Update IaC Security configuration documentation#36468
Update IaC Security configuration documentation#36468whitemerch wants to merge 1 commit intomasterfrom
Conversation
whitemerch
force-pushed
the
chakib_hamie/update_iac_security_configuration_docs
branch
6 times, most recently
from
c6f2073 to
eeee1ce
Compare
ChouraquiBen
left a comment
ChouraquiBen
left a comment
There was a problem hiding this comment.
Niiiiiice! Looks already really neat!
whitemerch
force-pushed
the
chakib_hamie/update_iac_security_configuration_docs
branch
from
eeee1ce to
2ef6ce4
Compare
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 2ef6ce40fb
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| - name: Configuration | ||
| identifier: code_security_iac_security_exclusions | ||
| url: /security/code_security/iac_security/exclusions/ | ||
| url: /security/code_security/iac_security/configuration/ |
There was a problem hiding this comment.
In localized builds this menu URL is passed through relLangURL in layouts/partials/nav/left-nav.html, so the Spanish sidebar points to /es/security/code_security/iac_security/configuration/. I checked the content tree and this commit only adds the English configuration page; Spanish and Korean still only have content/{es,ko}/security/code_security/iac_security/exclusions.md, so this sidebar item becomes a 404 for those locales instead of linking to the existing translated exclusions page.
Useful? React with 👍 / 👎.
|
Created DOCS-14315 for documentation team review |
4 participants
What does this PR do? What is the motivation?
This PR updates the IaC Security configuration docs to align with the shared Code Security configuration model. The new page documents the
iacsection ofcode-security.datadog.yaml, including default rule behavior,use-rulesandignore-rules, global path/severity/category filters, and inlinedd-iac-scanexclusions.This also moves the page from the older exclusions-focused URL to the SAST-style configuration URL, while keeping the previous exclusions URL as an alias for existing links. The shared Code Security configuration reference now includes IaC in the schema and merge examples.
Preview links:
Merge instructions
Merge readiness:
Note
This PR is not ready to be merged as the feature is not released yet, but it is to be ready once the feature is released
Additional notes
The legacy
dd-iac-scan.configsection now links to a future reference in thedatadog-iac-scannerrepository.