published on Thursday, May 21, 2026 by Pulumi
published on Thursday, May 21, 2026 by Pulumi
Provides a Datadog Agentless Scanning Azure scan options resource. This can be used to activate and configure Agentless scan options for an Azure subscription.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as datadog from "@pulumi/datadog";
// Configure agentless scanning for an Azure subscription
const example = new datadog.AgentlessScanningAzureScanOptions("example", {
azureSubscriptionId: "12345678-1234-1234-1234-123456789012",
vulnContainersOs: true,
vulnHostOs: true,
});
import pulumi
import pulumi_datadog as datadog
# Configure agentless scanning for an Azure subscription
example = datadog.AgentlessScanningAzureScanOptions("example",
azure_subscription_id="12345678-1234-1234-1234-123456789012",
vuln_containers_os=True,
vuln_host_os=True)
package main
import (
"github.com/pulumi/pulumi-datadog/sdk/v5/go/datadog"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
// Configure agentless scanning for an Azure subscription
_, err := datadog.NewAgentlessScanningAzureScanOptions(ctx, "example", &datadog.AgentlessScanningAzureScanOptionsArgs{
AzureSubscriptionId: pulumi.String("12345678-1234-1234-1234-123456789012"),
VulnContainersOs: pulumi.Bool(true),
VulnHostOs: pulumi.Bool(true),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Datadog = Pulumi.Datadog;
return await Deployment.RunAsync(() =>
{
// Configure agentless scanning for an Azure subscription
var example = new Datadog.AgentlessScanningAzureScanOptions("example", new()
{
AzureSubscriptionId = "12345678-1234-1234-1234-123456789012",
VulnContainersOs = true,
VulnHostOs = true,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.datadog.AgentlessScanningAzureScanOptions;
import com.pulumi.datadog.AgentlessScanningAzureScanOptionsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
// Configure agentless scanning for an Azure subscription
var example = new AgentlessScanningAzureScanOptions("example", AgentlessScanningAzureScanOptionsArgs.builder()
.azureSubscriptionId("12345678-1234-1234-1234-123456789012")
.vulnContainersOs(true)
.vulnHostOs(true)
.build());
}
}
resources:
# Configure agentless scanning for an Azure subscription
example:
type: datadog:AgentlessScanningAzureScanOptions
properties:
azureSubscriptionId: 12345678-1234-1234-1234-123456789012
vulnContainersOs: true
vulnHostOs: true # compliance_host = true # Optional. Defaults to false. Enables host compliance benchmark scanning.
Example coming soon!
Create AgentlessScanningAzureScanOptions Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AgentlessScanningAzureScanOptions(name: string, args: AgentlessScanningAzureScanOptionsArgs, opts?: CustomResourceOptions);@overload
def AgentlessScanningAzureScanOptions(resource_name: str,
args: AgentlessScanningAzureScanOptionsArgs,
opts: Optional[ResourceOptions] = None)
@overload
def AgentlessScanningAzureScanOptions(resource_name: str,
opts: Optional[ResourceOptions] = None,
azure_subscription_id: Optional[str] = None,
vuln_containers_os: Optional[bool] = None,
vuln_host_os: Optional[bool] = None,
compliance_host: Optional[bool] = None)func NewAgentlessScanningAzureScanOptions(ctx *Context, name string, args AgentlessScanningAzureScanOptionsArgs, opts ...ResourceOption) (*AgentlessScanningAzureScanOptions, error)public AgentlessScanningAzureScanOptions(string name, AgentlessScanningAzureScanOptionsArgs args, CustomResourceOptions? opts = null)
public AgentlessScanningAzureScanOptions(String name, AgentlessScanningAzureScanOptionsArgs args)
public AgentlessScanningAzureScanOptions(String name, AgentlessScanningAzureScanOptionsArgs args, CustomResourceOptions options)
type: datadog:AgentlessScanningAzureScanOptions
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "datadog_agentlessscanningazurescanoptions" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args AgentlessScanningAzureScanOptionsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AgentlessScanningAzureScanOptionsArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AgentlessScanningAzureScanOptionsArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AgentlessScanningAzureScanOptionsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AgentlessScanningAzureScanOptionsArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var agentlessScanningAzureScanOptionsResource = new Datadog.AgentlessScanningAzureScanOptions("agentlessScanningAzureScanOptionsResource", new()
{
AzureSubscriptionId = "string",
VulnContainersOs = false,
VulnHostOs = false,
ComplianceHost = false,
});
example, err := datadog.NewAgentlessScanningAzureScanOptions(ctx, "agentlessScanningAzureScanOptionsResource", &datadog.AgentlessScanningAzureScanOptionsArgs{
AzureSubscriptionId: pulumi.String("string"),
VulnContainersOs: pulumi.Bool(false),
VulnHostOs: pulumi.Bool(false),
ComplianceHost: pulumi.Bool(false),
})
resource "datadog_agentlessscanningazurescanoptions" "agentlessScanningAzureScanOptionsResource" {
azure_subscription_id = "string"
vuln_containers_os = false
vuln_host_os = false
compliance_host = false
}
var agentlessScanningAzureScanOptionsResource = new AgentlessScanningAzureScanOptions("agentlessScanningAzureScanOptionsResource", AgentlessScanningAzureScanOptionsArgs.builder()
.azureSubscriptionId("string")
.vulnContainersOs(false)
.vulnHostOs(false)
.complianceHost(false)
.build());
agentless_scanning_azure_scan_options_resource = datadog.AgentlessScanningAzureScanOptions("agentlessScanningAzureScanOptionsResource",
azure_subscription_id="string",
vuln_containers_os=False,
vuln_host_os=False,
compliance_host=False)
const agentlessScanningAzureScanOptionsResource = new datadog.AgentlessScanningAzureScanOptions("agentlessScanningAzureScanOptionsResource", {
azureSubscriptionId: "string",
vulnContainersOs: false,
vulnHostOs: false,
complianceHost: false,
});
type: datadog:AgentlessScanningAzureScanOptions
properties:
azureSubscriptionId: string
complianceHost: false
vulnContainersOs: false
vulnHostOs: false
AgentlessScanningAzureScanOptions Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The AgentlessScanningAzureScanOptions resource accepts the following input properties:
- Azure
Subscription stringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- Vuln
Containers boolOs - Indicates if scanning for vulnerabilities in containers is enabled.
