datadog Dialect

Version and compatibility

Version: 0.1.0.

Provider bindings and declared compatibility

• datadog/datadog: = 4.19.0.

All official Dialects

Interpreted types

Each row identifies a type and instance kind. Conditional Rules retain their individual conditions in the details below.

Terraform type	Kind	Classification	Rules
datadog_action_connection	data	service-integration	action-connection-lookup
datadog_action_connection	resource	service-integration	action-connection
datadog_app_builder_app	data	automation-application	app-builder-app-lookup
datadog_app_builder_app	resource	automation-application	app-builder-app
datadog_child_organization	resource	observability-tenant	child-organization
datadog_compliance_custom_framework	resource	security-configuration	compliance-custom-framework
datadog_csm_threats_policy	resource	security-configuration	csm-threats-policy
datadog_datastore_item	data	service-integration-configuration	datastore-item-lookup
datadog_datastore_item	resource	service-integration-configuration	datastore-item
datadog_datastore	data	application-datastore	datastore-lookup
datadog_datastore	resource	application-datastore	datastore
datadog_integration_aws_account	resource	cloud-observability-integration	integration-aws-account
datadog_integration_azure	resource	cloud-observability-integration	integration-azure
datadog_integration_cloudflare_account	resource	service-integration	integration-cloudflare-account
datadog_integration_confluent_account	resource	service-integration	integration-confluent-account
datadog_integration_confluent_resource	resource	service-integration-configuration	integration-confluent-resource
datadog_integration_fastly_account	resource	service-integration	integration-fastly-account
datadog_integration_fastly_service	resource	service-integration-configuration	integration-fastly-service
datadog_integration_gcp_sts	resource	cloud-observability-integration	integration-gcp-sts
datadog_integration_gcp	resource	cloud-observability-integration	integration-gcp
datadog_logs_archive_order	resource	telemetry-configuration	logs-archive-order
datadog_logs_archive	resource	telemetry-destination	logs-archive
datadog_logs_custom_destination	resource	telemetry-destination	logs-custom-destination
datadog_logs_custom_pipeline	resource	telemetry-configuration	logs-custom-pipeline
datadog_logs_index	resource	telemetry-configuration	logs-index
datadog_logs_integration_pipeline	resource	telemetry-configuration	logs-integration-pipeline
datadog_org_connection	resource	organization-connection	org-connection
datadog_rum_application	data	browser-observability-application	rum-application-lookup
datadog_rum_application	resource	browser-observability-application	rum-application
datadog_rum_retention_filter	resource	telemetry-configuration	rum-retention-filter
datadog_security_monitoring_rule	resource	security-configuration	security-monitoring-rule
datadog_sensitive_data_scanner_group	resource	security-configuration	sensitive-data-scanner-group
datadog_service_definition_yaml	resource	catalog-definition	service-definition-yaml
datadog_service_level_objective	data	service-objective	service-level-objective-lookup
datadog_service_level_objective	resource	service-objective	service-level-objective
datadog_software_catalog	data	catalog-definition	software-catalog-lookup
datadog_software_catalog	resource	catalog-definition	software-catalog
datadog_synthetics_suite	resource	synthetic-check	synthetics-suite
datadog_synthetics_test	data	synthetic-check	synthetics-test-lookup
datadog_synthetics_test	resource	synthetic-check	synthetics-test
datadog_workflow_automation	data	automation-workflow	workflow-automation-lookup
datadog_workflow_automation	resource	automation-workflow	workflow-automation

Local vocabulary

Concepts

datadog.concept.application-datastore Source

A Datadog-managed datastore used by App Builder and Workflow Automation.

Used by 4 Rules

• datastore
• datastore-item
• datastore-item-lookup
• datastore-lookup

datadog.concept.automation-application Source

An application assembled and published with Datadog App Builder.

Used by app-builder-app, app-builder-app-lookup.

datadog.concept.automation-workflow Source

A Datadog workflow coordinating operational actions across integrations.

Used by workflow-automation, workflow-automation-lookup.

datadog.concept.browser-observability-application Source

An application boundary instrumented for browser or frontend observability.

Used by rum-application, rum-application-lookup, rum-retention-filter.

datadog.concept.catalog-definition Source

An opaque service or entity definition supporting Datadog Software Catalog.

Used by service-definition-yaml, software-catalog, software-catalog-lookup.

datadog.concept.cloud-observability-integration Source

A provider-neutral integration collecting telemetry and resource data from a cloud account, subscription, or project.

Used by 4 Rules

• integration-aws-account
• integration-azure
• integration-gcp
• integration-gcp-sts

datadog.concept.observability-tenant Source

A provider-neutral account, organization, or stack boundary isolating observability data and configuration.

