---
title: "Bulk convert rules to Terraform"
method: POST
path: "/api/v2/security_monitoring/rules/convert/bulk"
tags: ["Security Monitoring"]
---

# Bulk convert rules to Terraform

`POST /api/v2/security_monitoring/rules/convert/bulk`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/security_monitoring/rules/convert/bulk`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `security_monitoring_rules_read`

Convert a list of existing security monitoring rules to Terraform for the Datadog provider
resource `datadog_security_monitoring_rule`. Returns a ZIP archive containing one Terraform
file per rule. You can convert rules for the following types:
- App and API Protection
- Cloud SIEM (log detection and signal correlation)
- Workload Protection

## Request body

- SecurityMonitoringRuleConvertBulkPayload: Payload for bulk converting security monitoring rules to Terraform.
  - `data` SecurityMonitoringRuleConvertBulkData, required: Data for bulk converting security monitoring rules to Terraform.
    - `attributes` SecurityMonitoringRuleConvertBulkAttributes, required: Attributes for bulk converting security monitoring rules to Terraform.
      - `ruleIds` string[], required: List of rule IDs to convert. Each rule will be included in the resulting ZIP file as a separate Terraform file.
    - `id` string: Request ID.
    - `type` 'security_monitoring_rules_convert_bulk', required: The type of the resource.

## Response `200`

OK

## Other responses

- `400`: Bad Request
- `403`: Not Authorized
- `404`: Not Found
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)