
  }
  action = {
    due_from = "first_seen"
    due_days_per_severity = [{
      "severity"  = "critical"
      "dueInDays" = 7
      }, {
      "severity"  = "high"
      "dueInDays" = 30
      }, {
      "severity"  = "medium"
      "dueInDays" = 90
    }]
  }
}

    Create SecurityFindingsDueDateRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SecurityFindingsDueDateRule(name: string, args: SecurityFindingsDueDateRuleArgs, opts?: CustomResourceOptions);
    @overload
def SecurityFindingsDueDateRule(resource_name: str,
                                args: SecurityFindingsDueDateRuleArgs,
                                opts: Optional[ResourceOptions] = None)

@overload
def SecurityFindingsDueDateRule(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                action: Optional[SecurityFindingsDueDateRuleActionArgs] = None,
                                name: Optional[str] = None,
                                rule: Optional[SecurityFindingsDueDateRuleRuleArgs] = None,
                                enabled: Optional[bool] = None)
    func NewSecurityFindingsDueDateRule(ctx *Context, name string, args SecurityFindingsDueDateRuleArgs, opts ...ResourceOption) (*SecurityFindingsDueDateRule, error)
    public SecurityFindingsDueDateRule(string name, SecurityFindingsDueDateRuleArgs args, CustomResourceOptions? opts = null)
    public SecurityFindingsDueDateRule(String name, SecurityFindingsDueDateRuleArgs args)
public SecurityFindingsDueDateRule(String name, SecurityFindingsDueDateRuleArgs args, CustomResourceOptions options)

    type: datadog:SecurityFindingsDueDateRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "datadog_security_findings_due_date_rule" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args SecurityFindingsDueDateRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SecurityFindingsDueDateRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SecurityFindingsDueDateRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SecurityFindingsDueDateRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SecurityFindingsDueDateRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var securityFindingsDueDateRuleResource = new Datadog.SecurityFindingsDueDateRule("securityFindingsDueDateRuleResource", new()
{
    Action = new Datadog.Inputs.SecurityFindingsDueDateRuleActionArgs
    {
        DueDaysPerSeverities = new[]
        {
            new Datadog.Inputs.SecurityFindingsDueDateRuleActionDueDaysPerSeverityArgs
            {
                DueInDays = 0,
                Severity = "string",
            },
        },
        DueFrom = "string",
        ReasonDescription = "string",
    },
    Name = "string",
    Rule = new Datadog.Inputs.SecurityFindingsDueDateRuleRuleArgs
    {
        FindingTypes = new[]
        {
            "string",
        },
        Query = "string",
    },
    Enabled = false,
});

    example, err := datadog.NewSecurityFindingsDueDateRule(ctx, "securityFindingsDueDateRuleResource", &datadog.SecurityFindingsDueDateRuleArgs{
	Action: &datadog.SecurityFindingsDueDateRuleActionArgs{
		DueDaysPerSeverities: datadog.SecurityFindingsDueDateRuleActionDueDaysPerSeverityArray{
			&datadog.SecurityFindingsDueDateRuleActionDueDaysPerSeverityArgs{
				DueInDays: pulumi.Int(0),
				Severity:  pulumi.String("string"),
			},
		},
		DueFrom:           pulumi.String("string"),
		ReasonDescription: pulumi.String("string"),
	},
	Name: pulumi.String("string"),
	Rule: &datadog.SecurityFindingsDueDateRuleRuleArgs{
		FindingTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
		Query: pulumi.String("string"),
	},
	Enabled: pulumi.Bool(false),
})

    resource "datadog_security_findings_due_date_rule" "securityFindingsDueDateRuleResource" {
  lifecycle {
    create_before_destroy = true
  }
  action = {
    due_days_per_severities = [{
      due_in_days = 0
      severity    = "string"
    }]
    due_from           = "string"
    reason_description = "string"
  }
  name = "string"
  rule = {
    finding_types = ["string"]
    query         = "string"
  }
  enabled = false
}