Used by child-organization, org-connection.

datadog.concept.organization-connection Source

A Datadog cross-organization metrics or logs visibility connection.

Used by org-connection.

datadog.concept.security-configuration Source

A Datadog Cloud Security policy, framework, detection, or data-scanning configuration.

Used by 4 Rules

• compliance-custom-framework
• csm-threats-policy
• security-monitoring-rule
• sensitive-data-scanner-group

datadog.concept.service-integration Source

A Datadog connection that collects telemetry from an external service or account.

Used by 7 Rules

• action-connection
• action-connection-lookup
• integration-cloudflare-account
• integration-confluent-account
• integration-confluent-resource
• integration-fastly-account
• integration-fastly-service

datadog.concept.service-integration-configuration Source

A resource or service selection supporting a Datadog integration.

Used by 4 Rules

• datastore-item
• datastore-item-lookup
• integration-confluent-resource
• integration-fastly-service

datadog.concept.service-objective Source

A provider-neutral service level indicator or objective supporting architecture operations.

Used by service-level-objective, service-level-objective-lookup.

datadog.concept.synthetic-check Source

A synthetic check supporting an observed target without owning target runtime.

Used by synthetics-suite, synthetics-test, synthetics-test-lookup.

datadog.concept.telemetry-configuration Source

A processing, indexing, routing, retention, or enrichment detail for telemetry.

Used by 5 Rules

• logs-archive-order
• logs-custom-pipeline
• logs-index
• logs-integration-pipeline
• rum-retention-filter

datadog.concept.telemetry-destination Source

A durable archive or forwarding destination for Datadog logs.

Used by logs-archive, logs-archive-order, logs-custom-destination.

Relations

datadog.relation.shares-telemetry-with Source

Introduced by a labeled emission. Used by org-connection.

Rule details

Open a Rule for its declared behavior and source. Matching, emission resolution and composition define how evidence can establish it.

datadog.rule.action-connection-lookup Source

Matches data instances of datadog_action_connection.

Classification: datadog.concept.service-integration.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.action-connection Source

Matches resource instances of datadog_action_connection.

Classification: datadog.concept.service-integration.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.app-builder-app-lookup Source

Matches data instances of datadog_app_builder_app.

Classification: datadog.concept.automation-application.

datadog.rule.app-builder-app Source

Matches resource instances of datadog_app_builder_app.

Classification: datadog.concept.automation-application.

datadog.rule.child-organization Source

Matches resource instances of datadog_child_organization.

Classification: datadog.concept.observability-tenant.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id", "public_id"]

datadog.rule.compliance-custom-framework Source

Matches resource instances of datadog_compliance_custom_framework.

Classification: datadog.concept.security-configuration.

datadog.rule.csm-threats-policy Source

Matches resource instances of datadog_csm_threats_policy.

Classification: datadog.concept.security-configuration.

datadog.rule.datastore-item-lookup Source

Matches data instances of datadog_datastore_item.

Classification: datadog.concept.service-integration-configuration.

Contributions

• targets datadog.concept.application-datastore through source.datastore_id.

Conditions, identity and resolution

Contribution through source.datastore_id

• on_null: "indeterminate"
• on_empty: "indeterminate"
• match.by: target.id
• match.strategy: "exact"

datadog.rule.datastore-item Source

Matches resource instances of datadog_datastore_item.

Classification: datadog.concept.service-integration-configuration.

Contributions

• targets datadog.concept.application-datastore through source.datastore_id.

Conditions, identity and resolution

Contribution through source.datastore_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

datadog.rule.datastore-lookup Source

Matches data instances of datadog_datastore.

Classification: datadog.concept.application-datastore.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.datastore Source

Matches resource instances of datadog_datastore.

Classification: datadog.concept.application-datastore.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.integration-aws-account Source

Matches resource instances of datadog_integration_aws_account.

Classification: datadog.concept.cloud-observability-integration.

datadog.rule.integration-azure Source

Matches resource instances of datadog_integration_azure.

Classification: datadog.concept.cloud-observability-integration.

datadog.rule.integration-cloudflare-account Source

Matches resource instances of datadog_integration_cloudflare_account.

Classification: datadog.concept.service-integration.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.integration-confluent-account Source

Matches resource instances of datadog_integration_confluent_account.

Classification: datadog.concept.service-integration.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.integration-confluent-resource Source

Matches resource instances of datadog_integration_confluent_resource.

Classification: datadog.concept.service-integration-configuration.

Contributions

• targets datadog.concept.service-integration through source.account_id.

