---
title: "POST /codesecurity/scan-configuration/create"
method: POST
path: "/codesecurity/scan-configuration/create"
---

# POST /codesecurity/scan-configuration/create

`POST /codesecurity/scan-configuration/create`

Creates a scan configuration for code security scanning.

## Request body

- object
  - `name` string, required — The name of the scan configuration.
  - `level` 'ORGANIZATION' | 'ACCOUNT', required — The security level for the scan configuration.
  - `configuration` object, required — Contains the configuration settings for code security scans.
    - `periodicScanConfiguration` object — Configuration settings for periodic scans that run on a scheduled basis.
      - `frequency` 'WEEKLY' | 'MONTHLY' | 'NEVER' — <p>The frequency at which periodic scans are performed (such as weekly or monthly).</p> <p>If you don't provide the <code>frequencyExpression</code> Amazon Inspector chooses day for the scan to run. If you provide the <code>frequencyExpression</code>, the schedule must match the specified <code>frequency</code>.</p>
      - `frequencyExpression` string — The schedule expression for periodic scans, in cron format.
    - `continuousIntegrationScanConfiguration` object — Configuration settings for continuous integration scans that run automatically when code changes are made.
      - `supportedEvents` ContinuousIntegrationScanEvent[], required — The repository events that trigger continuous integration scans, such as pull requests or commits.
    - `ruleSetCategories` RuleSetCategory[] — The categories of security rules to be applied during the scan.
  - `scopeSettings` object — Defines the scope of repositories to be included in code security scans.
    - `projectSelectionScope` 'ALL' — The scope of projects to be selected for scanning within the integrated repositories. Setting the value to <code>ALL</code> applies the scope settings to all existing and future projects imported into Amazon Inspector.
  - `tags` object — The tags to apply to the scan configuration.

## Response `200`

Success

- CreateCodeSecurityScanConfigurationResponse
  - `scanConfigurationArn` string, required — The Amazon Resource Name (ARN) of the created scan configuration.

## Other responses

- `480` — ServiceQuotaExceededException
- `481` — ConflictException
- `482` — AccessDeniedException
- `483` — ValidationException
- `484` — ThrottlingException
- `485` — InternalServerException

---

[API](https://skmtc.net/aws/apis/inspector2.md) · [All operations](https://skmtc.net/aws/apis/inspector2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/inspector2/versions/c51110c7cd43/schema)