--- title: "List Scanning Groups" method: GET path: "/api/v2/sensitive-data-scanner/config" tags: ["Sensitive Data Scanner"] --- # List Scanning Groups `GET /api/v2/sensitive-data-scanner/config` ## Request - Base URL: `https://api.datadoghq.com` - URL: `https://api.datadoghq.com/api/v2/sensitive-data-scanner/config` - Auth: API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY` List all the Scanning groups in your organization. ## Response `200` OK - SensitiveDataScannerGetConfigResponse: Get all groups response. - `data` SensitiveDataScannerGetConfigResponseData: Response data related to the scanning groups. - `attributes` object: Attributes of the Sensitive Data configuration. - `id` string: ID of the configuration. - `relationships` SensitiveDataScannerConfigurationRelationships: Relationships of the configuration. - `groups` SensitiveDataScannerGroupList: List of groups, ordered. - `data` SensitiveDataScannerGroupItem[]: List of groups. The order is important. - `id` string: ID of the group. - `type` 'sensitive_data_scanner_group': Sensitive Data Scanner group type. - `type` 'sensitive_data_scanner_configuration': Sensitive Data Scanner configuration type. - `included` SensitiveDataScannerGetConfigIncludedItem[]: Included objects from relationships. - union: An object related to the configuration. - SensitiveDataScannerRuleIncludedItem: A Scanning Rule included item. - `attributes` SensitiveDataScannerRuleAttributes: Attributes of the Sensitive Data Scanner rule. - `description` string: Description of the rule. - `excluded_namespaces` string[]: Attributes excluded from the scan. If namespaces is provided, it has to be a sub-path of the namespaces array. - `included_keyword_configuration` SensitiveDataScannerIncludedKeywordConfiguration: Object defining a set of keywords and a number of characters that help reduce noise. You can provide a list of keywords you would like to check within a defined proximity of the matching pattern. If any of the keywords are found within the proximity check, the match is kept. If none are found, the match is discarded. - `character_count` integer, required: The number of characters behind a match detected by Sensitive Data Scanner to look for the keywords defined. `character_count` should be greater than the maximum length of a keyword defined for a rule. - `keywords` string[], required: Keyword list that will be checked during scanning in order to validate a match. The number of keywords in the list must be less than or equal to 30. - `use_recommended_keywords` boolean: Should the rule use the underlying standard pattern keyword configuration. If set to `true`, the rule must be tied to a standard pattern. If set to `false`, the specified keywords and `character_count` are applied. - `is_enabled` boolean: Whether or not the rule is enabled. - `name` string: Name of the rule. - `namespaces` string[]: Attributes included in the scan. If namespaces is empty or missing, all attributes except excluded_namespaces are scanned. If both are missing the whole event is scanned. - `pattern` string: Not included if there is a relationship to a standard pattern. - `priority` integer: Integer from 1 (high) to 5 (low) indicating rule issue severity. - `suppressions` SensitiveDataScannerSuppressions: Object describing the suppressions for a rule. There are three types of suppressions, `starts_with`, `ends_with`, and `exact_match`. Suppressed matches are not obfuscated, counted in metrics, or displayed in the Findings page. - `ends_with` string[]: List of strings to use for suppression of matches ending with these strings. - `exact_match` string[]: List of strings to use for suppression of matches exactly matching these strings. - `starts_with` string[]: List of strings to use for suppression of matches starting with these strings. - `tags` string[]: List of tags. - `text_replacement` SensitiveDataScannerTextReplacement: Object describing how the scanned event will be replaced. - `number_of_chars` integer: Required if type == 'partial_replacement_from_beginning' or 'partial_replacement_from_end'. It must be > 0. - `replacement_string` string: Required if type == 'replacement_string'. - `should_save_match` boolean: Only valid when type == `replacement_string`. When enabled, matches can be unmasked in logs by users with ‘Data Scanner Unmask’ permission. As a security best practice, avoid masking for highly-sensitive, long-lived data. - `type` 'none' | 'hash' | 'replacement_string' | 'partial_replacement_from_beginning' | 'partial_replacement_from_end': Type of the replacement text. None means no replacement. hash means the data will be stubbed. replacement_string means that one can chose a text to replace the data. partial_replacement_from_beginning allows a user to partially replace the data from the beginning, and partial_replacement_from_end on the other hand, allows to replace data from the end. - `id` string: ID of the rule. - `relationships` SensitiveDataScannerRuleRelationships: Relationships of a scanning rule. - `group` SensitiveDataScannerGroupData: A scanning group data. - `data` SensitiveDataScannerGroup: A scanning group. - … - `standard_pattern` SensitiveDataScannerStandardPatternData: A standard pattern. - `data` SensitiveDataScannerStandardPattern: Data containing the standard pattern id. - … - `type` 'sensitive_data_scanner_rule': Sensitive Data Scanner rule type. - SensitiveDataScannerGroupIncludedItem: A Scanning Group included item. - `attributes` SensitiveDataScannerGroupAttributes: Attributes of the Sensitive Data Scanner group. - `description` string: Description of the group. - `filter` SensitiveDataScannerFilter: Filter for the Scanning Group. - `query` string: Query to filter the events. - `is_enabled` boolean: Whether or not the group is enabled. - `name` string: Name of the group. - `product_list` SensitiveDataScannerProduct[]: List of products the scanning group applies. - `samplings` SensitiveDataScannerSamplings[]: List of sampling rates per product type. - `product` 'logs' | 'rum' | 'events' | 'apm': Datadog product onto which Sensitive Data Scanner can be activated. - `rate` number, double: Rate at which data in product type will be scanned, as a percentage. - `id` string: ID of the group. - `relationships` SensitiveDataScannerGroupRelationships: Relationships of the group. - `configuration` SensitiveDataScannerConfigurationData: A Sensitive Data Scanner configuration data. - `data` SensitiveDataScannerConfiguration: A Sensitive Data Scanner configuration. - … - `rules` SensitiveDataScannerRuleData: Rules included in the group. - `data` SensitiveDataScannerRule[]: Rules included in the group. The order is important. - … - `type` 'sensitive_data_scanner_group': Sensitive Data Scanner group type. - `meta` SensitiveDataScannerMeta: Meta response containing information about the API. - `count_limit` integer: Maximum number of scanning rules allowed for the org. - `group_count_limit` integer: Maximum number of scanning groups allowed for the org. - `has_highlight_enabled` boolean: (Deprecated) Whether or not scanned events are highlighted in Logs or RUM for the org. - `has_multi_pass_enabled` boolean: (Deprecated) Whether or not scanned events have multi-pass enabled. - `is_pci_compliant` boolean: Whether or not the org is compliant to the payment card industry standard. - `version` integer: Version of the API. ## Other responses - `400`: Bad Request - `403`: Authentication Error - `429`: Too many requests --- [API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)