How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Datadog Policies API

The Policies API from Datadog — 9 operation(s) for policies.

Datadog Policies API is one of 290 APIs that Datadog publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include Policies. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, an API reference, and 4 JSON Schemas.

This API exposes 19 operations across 9 paths, and defines 89 schemas. It is described by OpenAPI 3.0.0, at version 1.0.

Requests are made against 3 base URLs: https://{subdomain}.{site}, {protocol}://{name}, https://{subdomain}.{site}.

19 operations 9 paths 89 schemas 4 DELETE8 GET2 PATCH4 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
1.0
Base URL
https://api.datadoghq.com
Authentication
OAuth 2.0, API Key, API Key, HTTP Bearer
Resource Areas
1

Authentication & Security 4

Datadog Policies API declares 4 security schemes for authenticating requests. It supports OAuth 2.0 (AuthZ) using the authorizationCode flow, exposing 68 scopes. An API key is passed in the header as DD-API-KEY (apiKeyAuth). An API key is passed in the header as DD-APPLICATION-KEY (appKeyAuth). It accepts HTTP bearer tokens (bearerAuth). By default, every request must be authenticated.

  • AuthZ — This API uses OAuth 2 with the implicit grant flow.
  • apiKeyAuth — Your Datadog API Key.
  • appKeyAuth — Your Datadog APP Key.

Paths & Operations 19

Across 9 paths, the API surfaces 19 operations — 4 DELETE, 8 GET, 2 PATCH, 4 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

Policies 19
GET
/api/v2/monitor/policy
Datadog Get All Monitor Configuration Policies
ListMonitorConfigPolicies → 200403429
POST
/api/v2/monitor/policy
Datadog Create a Monitor Configuration Policy
CreateMonitorConfigPolicy body → 200400403429
DELETE
/api/v2/monitor/policy/{policy_id}
Datadog Delete a Monitor Configuration Policy
DeleteMonitorConfigPolicy 1 param → 204400403404429
GET
/api/v2/monitor/policy/{policy_id}
Datadog Get a Monitor Configuration Policy
GetMonitorConfigPolicy 1 param → 200403404429
PATCH
/api/v2/monitor/policy/{policy_id}
Datadog Edit a Monitor Configuration Policy
UpdateMonitorConfigPolicy 1 param body → 200403404422429
POST
/api/v2/on-call/escalation-policies
Datadog Create On-call Escalation Policy
CreateOnCallEscalationPolicy 1 param body → 201400401403429
DELETE
/api/v2/on-call/escalation-policies/{policy_id}
Datadog Delete On-call Escalation Policy
DeleteOnCallEscalationPolicy 1 param → 204401403404429
GET
/api/v2/on-call/escalation-policies/{policy_id}
Datadog Get On-call Escalation Policy
GetOnCallEscalationPolicy 2 params → 200400401403404429
PUT
/api/v2/on-call/escalation-policies/{policy_id}
Datadog Update On-call Escalation Policy
UpdateOnCallEscalationPolicy 2 params body → 200400401403404429
GET
/api/v2/remote_config/products/cws/policy
Datadog Get All Workload Protection Policies
ListCSMThreatsAgentPolicies → 200403429
POST
/api/v2/remote_config/products/cws/policy
Datadog Create a Workload Protection Policy
CreateCSMThreatsAgentPolicy body → 200400403409429
GET
/api/v2/remote_config/products/cws/policy/download
Datadog Download the Workload Protection Policy
DownloadCSMThreatsPolicy → 200403429
DELETE
/api/v2/remote_config/products/cws/policy/{policy_id}
Datadog Delete a Workload Protection Policy
DeleteCSMThreatsAgentPolicy 1 param → 202204403404429
GET
/api/v2/remote_config/products/cws/policy/{policy_id}
Datadog Get a Workload Protection Policy
GetCSMThreatsAgentPolicy 1 param → 200403404429
PATCH
/api/v2/remote_config/products/cws/policy/{policy_id}
Datadog Update a Workload Protection Policy
UpdateCSMThreatsAgentPolicy 1 param body → 200400403404409429
DELETE
/api/v2/restriction_policy/{resource_id}
Datadog Delete a Restriction Policy
DeleteRestrictionPolicy 1 param → 204400403429
GET
/api/v2/restriction_policy/{resource_id}
Datadog Get a Restriction Policy
GetRestrictionPolicy 1 param → 200400403429
POST
/api/v2/restriction_policy/{resource_id}
Datadog Update a Restriction Policy
UpdateRestrictionPolicy 2 params body → 200400403429
GET
/api/v2/security/cloud_workload/policy/download
Datadog Download the Workload Protection Policy (us1-fed)
DownloadCloudWorkloadPolicyFile → 200403429

Schemas 89

The contract defines 89 schemas that model the data the API accepts and returns. The most detailed are CloudWorkloadSecurityAgentPolicyAttributes (15 properties), CloudWorkloadSecurityAgentPolicyCreateAttributes (5 properties), CloudWorkloadSecurityAgentPolicyUpdateAttributes (5 properties), TeamReferenceAttributes (4 properties). Each schema is shown below with its type and property counts.

EscalationPolicyCreateRequestDataAttributes
object
Defines the attributes for creating an escalation policy, including its description, name, resolution behavior, retries, and steps.
4 properties 2 required
TeamTarget
object
Represents a team target for an escalation policy step, including the team's ID and resource type.
2 properties 2 required
CloudWorkloadSecurityAgentPolicyUpdateRequest
object
Request object that includes the Agent policy with the attributes to update
1 property 1 required
ScheduleDataAttributes
object
Provides core properties of a schedule object such as its name and time zone.
2 properties
RestrictionPolicyUpdateRequest
object
Update request for a restriction policy.
1 property 1 required
MonitorConfigPolicyEditData
object
A monitor configuration policy data.
3 properties 3 required
MonitorConfigPolicyListResponse
object
Response for retrieving all monitor configuration policies.
1 property
UserAttributesStatus
string
The user's status.
MonitorConfigPolicyEditRequest
object
Request for editing a monitor configuration policy.
1 property 1 required
MonitorConfigPolicyTagPolicy
object
Tag attributes of a monitor configuration policy.
3 properties
EscalationTarget
Represents an escalation target, which can be a team, user, or schedule.
EscalationPolicyStepType
string
Indicates that the resource is of type steps.
DataRelationshipsTeams
object
Associates teams with this schedule in a data structure.
1 property
UserTarget
object
Represents a user target for an escalation policy step, including the user's ID and resource type.
2 properties 2 required
RestrictionPolicyAttributes
object
Restriction policy attributes.
1 property 1 required
EscalationPolicyStepAttributesAssignment
string
Specifies how this escalation step will assign targets (example default or round-robin).
ScheduleDataRelationshipsLayersDataItems
object
Relates a layer to this schedule, identified by id and type (must be layers).
2 properties 2 required
EscalationPolicyStep
object
Represents a single step in an escalation policy, including its attributes, relationships, and resource type.
4 properties 1 required
RestrictionPolicyResponse
object
Response containing information about a single restriction policy.
1 property 1 required
EscalationPolicyUserType
string
Users resource type.
ScheduleDataRelationshipsLayersDataItemsType
string
Layers resource type.
EscalationPolicyCreateRequest
object
Represents a request to create a new escalation policy, including the policy data.
1 property 1 required
EscalationPolicyUser
object
Represents a user object in the context of an escalation policy, including their id, type, and basic attributes.
3 properties 1 required
EscalationPolicyUpdateRequest
object
Represents a request to update an existing escalation policy, including the updated policy data.
1 property 1 required
ScheduleDataRelationshipsLayers
object
Associates layers with this schedule in a data structure.
1 property
EscalationPolicyUserAttributes
object
Provides basic user information for an escalation policy, including a name and email address.
3 properties
TeamTargetType
string
Indicates that the resource is of type teams.
DataRelationshipsTeamsDataItemsType
string
Teams resource type.
CloudWorkloadSecurityAgentPolicyCreateAttributes
object
Create a new Cloud Workload Security Agent policy
5 properties 1 required
CloudWorkloadSecurityAgentPolicyUpdateAttributes
object
Update an existing Cloud Workload Security Agent policy
5 properties
MonitorConfigPolicyCreateRequest
object
Request for creating a monitor configuration policy.
1 property 1 required
CloudWorkloadSecurityAgentPolicyCreateData
object
Object for a single Agent rule
2 properties 2 required
EscalationPolicyDataRelationshipsStepsDataItemsType
string
Indicates that the resource is of type steps.
EscalationPolicyDataType
string
Indicates that the resource is of type policies.
EscalationPolicyIncluded
Represents included related resources when retrieving an escalation policy, such as teams, steps, or targets.
EscalationPolicyCreateRequestDataType
string
Indicates that the resource is of type policies.
EscalationPolicyStepTarget
object
Defines a single escalation target within a step for an escalation policy creation request. Contains id and type.
2 properties
EscalationPolicyStepTargetType
string
Specifies the type of escalation target (example users, schedules, or teams).
MonitorConfigPolicyPolicyCreateRequest
Configuration for the policy.
MonitorConfigPolicyResponseData
object
A monitor configuration policy data.
3 properties
ScheduleTarget
object
Represents a schedule target for an escalation policy step, including its ID and resource type.
2 properties 2 required
CloudWorkloadSecurityAgentPoliciesListResponse
object
Response object that includes a list of Agent policies
1 property
MonitorConfigPolicyCreateData
object
A monitor configuration policy data.
2 properties 2 required
ScheduleDataRelationships
object
Groups the relationships for a schedule object, referencing layers and teams.
2 properties
TeamReference
object
Provides a reference to a team, including ID, type, and basic attributes/relationships.
3 properties 1 required
EscalationTargets
object
A list of escalation targets for a step
1 property
MonitorConfigPolicyAttributeResponse
object
Policy and policy type for a monitor configuration policy.
2 properties
TeamReferenceAttributes
object
Encapsulates the basic attributes of a Team reference, such as name, handle, and an optional avatar or description.
4 properties
MonitorConfigPolicyResponse
object
Response for retrieving a monitor configuration policy.
1 property
CloudWorkloadSecurityAgentPolicyResponse
object
Response object that includes an Agent policy
1 property
ScheduleDataType
string
Schedules resource type.
MonitorConfigPolicyType
string
The monitor configuration policy type.
MonitorConfigPolicyTagPolicyCreateRequest
object
Tag attributes of a monitor configuration policy.
3 properties 3 required
CloudWorkloadSecurityAgentPolicyCreateRequest
object
Request object that includes the Agent policy to create
1 property 1 required
EscalationPolicy
object
Represents a complete escalation policy response, including policy data and optionally included related resources.
2 properties
APIErrorResponse
object
API error response.
1 property 1 required
EscalationPolicyDataRelationships
object
Represents the relationships for an escalation policy, including references to steps and teams.
2 properties 1 required
EscalationPolicyStepRelationships
object
Represents the relationship of an escalation policy step to its targets.
1 property
CloudWorkloadSecurityAgentPolicyData
object
Object for a single Agent policy
3 properties
ScheduleTargetType
string
Indicates that the resource is of type schedules.
EscalationPolicyCreateRequestDataRelationships
object
Represents relationships in an escalation policy creation request, including references to teams.
1 property
CloudWorkloadSecurityAgentPolicyUpdateData
object
Object for a single Agent policy
3 properties 2 required
CloudWorkloadSecurityAgentPolicyID
string
The ID of the Agent policy
RestrictionPolicy
object
Restriction policy object.
3 properties 3 required
ScheduleData
object
Represents the primary data object for a schedule, linking attributes and relationships.
4 properties 1 required
MonitorConfigPolicyResourceType
string
Monitor configuration policy resource type.
DataRelationshipsTeamsDataItems
object
Relates a team to this schedule, identified by id and type (must be teams).
2 properties 2 required
MonitorConfigPolicyPolicy
Configuration for the policy.
EscalationPolicyDataAttributes
object
Defines the main attributes of an escalation policy, such as its name and behavior on policy end.
3 properties 1 required
CloudWorkloadSecurityAgentPolicyUpdaterAttributes
object
The attributes of the user who last updated the policy
2 properties
RestrictionPolicyBinding
object
Specifies which principals are associated with a relation.
2 properties 2 required
EscalationPolicyData
object
Represents the data for a single escalation policy, including its attributes, ID, relationships, and resource type.
4 properties 1 required
EscalationPolicyUpdateRequestDataType
string
Indicates that the resource is of type policies.
EscalationPolicyCreateRequestDataAttributesStepsItems
object
Defines a single escalation step within an escalation policy creation request. Contains assignment strategy, escalation timeout, and a list of targets.
3 properties 1 required
MonitorConfigPolicyAttributeCreateRequest
object
Policy and policy type for a monitor configuration policy.
2 properties 2 required
CloudWorkloadSecurityAgentPolicyType
string
The type of the resource, must always be policy
EscalationPolicyDataRelationshipsStepsDataItems
object
Defines a relationship to a single step within an escalation policy. Contains the step's id and type.
2 properties 2 required
EscalationPolicyUpdateRequestDataAttributesStepsItems
object
Defines a single escalation step within an escalation policy update request. Contains assignment strategy, escalation timeout, an optional step ID, and a list…
4 properties 1 required
EscalationPolicyCreateRequestData
object
Represents the data for creating an escalation policy, including its attributes, relationships, and resource type.
3 properties 2 required
EscalationPolicyUpdateRequestDataAttributes
object
Defines the attributes that can be updated for an escalation policy, such as description, name, resolution behavior, retries, and steps.
4 properties 2 required
EscalationPolicyStepAttributes
object
Defines attributes for an escalation policy step, such as assignment strategy and escalation timeout.
2 properties
CloudWorkloadSecurityAgentPolicyAttributes
object
A Cloud Workload Security Agent policy returned by the API
15 properties
EscalationPolicyUpdateRequestData
object
Represents the data for updating an existing escalation policy, including its ID, attributes, relationships, and resource type.
4 properties 3 required
EscalationPolicyDataRelationshipsSteps
object
Defines the relationship to a collection of steps within an escalation policy. Contains an array of step data references.
1 property
RestrictionPolicyType
string
Restriction policy type.
EscalationPolicyUpdateRequestDataRelationships
object
Represents relationships in an escalation policy update request, including references to teams.
1 property
UserTargetType
string
Indicates that the resource is of type users.
MonitorConfigPolicyAttributeEditRequest
object
Policy and policy type for a monitor configuration policy.
2 properties 2 required
TeamReferenceType
string
Teams resource type.

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

datadog-policies-api-openapi.yml Raw ↑

Other APIs Datadog publishes across the network.

Datadog Dashboards API
Datadog Synthetics API
Datadog Service Level Objectives API
Datadog Security Monitoring API
Datadog Service Definition API
Datadog Software Catalog API
Datadog Users API
Datadog Roles API
Datadog Key Management API
Datadog Organizations API
Datadog Downtimes API
Datadog RUM API
Where this information came from

This is an independent, third-party profile of Datadog Policies API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.