---
title: "List AWS scan options"
method: GET
path: "/api/v2/agentless_scanning/accounts/aws"
tags: ["Agentless Scanning"]
---

# List AWS scan options

`GET /api/v2/agentless_scanning/accounts/aws`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/agentless_scanning/accounts/aws`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `security_monitoring_findings_read`

Fetches the scan options configured for AWS accounts.

## Response `200`

OK

- AwsScanOptionsListResponse: Response object that includes a list of AWS scan options.
  - `data` AwsScanOptionsData[]: A list of AWS scan options.
    - `attributes` AwsScanOptionsAttributes: Attributes for the AWS scan options.
      - `compliance_host` boolean: Indicates whether host compliance scanning is enabled.
      - `lambda` boolean: Indicates if scanning of Lambda functions is enabled.
      - `sensitive_data` boolean: Indicates if scanning for sensitive data is enabled.
      - `vuln_containers_os` boolean: Indicates if scanning for vulnerabilities in containers is enabled.
      - `vuln_host_os` boolean: Indicates if scanning for vulnerabilities in hosts is enabled.
    - `id` string: The ID of the AWS account.
    - `type` 'aws_scan_options': The type of the resource. The value should always be `aws_scan_options`.

## Other responses

- `403`: Not Authorized
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)