- Vuln
Host boolOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- Compliance
Host bool - Indicates whether host compliance scanning is enabled.
- Azure
Subscription stringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- Vuln
Containers boolOs - Indicates if scanning for vulnerabilities in containers is enabled.
- Vuln
Host boolOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- Compliance
Host bool - Indicates whether host compliance scanning is enabled.
- azure_
subscription_ stringid - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- vuln_
containers_ boolos - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln_
host_ boolos - Indicates if scanning for vulnerabilities in hosts is enabled.
- compliance_
host bool - Indicates whether host compliance scanning is enabled.
- azure
Subscription StringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- vuln
Containers BooleanOs - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln
Host BooleanOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- compliance
Host Boolean - Indicates whether host compliance scanning is enabled.
- azure
Subscription stringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- vuln
Containers booleanOs - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln
Host booleanOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- compliance
Host boolean - Indicates whether host compliance scanning is enabled.
- azure_
subscription_ strid - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- vuln_
containers_ boolos - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln_
host_ boolos - Indicates if scanning for vulnerabilities in hosts is enabled.
- compliance_
host bool - Indicates whether host compliance scanning is enabled.
- azure
Subscription StringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- vuln
Containers BooleanOs - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln
Host BooleanOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- compliance
Host Boolean - Indicates whether host compliance scanning is enabled.
Outputs
All input properties are implicitly available as output properties. Additionally, the AgentlessScanningAzureScanOptions resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing AgentlessScanningAzureScanOptions Resource
Get an existing AgentlessScanningAzureScanOptions resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AgentlessScanningAzureScanOptionsState, opts?: CustomResourceOptions): AgentlessScanningAzureScanOptions@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
azure_subscription_id: Optional[str] = None,
compliance_host: Optional[bool] = None,
vuln_containers_os: Optional[bool] = None,
vuln_host_os: Optional[bool] = None) -> AgentlessScanningAzureScanOptionsfunc GetAgentlessScanningAzureScanOptions(ctx *Context, name string, id IDInput, state *AgentlessScanningAzureScanOptionsState, opts ...ResourceOption) (*AgentlessScanningAzureScanOptions, error)public static AgentlessScanningAzureScanOptions Get(string name, Input<string> id, AgentlessScanningAzureScanOptionsState? state, CustomResourceOptions? opts = null)public static AgentlessScanningAzureScanOptions get(String name, Output<String> id, AgentlessScanningAzureScanOptionsState state, CustomResourceOptions options)resources: _: type: datadog:AgentlessScanningAzureScanOptions get: id: ${id}import {
to = datadog_agentlessscanningazurescanoptions.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Azure
Subscription stringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- Compliance
Host bool - Indicates whether host compliance scanning is enabled.
- Vuln
Containers boolOs - Indicates if scanning for vulnerabilities in containers is enabled.
- Vuln
Host boolOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- Azure
Subscription stringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- Compliance
Host bool - Indicates whether host compliance scanning is enabled.
- Vuln
Containers boolOs - Indicates if scanning for vulnerabilities in containers is enabled.
- Vuln
Host boolOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- azure_
subscription_ stringid - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- compliance_
host bool - Indicates whether host compliance scanning is enabled.
- vuln_
containers_ boolos - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln_
host_ boolos - Indicates if scanning for vulnerabilities in hosts is enabled.
- azure
Subscription StringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- compliance
Host Boolean - Indicates whether host compliance scanning is enabled.
- vuln
Containers BooleanOs - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln
Host BooleanOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- azure
Subscription stringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- compliance
Host boolean - Indicates whether host compliance scanning is enabled.
- vuln
Containers booleanOs - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln
Host booleanOs - Indicates if scanning for vulnerabilities in hosts is enabled.
- azure_
subscription_ strid - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- compliance_
host bool - Indicates whether host compliance scanning is enabled.
- vuln_
containers_ boolos - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln_
host_ boolos - Indicates if scanning for vulnerabilities in hosts is enabled.
- azure
Subscription StringId - The Azure subscription ID for which agentless scanning is configured. Must be a valid Azure subscription ID (UUID format).
- compliance
Host Boolean - Indicates whether host compliance scanning is enabled.
- vuln
Containers BooleanOs - Indicates if scanning for vulnerabilities in containers is enabled.
- vuln
Host BooleanOs - Indicates if scanning for vulnerabilities in hosts is enabled.
Import
The pulumi import command can be used, for example:
!/bin/sh
Import existing agentless scanning Azure scan options by Azure subscription ID
$ pulumi import datadog:index/agentlessScanningAzureScanOptions:AgentlessScanningAzureScanOptions example 12345678-1234-1234-1234-123456789012
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Datadog pulumi/pulumi-datadog
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
datadogTerraform Provider.
published on Thursday, May 21, 2026 by Pulumi