    var securityFindingsDueDateRuleResource = new SecurityFindingsDueDateRule("securityFindingsDueDateRuleResource", SecurityFindingsDueDateRuleArgs.builder()
    .action(SecurityFindingsDueDateRuleActionArgs.builder()
        .dueDaysPerSeverities(SecurityFindingsDueDateRuleActionDueDaysPerSeverityArgs.builder()
            .dueInDays(0)
            .severity("string")
            .build())
        .dueFrom("string")
        .reasonDescription("string")
        .build())
    .name("string")
    .rule(SecurityFindingsDueDateRuleRuleArgs.builder()
        .findingTypes("string")
        .query("string")
        .build())
    .enabled(false)
    .build());

    security_findings_due_date_rule_resource = datadog.SecurityFindingsDueDateRule("securityFindingsDueDateRuleResource",
    action={
        "due_days_per_severities": [{
            "due_in_days": 0,
            "severity": "string",
        }],
        "due_from": "string",
        "reason_description": "string",
    },
    name="string",
    rule={
        "finding_types": ["string"],
        "query": "string",
    },
    enabled=False)

    const securityFindingsDueDateRuleResource = new datadog.SecurityFindingsDueDateRule("securityFindingsDueDateRuleResource", {
    action: {
        dueDaysPerSeverities: [{
            dueInDays: 0,
            severity: "string",
        }],
        dueFrom: "string",
        reasonDescription: "string",
    },
    name: "string",
    rule: {
        findingTypes: ["string"],
        query: "string",
    },
    enabled: false,
});

    type: datadog:SecurityFindingsDueDateRule
properties:
    action:
        dueDaysPerSeverities:
            - dueInDays: 0
              severity: string
        dueFrom: string
        reasonDescription: string
    enabled: false
    name: string
    rule:
        findingTypes:
            - string
        query: string

    SecurityFindingsDueDateRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SecurityFindingsDueDateRule resource accepts the following input properties:

    Action SecurityFindingsDueDateRuleAction
    The action to take when the due date rule matches a finding.
    Name string
    The name of the due date rule.
    Rule SecurityFindingsDueDateRuleRule
    Defines the scope of findings to which the automation rule applies.
    Enabled bool
    Whether the due date rule is enabled. Defaults to true.
    Action SecurityFindingsDueDateRuleActionArgs
    The action to take when the due date rule matches a finding.
    Name string
    The name of the due date rule.
    Rule SecurityFindingsDueDateRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    Enabled bool
    Whether the due date rule is enabled. Defaults to true.
    action object
    The action to take when the due date rule matches a finding.
    name string
    The name of the due date rule.
    rule object
    Defines the scope of findings to which the automation rule applies.
    enabled bool
    Whether the due date rule is enabled. Defaults to true.
    action SecurityFindingsDueDateRuleAction
    The action to take when the due date rule matches a finding.
    name String
    The name of the due date rule.
    rule SecurityFindingsDueDateRuleRule
    Defines the scope of findings to which the automation rule applies.
    enabled Boolean
    Whether the due date rule is enabled. Defaults to true.
    action SecurityFindingsDueDateRuleAction
    The action to take when the due date rule matches a finding.
    name string
    The name of the due date rule.
    rule SecurityFindingsDueDateRuleRule
    Defines the scope of findings to which the automation rule applies.
    enabled boolean
    Whether the due date rule is enabled. Defaults to true.
    action SecurityFindingsDueDateRuleActionArgs
    The action to take when the due date rule matches a finding.
    name str
    The name of the due date rule.
    rule SecurityFindingsDueDateRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    enabled bool
    Whether the due date rule is enabled. Defaults to true.
    action Property Map
    The action to take when the due date rule matches a finding.
    name String
    The name of the due date rule.
    rule Property Map
    Defines the scope of findings to which the automation rule applies.
    enabled Boolean
    Whether the due date rule is enabled. Defaults to true.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SecurityFindingsDueDateRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing SecurityFindingsDueDateRule Resource

    Get an existing SecurityFindingsDueDateRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SecurityFindingsDueDateRuleState, opts?: CustomResourceOptions): SecurityFindingsDueDateRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[SecurityFindingsDueDateRuleActionArgs] = None,
        enabled: Optional[bool] = None,
        name: Optional[str] = None,
        rule: Optional[SecurityFindingsDueDateRuleRuleArgs] = None) -> SecurityFindingsDueDateRule
    func GetSecurityFindingsDueDateRule(ctx *Context, name string, id IDInput, state *SecurityFindingsDueDateRuleState, opts ...ResourceOption) (*SecurityFindingsDueDateRule, error)
    public static SecurityFindingsDueDateRule Get(string name, Input<string> id, SecurityFindingsDueDateRuleState? state, CustomResourceOptions? opts = null)
    public static SecurityFindingsDueDateRule get(String name, Output<String> id, SecurityFindingsDueDateRuleState state, CustomResourceOptions options)
    resources:  _:    type: datadog:SecurityFindingsDueDateRule    get:      id: ${id}
    import {
  to = datadog_security_findings_due_date_rule.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action SecurityFindingsDueDateRuleAction
    The action to take when the due date rule matches a finding.
    Enabled bool
    Whether the due date rule is enabled. Defaults to true.
    Name string
    The name of the due date rule.
    Rule SecurityFindingsDueDateRuleRule
    Defines the scope of findings to which the automation rule applies.
    Action SecurityFindingsDueDateRuleActionArgs
    The action to take when the due date rule matches a finding.
    Enabled bool
    Whether the due date rule is enabled. Defaults to true.
    Name string
    The name of the due date rule.
    Rule SecurityFindingsDueDateRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    action object
    The action to take when the due date rule matches a finding.
    enabled bool
    Whether the due date rule is enabled. Defaults to true.
    name string
    The name of the due date rule.
    rule object
    Defines the scope of findings to which the automation rule applies.
    action SecurityFindingsDueDateRuleAction
    The action to take when the due date rule matches a finding.
    enabled Boolean
    Whether the due date rule is enabled. Defaults to true.
    name String
    The name of the due date rule.
    rule SecurityFindingsDueDateRuleRule
    Defines the scope of findings to which the automation rule applies.
    action SecurityFindingsDueDateRuleAction
    The action to take when the due date rule matches a finding.
    enabled boolean
    Whether the due date rule is enabled. Defaults to true.
    name string
    The name of the due date rule.
    rule SecurityFindingsDueDateRuleRule
    Defines the scope of findings to which the automation rule applies.
    action SecurityFindingsDueDateRuleActionArgs
    The action to take when the due date rule matches a finding.
    enabled bool
    Whether the due date rule is enabled. Defaults to true.
    name str
    The name of the due date rule.
    rule SecurityFindingsDueDateRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    action Property Map
    The action to take when the due date rule matches a finding.
    enabled Boolean
    Whether the due date rule is enabled. Defaults to true.
    name String
    The name of the due date rule.
    rule Property Map
    Defines the scope of findings to which the automation rule applies.

    Supporting Types

    SecurityFindingsDueDateRuleAction, SecurityFindingsDueDateRuleActionArgs

    DueDaysPerSeverities List<SecurityFindingsDueDateRuleActionDueDaysPerSeverity>
    A list of severity-to-due-date mappings. Each severity may appear at most once.
    DueFrom string
    The reference point from which the due date is calculated. When fixAvailable is selected but not applicable to the finding type, firstSeen is used instead. Valid values are firstSeen, fixAvailable.
    ReasonDescription string
    An optional description providing more context for the due date assignment.
    DueDaysPerSeverities []SecurityFindingsDueDateRuleActionDueDaysPerSeverity
    A list of severity-to-due-date mappings. Each severity may appear at most once.
    DueFrom string
    The reference point from which the due date is calculated. When fixAvailable is selected but not applicable to the finding type, firstSeen is used instead. Valid values are firstSeen, fixAvailable.
    ReasonDescription string
    An optional description providing more context for the due date assignment.
    due_days_per_severities list(object)
    A list of severity-to-due-date mappings. Each severity may appear at most once.
    due_from string
    The reference point from which the due date is calculated. When fixAvailable is selected but not applicable to the finding type, firstSeen is used instead. Valid values are firstSeen, fixAvailable.
    reason_description string
    An optional description providing more context for the due date assignment.
    dueDaysPerSeverities List<SecurityFindingsDueDateRuleActionDueDaysPerSeverity>
    A list of severity-to-due-date mappings. Each severity may appear at most once.
    dueFrom String
    The reference point from which the due date is calculated. When fixAvailable is selected but not applicable to the finding type, firstSeen is used instead. Valid values are firstSeen, fixAvailable.
    reasonDescription String
    An optional description providing more context for the due date assignment.
    dueDaysPerSeverities SecurityFindingsDueDateRuleActionDueDaysPerSeverity[]
    A list of severity-to-due-date mappings. Each severity may appear at most once.
    dueFrom string
    The reference point from which the due date is calculated. When fixAvailable is selected but not applicable to the finding type, firstSeen is used instead. Valid values are firstSeen, fixAvailable.
    reasonDescription string
    An optional description providing more context for the due date assignment.
    due_days_per_severities Sequence[SecurityFindingsDueDateRuleActionDueDaysPerSeverity]
    A list of severity-to-due-date mappings. Each severity may appear at most once.
    due_from str
    The reference point from which the due date is calculated. When fixAvailable is selected but not applicable to the finding type, firstSeen is used instead. Valid values are firstSeen, fixAvailable.
    reason_description str
    An optional description providing more context for the due date assignment.
    dueDaysPerSeverities List<Property Map>
    A list of severity-to-due-date mappings. Each severity may appear at most once.
    dueFrom String
    The reference point from which the due date is calculated. When fixAvailable is selected but not applicable to the finding type, firstSeen is used instead. Valid values are firstSeen, fixAvailable.
    reasonDescription String
    An optional description providing more context for the due date assignment.

    SecurityFindingsDueDateRuleActionDueDaysPerSeverity, SecurityFindingsDueDateRuleActionDueDaysPerSeverityArgs

    DueInDays int
    The number of days from the reference point until the finding is due.
    Severity string
    A severity level used to configure due date thresholds. Valid values are critical, high, medium, low, info, none, unknown.
    DueInDays int
    The number of days from the reference point until the finding is due.
    Severity string
    A severity level used to configure due date thresholds. Valid values are critical, high, medium, low, info, none, unknown.
    due_in_days number
    The number of days from the reference point until the finding is due.
    severity string
    A severity level used to configure due date thresholds. Valid values are critical, high, medium, low, info, none, unknown.
    dueInDays Integer
    The number of days from the reference point until the finding is due.
    severity String
    A severity level used to configure due date thresholds. Valid values are critical, high, medium, low, info, none, unknown.
    dueInDays number
    The number of days from the reference point until the finding is due.
    severity string
    A severity level used to configure due date thresholds. Valid values are critical, high, medium, low, info, none, unknown.
    due_in_days int
    The number of days from the reference point until the finding is due.
    severity str
    A severity level used to configure due date thresholds. Valid values are critical, high, medium, low, info, none, unknown.
    dueInDays Number
    The number of days from the reference point until the finding is due.
    severity String
    A severity level used to configure due date thresholds. Valid values are critical, high, medium, low, info, none, unknown.

    SecurityFindingsDueDateRuleRule, SecurityFindingsDueDateRuleRuleArgs

    FindingTypes List<string>
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    Query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    FindingTypes []string
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    Query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    finding_types list(string)
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    findingTypes List<String>
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query String
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    findingTypes string[]
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    finding_types Sequence[str]
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query str
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    findingTypes List<String>
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query String
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

    Import

    The pulumi import command can be used, for example:

    $ pulumi import datadog:index/securityFindingsDueDateRule:SecurityFindingsDueDateRule prod_sla "00000000-0000-0000-0000-000000000000"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Datadog pulumi/pulumi-datadog
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the datadog Terraform Provider.
    datadog logo
    Viewing docs for Datadog v5.9.0
    published on Saturday, Jul 25, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-datadog

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial