---
title: "Create AWS scan options"
method: POST
path: "/api/v2/agentless_scanning/accounts/aws"
tags: ["Agentless Scanning"]
---

# Create AWS scan options

`POST /api/v2/agentless_scanning/accounts/aws`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/agentless_scanning/accounts/aws`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `org_management`

Activate Agentless scan options for an AWS account.

## Request body

- AwsScanOptionsCreateRequest: Request object that includes the scan options to create.
  - `data` AwsScanOptionsCreateData, required: Object for the scan options of a single AWS account.
    - `attributes` AwsScanOptionsCreateAttributes, required: Attributes for the AWS scan options to create.
      - `compliance_host` boolean, required: Indicates whether host compliance scanning is enabled.
      - `lambda` boolean, required: Indicates if scanning of Lambda functions is enabled.
      - `sensitive_data` boolean, required: Indicates if scanning for sensitive data is enabled.
      - `vuln_containers_os` boolean, required: Indicates if scanning for vulnerabilities in containers is enabled.
      - `vuln_host_os` boolean, required: Indicates if scanning for vulnerabilities in hosts is enabled.
    - `id` string, required: The ID of the AWS account.
    - `type` 'aws_scan_options', required: The type of the resource. The value should always be `aws_scan_options`.

## Response `201`

Agentless scan options enabled successfully.

- AwsScanOptionsResponse: Response object that includes the scan options of an AWS account.
  - `data` AwsScanOptionsData: Single AWS Scan Options entry.
    - `attributes` AwsScanOptionsAttributes: Attributes for the AWS scan options.
      - `compliance_host` boolean: Indicates whether host compliance scanning is enabled.
      - `lambda` boolean: Indicates if scanning of Lambda functions is enabled.
      - `sensitive_data` boolean: Indicates if scanning for sensitive data is enabled.
      - `vuln_containers_os` boolean: Indicates if scanning for vulnerabilities in containers is enabled.
      - `vuln_host_os` boolean: Indicates if scanning for vulnerabilities in hosts is enabled.
    - `id` string: The ID of the AWS account.
    - `type` 'aws_scan_options': The type of the resource. The value should always be `aws_scan_options`.

## Other responses

- `400`: Bad Request
- `403`: Not Authorized
- `409`: Conflict
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)