Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Datadog Provider
  4. API Docs
  5. SecurityFindingsTicketCreationRule
Viewing docs for Datadog v5.9.0
published on Saturday, Jul 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-datadog

datadog.SecurityFindingsTicketCreationRule

datadog logo
Viewing docs for Datadog v5.9.0
published on Saturday, Jul 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-datadog

    Provides a Datadog security findings automation ticket creation rule resource. This can be used to create and manage rules that automatically open tickets for matching security findings. Use the datadog.SecurityFindingsTicketCreationRulesOrder resource to manage the evaluation order of ticket creation rules.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as datadog from "@pulumi/datadog";

// Create a rule that automatically opens Jira tickets for critical misconfigurations.
const criticalMisconfigs = new datadog.SecurityFindingsTicketCreationRule("critical_misconfigs", {
    name: "Auto-create Jira tickets for critical misconfigurations",
    enabled: true,
    rule: {
        finding_types: ["misconfiguration"],
        query: "env:prod @severity:critical",
    },
    action: {
        project_id: "11111111-1111-1111-1111-111111111111",
        target: "jira",
        assignee_id: "22222222-2222-2222-2222-222222222222",
        max_tickets_per_day: 50,
        fields: JSON.stringify({
            labels: ["security"],
        }),
    },
});

    import pulumi
import json
import pulumi_datadog as datadog

# Create a rule that automatically opens Jira tickets for critical misconfigurations.
critical_misconfigs = datadog.SecurityFindingsTicketCreationRule("critical_misconfigs",
    name="Auto-create Jira tickets for critical misconfigurations",
    enabled=True,
    rule={
        "finding_types": ["misconfiguration"],
        "query": "env:prod @severity:critical",
    },
    action={
        "project_id": "11111111-1111-1111-1111-111111111111",
        "target": "jira",
        "assignee_id": "22222222-2222-2222-2222-222222222222",
        "max_tickets_per_day": 50,
        "fields": json.dumps({
            "labels": ["security"],
        }),
    })

    package main

import (
	"encoding/json"

	"github.com/pulumi/pulumi-datadog/sdk/v5/go/datadog"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"labels": []string{
				"security",
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		// Create a rule that automatically opens Jira tickets for critical misconfigurations.
		_, err = datadog.NewSecurityFindingsTicketCreationRule(ctx, "critical_misconfigs", &datadog.SecurityFindingsTicketCreationRuleArgs{
			Name:    pulumi.String("Auto-create Jira tickets for critical misconfigurations"),
			Enabled: pulumi.Bool(true),
			Rule: &datadog.SecurityFindingsTicketCreationRuleRuleArgs{
				Finding_types: []string{
					"misconfiguration",
				},
				Query: pulumi.String("env:prod @severity:critical"),
			},
			Action: &datadog.SecurityFindingsTicketCreationRuleActionArgs{
				Project_id:          "11111111-1111-1111-1111-111111111111",
				Target:              pulumi.String("jira"),
				Assignee_id:         "22222222-2222-2222-2222-222222222222",
				Max_tickets_per_day: 50,
				Fields:              pulumi.String(json0),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using Datadog = Pulumi.Datadog;

return await Deployment.RunAsync(() => 
{
    // Create a rule that automatically opens Jira tickets for critical misconfigurations.
    var criticalMisconfigs = new Datadog.SecurityFindingsTicketCreationRule("critical_misconfigs", new()
    {
        Name = "Auto-create Jira tickets for critical misconfigurations",
        Enabled = true,
        Rule = new Datadog.Inputs.SecurityFindingsTicketCreationRuleRuleArgs
        {
            Finding_types = new[]
            {
                "misconfiguration",
            },
            Query = "env:prod @severity:critical",
        },
        Action = new Datadog.Inputs.SecurityFindingsTicketCreationRuleActionArgs
        {
            Project_id = "11111111-1111-1111-1111-111111111111",
            Target = "jira",
            Assignee_id = "22222222-2222-2222-2222-222222222222",
            Max_tickets_per_day = 50,
            Fields = JsonSerializer.Serialize(new Dictionary<string, object?>
            {
                ["labels"] = new[]
                {
                    "security",
                },
            }),
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.datadog.SecurityFindingsTicketCreationRule;
import com.pulumi.datadog.SecurityFindingsTicketCreationRuleArgs;
import com.pulumi.datadog.inputs.SecurityFindingsTicketCreationRuleRuleArgs;
import com.pulumi.datadog.inputs.SecurityFindingsTicketCreationRuleActionArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Create a rule that automatically opens Jira tickets for critical misconfigurations.
        var criticalMisconfigs = new SecurityFindingsTicketCreationRule("criticalMisconfigs", SecurityFindingsTicketCreationRuleArgs.builder()
            .name("Auto-create Jira tickets for critical misconfigurations")
            .enabled(true)
            .rule(SecurityFindingsTicketCreationRuleRuleArgs.builder()
                .finding_types(Arrays.asList("misconfiguration"))
                .query("env:prod @severity:critical")
                .build())
            .action(SecurityFindingsTicketCreationRuleActionArgs.builder()
                .project_id("11111111-1111-1111-1111-111111111111")
                .target("jira")
                .assignee_id("22222222-2222-2222-2222-222222222222")
                .max_tickets_per_day(50)
                .fields(serializeJson(
                    jsonObject(
                        jsonProperty("labels", jsonArray("security"))
                    )))
                .build())
            .build());

    }
}

    resources:
  # Create a rule that automatically opens Jira tickets for critical misconfigurations.
  criticalMisconfigs:
    type: datadog:SecurityFindingsTicketCreationRule
    name: critical_misconfigs
    properties:
      name: Auto-create Jira tickets for critical misconfigurations
      enabled: true
      rule:
        finding_types:
          - misconfiguration
        query: env:prod @severity:critical
      action:
        project_id: 11111111-1111-1111-1111-111111111111
        target: jira
        assignee_id: 22222222-2222-2222-2222-222222222222
        max_tickets_per_day: 50
        fields:
          fn::toJSON:
            labels:
              - security

    pulumi {
  required_providers {
    datadog = {
      source = "pulumi/datadog"
    }
  }
}

# Create a rule that automatically opens Jira tickets for critical misconfigurations.
resource "datadog_securityfindingsticketcreationrule" "critical_misconfigs" {
  name    = "Auto-create Jira tickets for critical misconfigurations"
  enabled = true
  rule = {
    finding_types = ["misconfiguration"]
    query         = "env:prod @severity:critical"
  }
  action = {
    project_id          = "11111111-1111-1111-1111-111111111111"
    target              = "jira"
    assignee_id         = "22222222-2222-2222-2222-222222222222"
    max_tickets_per_day = 50
    fields = jsonencode({
      "labels" = ["security"]
    })
  }
}

    Create SecurityFindingsTicketCreationRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SecurityFindingsTicketCreationRule(name: string, args: SecurityFindingsTicketCreationRuleArgs, opts?: CustomResourceOptions);
    @overload
def SecurityFindingsTicketCreationRule(resource_name: str,
                                       args: SecurityFindingsTicketCreationRuleArgs,
                                       opts: Optional[ResourceOptions] = None)

@overload
def SecurityFindingsTicketCreationRule(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       action: Optional[SecurityFindingsTicketCreationRuleActionArgs] = None,
                                       name: Optional[str] = None,
                                       rule: Optional[SecurityFindingsTicketCreationRuleRuleArgs] = None,
                                       enabled: Optional[bool] = None)
    func NewSecurityFindingsTicketCreationRule(ctx *Context, name string, args SecurityFindingsTicketCreationRuleArgs, opts ...ResourceOption) (*SecurityFindingsTicketCreationRule, error)
    public SecurityFindingsTicketCreationRule(string name, SecurityFindingsTicketCreationRuleArgs args, CustomResourceOptions? opts = null)
    public SecurityFindingsTicketCreationRule(String name, SecurityFindingsTicketCreationRuleArgs args)
public SecurityFindingsTicketCreationRule(String name, SecurityFindingsTicketCreationRuleArgs args, CustomResourceOptions options)

    type: datadog:SecurityFindingsTicketCreationRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "datadog_security_findings_ticket_creation_rule" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args SecurityFindingsTicketCreationRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SecurityFindingsTicketCreationRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SecurityFindingsTicketCreationRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SecurityFindingsTicketCreationRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SecurityFindingsTicketCreationRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var securityFindingsTicketCreationRuleResource = new Datadog.SecurityFindingsTicketCreationRule("securityFindingsTicketCreationRuleResource", new()
{
    Action = new Datadog.Inputs.SecurityFindingsTicketCreationRuleActionArgs
    {
        MaxTicketsPerDay = 0,
        ProjectId = "string",
        Target = "string",
        AssigneeId = "string",
        AutoDisabledReason = "string",
        Fields = "string",
    },
    Name = "string",
    Rule = new Datadog.Inputs.SecurityFindingsTicketCreationRuleRuleArgs
    {
        FindingTypes = new[]
        {
            "string",
        },
        Query = "string",
    },
    Enabled = false,
});

    example, err := datadog.NewSecurityFindingsTicketCreationRule(ctx, "securityFindingsTicketCreationRuleResource", &datadog.SecurityFindingsTicketCreationRuleArgs{
	Action: &datadog.SecurityFindingsTicketCreationRuleActionArgs{
		MaxTicketsPerDay:   pulumi.Int(0),
		ProjectId:          pulumi.String("string"),
		Target:             pulumi.String("string"),
		AssigneeId:         pulumi.String("string"),
		AutoDisabledReason: pulumi.String("string"),
		Fields:             pulumi.String("string"),
	},
	Name: pulumi.String("string"),
	Rule: &datadog.SecurityFindingsTicketCreationRuleRuleArgs{
		FindingTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
		Query: pulumi.String("string"),
	},
	Enabled: pulumi.Bool(false),
})

    resource "datadog_security_findings_ticket_creation_rule" "securityFindingsTicketCreationRuleResource" {
  lifecycle {
    create_before_destroy = true
  }
  action = {
    max_tickets_per_day  = 0
    project_id           = "string"
    target               = "string"
    assignee_id          = "string"
    auto_disabled_reason = "string"
    fields               = "string"
  }
  name = "string"
  rule = {
    finding_types = ["string"]
    query         = "string"
  }
  enabled = false
}

    var securityFindingsTicketCreationRuleResource = new SecurityFindingsTicketCreationRule("securityFindingsTicketCreationRuleResource", SecurityFindingsTicketCreationRuleArgs.builder()
    .action(SecurityFindingsTicketCreationRuleActionArgs.builder()
        .maxTicketsPerDay(0)
        .projectId("string")
        .target("string")
        .assigneeId("string")
        .autoDisabledReason("string")
        .fields("string")
        .build())
    .name("string")
    .rule(SecurityFindingsTicketCreationRuleRuleArgs.builder()
        .findingTypes("string")
        .query("string")
        .build())
    .enabled(false)
    .build());

    security_findings_ticket_creation_rule_resource = datadog.SecurityFindingsTicketCreationRule("securityFindingsTicketCreationRuleResource",
    action={
        "max_tickets_per_day": 0,
        "project_id": "string",
        "target": "string",
        "assignee_id": "string",
        "auto_disabled_reason": "string",
        "fields": "string",
    },
    name="string",
    rule={
        "finding_types": ["string"],
        "query": "string",
    },
    enabled=False)

    const securityFindingsTicketCreationRuleResource = new datadog.SecurityFindingsTicketCreationRule("securityFindingsTicketCreationRuleResource", {
    action: {
        maxTicketsPerDay: 0,
        projectId: "string",
        target: "string",
        assigneeId: "string",
        autoDisabledReason: "string",
        fields: "string",
    },
    name: "string",
    rule: {
        findingTypes: ["string"],
        query: "string",
    },
    enabled: false,
});

    type: datadog:SecurityFindingsTicketCreationRule
properties:
    action:
        assigneeId: string
        autoDisabledReason: string
        fields: string
        maxTicketsPerDay: 0
        projectId: string
        target: string
    enabled: false
    name: string
    rule:
        findingTypes:
            - string
        query: string

    SecurityFindingsTicketCreationRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SecurityFindingsTicketCreationRule resource accepts the following input properties:

    Action SecurityFindingsTicketCreationRuleAction
    The action to take when the ticket creation rule matches a finding.
    Name string
    The name of the ticket creation rule.
    Rule SecurityFindingsTicketCreationRuleRule
    Defines the scope of findings to which the automation rule applies.
    Enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    Action SecurityFindingsTicketCreationRuleActionArgs
    The action to take when the ticket creation rule matches a finding.
    Name string
    The name of the ticket creation rule.
    Rule SecurityFindingsTicketCreationRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    Enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    action object
    The action to take when the ticket creation rule matches a finding.
    name string
    The name of the ticket creation rule.
    rule object
    Defines the scope of findings to which the automation rule applies.
    enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    action SecurityFindingsTicketCreationRuleAction
    The action to take when the ticket creation rule matches a finding.
    name String
    The name of the ticket creation rule.
    rule SecurityFindingsTicketCreationRuleRule
    Defines the scope of findings to which the automation rule applies.
    enabled Boolean
    Whether the ticket creation rule is enabled. Defaults to true.
    action SecurityFindingsTicketCreationRuleAction
    The action to take when the ticket creation rule matches a finding.
    name string
    The name of the ticket creation rule.
    rule SecurityFindingsTicketCreationRuleRule
    Defines the scope of findings to which the automation rule applies.
    enabled boolean
    Whether the ticket creation rule is enabled. Defaults to true.
    action SecurityFindingsTicketCreationRuleActionArgs
    The action to take when the ticket creation rule matches a finding.
    name str
    The name of the ticket creation rule.
    rule SecurityFindingsTicketCreationRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    action Property Map
    The action to take when the ticket creation rule matches a finding.
    name String
    The name of the ticket creation rule.
    rule Property Map
    Defines the scope of findings to which the automation rule applies.
    enabled Boolean
    Whether the ticket creation rule is enabled. Defaults to true.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SecurityFindingsTicketCreationRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing SecurityFindingsTicketCreationRule Resource

    Get an existing SecurityFindingsTicketCreationRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SecurityFindingsTicketCreationRuleState, opts?: CustomResourceOptions): SecurityFindingsTicketCreationRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[SecurityFindingsTicketCreationRuleActionArgs] = None,
        enabled: Optional[bool] = None,
        name: Optional[str] = None,
        rule: Optional[SecurityFindingsTicketCreationRuleRuleArgs] = None) -> SecurityFindingsTicketCreationRule
    func GetSecurityFindingsTicketCreationRule(ctx *Context, name string, id IDInput, state *SecurityFindingsTicketCreationRuleState, opts ...ResourceOption) (*SecurityFindingsTicketCreationRule, error)
    public static SecurityFindingsTicketCreationRule Get(string name, Input<string> id, SecurityFindingsTicketCreationRuleState? state, CustomResourceOptions? opts = null)
    public static SecurityFindingsTicketCreationRule get(String name, Output<String> id, SecurityFindingsTicketCreationRuleState state, CustomResourceOptions options)
    resources:  _:    type: datadog:SecurityFindingsTicketCreationRule    get:      id: ${id}
    import {
  to = datadog_security_findings_ticket_creation_rule.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action SecurityFindingsTicketCreationRuleAction
    The action to take when the ticket creation rule matches a finding.
    Enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    Name string
    The name of the ticket creation rule.
    Rule SecurityFindingsTicketCreationRuleRule
    Defines the scope of findings to which the automation rule applies.
    Action SecurityFindingsTicketCreationRuleActionArgs
    The action to take when the ticket creation rule matches a finding.
    Enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    Name string
    The name of the ticket creation rule.
    Rule SecurityFindingsTicketCreationRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    action object
    The action to take when the ticket creation rule matches a finding.
    enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    name string
    The name of the ticket creation rule.
    rule object
    Defines the scope of findings to which the automation rule applies.
    action SecurityFindingsTicketCreationRuleAction
    The action to take when the ticket creation rule matches a finding.
    enabled Boolean
    Whether the ticket creation rule is enabled. Defaults to true.
    name String
    The name of the ticket creation rule.
    rule SecurityFindingsTicketCreationRuleRule
    Defines the scope of findings to which the automation rule applies.
    action SecurityFindingsTicketCreationRuleAction
    The action to take when the ticket creation rule matches a finding.
    enabled boolean
    Whether the ticket creation rule is enabled. Defaults to true.
    name string
    The name of the ticket creation rule.
    rule SecurityFindingsTicketCreationRuleRule
    Defines the scope of findings to which the automation rule applies.
    action SecurityFindingsTicketCreationRuleActionArgs
    The action to take when the ticket creation rule matches a finding.
    enabled bool
    Whether the ticket creation rule is enabled. Defaults to true.
    name str
    The name of the ticket creation rule.
    rule SecurityFindingsTicketCreationRuleRuleArgs
    Defines the scope of findings to which the automation rule applies.
    action Property Map
    The action to take when the ticket creation rule matches a finding.
    enabled Boolean
    Whether the ticket creation rule is enabled. Defaults to true.
    name String
    The name of the ticket creation rule.
    rule Property Map
    Defines the scope of findings to which the automation rule applies.

    Supporting Types

    SecurityFindingsTicketCreationRuleAction, SecurityFindingsTicketCreationRuleActionArgs

    MaxTicketsPerDay int
    The maximum number of tickets the rule may create per day. If exceeded, one final ticket will be created, explaining the limit was hit and linking back to the responsible rule. Value must be between 1 and 500.
    ProjectId string
    The UUID of the Case Management project. Must be a valid UUID.
    Target string
    The ticketing system to create tickets in. Valid values are jira, caseManagement.
    AssigneeId string
    The UUID of the default assignee for created tickets. Must be a valid UUID.
    AutoDisabledReason string
    The reason the rule was automatically disabled by the system due to a ticketing integration error. This field is read-only.
    Fields string
    A JSON-encoded object of custom fields of the Jira issue to create. For the list of available fields, see the Jira documentation.
    MaxTicketsPerDay int
    The maximum number of tickets the rule may create per day. If exceeded, one final ticket will be created, explaining the limit was hit and linking back to the responsible rule. Value must be between 1 and 500.
    ProjectId string
    The UUID of the Case Management project. Must be a valid UUID.
    Target string
    The ticketing system to create tickets in. Valid values are jira, caseManagement.
    AssigneeId string
    The UUID of the default assignee for created tickets. Must be a valid UUID.
    AutoDisabledReason string
    The reason the rule was automatically disabled by the system due to a ticketing integration error. This field is read-only.
    Fields string
    A JSON-encoded object of custom fields of the Jira issue to create. For the list of available fields, see the Jira documentation.
    max_tickets_per_day number
    The maximum number of tickets the rule may create per day. If exceeded, one final ticket will be created, explaining the limit was hit and linking back to the responsible rule. Value must be between 1 and 500.
    project_id string
    The UUID of the Case Management project. Must be a valid UUID.
    target string
    The ticketing system to create tickets in. Valid values are jira, caseManagement.
    assignee_id string
    The UUID of the default assignee for created tickets. Must be a valid UUID.
    auto_disabled_reason string
    The reason the rule was automatically disabled by the system due to a ticketing integration error. This field is read-only.
    fields string
    A JSON-encoded object of custom fields of the Jira issue to create. For the list of available fields, see the Jira documentation.
    maxTicketsPerDay Integer
    The maximum number of tickets the rule may create per day. If exceeded, one final ticket will be created, explaining the limit was hit and linking back to the responsible rule. Value must be between 1 and 500.
    projectId String
    The UUID of the Case Management project. Must be a valid UUID.
    target String
    The ticketing system to create tickets in. Valid values are jira, caseManagement.
    assigneeId String
    The UUID of the default assignee for created tickets. Must be a valid UUID.
    autoDisabledReason String
    The reason the rule was automatically disabled by the system due to a ticketing integration error. This field is read-only.
    fields String
    A JSON-encoded object of custom fields of the Jira issue to create. For the list of available fields, see the Jira documentation.
    maxTicketsPerDay number
    The maximum number of tickets the rule may create per day. If exceeded, one final ticket will be created, explaining the limit was hit and linking back to the responsible rule. Value must be between 1 and 500.
    projectId string
    The UUID of the Case Management project. Must be a valid UUID.
    target string
    The ticketing system to create tickets in. Valid values are jira, caseManagement.
    assigneeId string
    The UUID of the default assignee for created tickets. Must be a valid UUID.
    autoDisabledReason string
    The reason the rule was automatically disabled by the system due to a ticketing integration error. This field is read-only.
    fields string
    A JSON-encoded object of custom fields of the Jira issue to create. For the list of available fields, see the Jira documentation.
    max_tickets_per_day int
    The maximum number of tickets the rule may create per day. If exceeded, one final ticket will be created, explaining the limit was hit and linking back to the responsible rule. Value must be between 1 and 500.
    project_id str
    The UUID of the Case Management project. Must be a valid UUID.
    target str
    The ticketing system to create tickets in. Valid values are jira, caseManagement.
    assignee_id str
    The UUID of the default assignee for created tickets. Must be a valid UUID.
    auto_disabled_reason str
    The reason the rule was automatically disabled by the system due to a ticketing integration error. This field is read-only.
    fields str
    A JSON-encoded object of custom fields of the Jira issue to create. For the list of available fields, see the Jira documentation.
    maxTicketsPerDay Number
    The maximum number of tickets the rule may create per day. If exceeded, one final ticket will be created, explaining the limit was hit and linking back to the responsible rule. Value must be between 1 and 500.
    projectId String
    The UUID of the Case Management project. Must be a valid UUID.
    target String
    The ticketing system to create tickets in. Valid values are jira, caseManagement.
    assigneeId String
    The UUID of the default assignee for created tickets. Must be a valid UUID.
    autoDisabledReason String
    The reason the rule was automatically disabled by the system due to a ticketing integration error. This field is read-only.
    fields String
    A JSON-encoded object of custom fields of the Jira issue to create. For the list of available fields, see the Jira documentation.

    SecurityFindingsTicketCreationRuleRule, SecurityFindingsTicketCreationRuleRuleArgs

    FindingTypes List<string>
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    Query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    FindingTypes []string
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    Query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    finding_types list(string)
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    findingTypes List<String>
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query String
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    findingTypes string[]
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query string
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    finding_types Sequence[str]
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query str
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.
    findingTypes List<String>
    The list of security finding types that the automation rule applies to. Valid values are apiSecurity, attackPath, hostAndContainerVulnerability, iacMisconfiguration, identityRisk, libraryVulnerability, misconfiguration, runtimeCodeVulnerability, secret, staticCodeVulnerability, workloadActivity.
    query String
    A search query to further filter the findings matched by this rule. The @workflow.* namespace and @status fields are not permitted. For a reference of available fields, see the Security Findings schema documentation.

    Import

    The pulumi import command can be used, for example:

    $ pulumi import datadog:index/securityFindingsTicketCreationRule:SecurityFindingsTicketCreationRule critical_misconfigs "00000000-0000-0000-0000-000000000000"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Datadog pulumi/pulumi-datadog
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the datadog Terraform Provider.
    datadog logo
    Viewing docs for Datadog v5.9.0
    published on Saturday, Jul 25, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-datadog

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial