Skip to content

Update AWS CloudSec enablement instructions #30134

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update AWS CloudSec enablement instructions #30134

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 5 additions & 7 deletions content/en/security/cloud_security_management/guide/resource_evaluation_filters.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,18 +37,16 @@ The allowlist enables you to specify tags that must be applied to a resource in
{{< tabs >}}
{{% tab "AWS" %}}

1. On the [**Cloud Security Setup** page][1], click **Cloud accounts**.
2. Expand the **AWS** section.
3. Under **Resource Evaluation Filters (Optional)**, click the **Plus** (+) icon for the account you want to add the filter to.
4. Enter a comma-separated list of `key:value` pairs for the tags you want to allowlist or blocklist.
5. Click **Save**.
1. On the [**Cloud Security Setup** page][1], click **Cloud Integrations**.
1. Expand the **AWS** section and click the account you want to create resource evaluation filters for. A side panel with configuration options for that account opens.
1. Under **Evaluation Filters**, click **Limit to Specific Resources**. Then, click **Add Resource Tags**, add `key:value` tags as required, and click **Save**.

[1]: https://app.datadoghq.com/security/configuration/csm/setup

{{% /tab %}}
{{% tab "Azure" %}}

1. On the [**Cloud Security Setup** page][1], click **Cloud accounts**.
1. On the [**Cloud Security Setup** page][1], click **Cloud Integrations**.
2. Expand the **Azure** section.
3. Expand a subscription.
3. Under **Resource Evaluation Filters (Optional)**, click the **Plus** (+) icon.
Expand All @@ -60,7 +58,7 @@ The allowlist enables you to specify tags that must be applied to a resource in
{{% /tab %}}
{{% tab "Google Cloud" %}}

1. On the [**Cloud Security Setup** page][1], click **Cloud accounts**.
1. On the [**Cloud Security Setup** page][1], click **Cloud Integrations**.
2. Expand the **GCP** section.
3. Expand a project.
3. Under **Resource Evaluation Filters (Optional)**, click the **Plus** (+) icon.
Expand Down
8 changes: 3 additions & 5 deletions layouts/shortcodes/csm-setup-aws.en.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,9 @@ If you haven't already, set up the [Amazon Web Services integration][1]. You mus
### Enable Cloud Security for your AWS accounts

1. On the [**Cloud Security Setup**][3] page, click **Cloud Integrations**.
1. Expand the **AWS** section.
1. To enable resource scanning for an account, click the **Plus** button, then switch the **Enable Resource Scanning** toggle to the on position.
1. Click **Done**.
1. To create a filter that excludes certain resources from being evaluated by Cloud Security, click the **Plus** (+) icon under **Resource Evaluation Filters (Optional)**. For more information, see [Use Filters to Exclude Resources from Evaluation][5].
1. Click **Done**.
1. Expand the **AWS** section and click the account you want to enable Cloud Security for. A side panel with configuration options for that account opens.
1. Under **Features**, beside each feature you want to enable, turn on the **Enable** toggle.
1. To create a filter that excludes certain resources from being evaluated by Cloud Security, under **Evaluation Filters**, click **Limit to Specific Resources**. Then, click **Add Resource Tags**, add `key:value` tags as required, and click **Save**. For more information, see [Use Filters to Exclude Resources from Evaluation][5].

[1]: https://docs.datadoghq.com/integrations/amazon_web_services/
[2]: /integrations/amazon_web_services/?tab=roledelegation#cloud-security-management
Expand Down
Loading