Conditions, identity and resolution

Contribution through source.account_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

datadog.rule.integration-fastly-account Source

Matches resource instances of datadog_integration_fastly_account.

Classification: datadog.concept.service-integration.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.integration-fastly-service Source

Matches resource instances of datadog_integration_fastly_service.

Classification: datadog.concept.service-integration-configuration.

Contributions

• targets datadog.concept.service-integration through source.account_id.

Conditions, identity and resolution

Contribution through source.account_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

datadog.rule.integration-gcp-sts Source

Matches resource instances of datadog_integration_gcp_sts.

Classification: datadog.concept.cloud-observability-integration.

datadog.rule.integration-gcp Source

Matches resource instances of datadog_integration_gcp.

Classification: datadog.concept.cloud-observability-integration.

datadog.rule.logs-archive-order Source

Matches resource instances of datadog_logs_archive_order.

Classification: datadog.concept.telemetry-configuration.

Contributions

• targets datadog.concept.telemetry-destination through source.archive_ids.

Conditions, identity and resolution

Contribution through source.archive_ids

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

datadog.rule.logs-archive Source

Matches resource instances of datadog_logs_archive.

Classification: datadog.concept.telemetry-destination.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.logs-custom-destination Source

Matches resource instances of datadog_logs_custom_destination.

Classification: datadog.concept.telemetry-destination.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.logs-custom-pipeline Source

Matches resource instances of datadog_logs_custom_pipeline.

Classification: datadog.concept.telemetry-configuration.

datadog.rule.logs-index Source

Matches resource instances of datadog_logs_index.

Classification: datadog.concept.telemetry-configuration.

datadog.rule.logs-integration-pipeline Source

Matches resource instances of datadog_logs_integration_pipeline.

Classification: datadog.concept.telemetry-configuration.

datadog.rule.org-connection Source

Matches resource instances of datadog_org_connection.

Classification: datadog.concept.organization-connection.

Relations

• datadog.relation.shares-telemetry-with: targets datadog.concept.observability-tenant through source.sink_org_id.

Conditions, identity and resolution

Relation through source.sink_org_id

• on_null: "absent"
• on_empty: "absent"
• external: "allow"
• match.by: target.id
• match.strategy: "exact"

datadog.rule.rum-application-lookup Source

Matches data instances of datadog_rum_application.

Classification: datadog.concept.browser-observability-application.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.rum-application Source

Matches resource instances of datadog_rum_application.

Classification: datadog.concept.browser-observability-application.

Conditions, identity and resolution

Identity

• attributes: ["id"]
• scope: "provider"

Endpoint

• attributes: ["id"]

datadog.rule.rum-retention-filter Source

Matches resource instances of datadog_rum_retention_filter.

Classification: datadog.concept.telemetry-configuration.

Contributions

• targets datadog.concept.browser-observability-application through source.application_id.

Conditions, identity and resolution

Contribution through source.application_id

• on_null: "absent"
• on_empty: "absent"
• match.by: target.id
• match.strategy: "exact"

datadog.rule.security-monitoring-rule Source

Matches resource instances of datadog_security_monitoring_rule.

Classification: datadog.concept.security-configuration.

datadog.rule.sensitive-data-scanner-group Source

Matches resource instances of datadog_sensitive_data_scanner_group.

Classification: datadog.concept.security-configuration.

datadog.rule.service-definition-yaml Source

Matches resource instances of datadog_service_definition_yaml.

Classification: datadog.concept.catalog-definition.

datadog.rule.service-level-objective-lookup Source

Matches data instances of datadog_service_level_objective.

Classification: datadog.concept.service-objective.

datadog.rule.service-level-objective Source

Matches resource instances of datadog_service_level_objective.

Classification: datadog.concept.service-objective.

datadog.rule.software-catalog-lookup Source

Matches data instances of datadog_software_catalog.

Classification: datadog.concept.catalog-definition.

datadog.rule.software-catalog Source

Matches resource instances of datadog_software_catalog.

Classification: datadog.concept.catalog-definition.

datadog.rule.synthetics-suite Source

Matches resource instances of datadog_synthetics_suite.

Classification: datadog.concept.synthetic-check.

datadog.rule.synthetics-test-lookup Source

Matches data instances of datadog_synthetics_test.

Classification: datadog.concept.synthetic-check.

datadog.rule.synthetics-test Source

Matches resource instances of datadog_synthetics_test.

Classification: datadog.concept.synthetic-check.

datadog.rule.workflow-automation-lookup Source

Matches data instances of datadog_workflow_automation.

Classification: datadog.concept.automation-workflow.

datadog.rule.workflow-automation Source

Matches resource instances of datadog_workflow_automation.

Classification: datadog.concept.automation-workflow.