---
title: "Create AWS scan options"
method: POST
path: "/api/v2/agentless_scanning/accounts/aws"
tags: ["Agentless Scanning"]
---

# Create AWS scan options

`POST /api/v2/agentless_scanning/accounts/aws`

Activate Agentless scan options for an AWS account.

## Request body

- AwsScanOptionsCreateRequest — Request object that includes the scan options to create.
  - `data` AwsScanOptionsCreateData, required — Object for the scan options of a single AWS account.
    - `attributes` AwsScanOptionsCreateAttributes, required — Attributes for the AWS scan options to create.
      - `compliance_host` boolean, required — Indicates whether host compliance scanning is enabled.
      - `lambda` boolean, required — Indicates if scanning of Lambda functions is enabled.
      - `sensitive_data` boolean, required — Indicates if scanning for sensitive data is enabled.
      - `vuln_containers_os` boolean, required — Indicates if scanning for vulnerabilities in containers is enabled.
      - `vuln_host_os` boolean, required — Indicates if scanning for vulnerabilities in hosts is enabled.
    - `id` string, required — The ID of the AWS account.
    - `type` 'aws_scan_options', required — The type of the resource. The value should always be `aws_scan_options`.

## Response `201`

Agentless scan options enabled successfully.

- AwsScanOptionsResponse — Response object that includes the scan options of an AWS account.
  - `data` AwsScanOptionsData — Single AWS Scan Options entry.
    - `attributes` AwsScanOptionsAttributes — Attributes for the AWS scan options.
      - `compliance_host` boolean — Indicates whether host compliance scanning is enabled.
      - `lambda` boolean — Indicates if scanning of Lambda functions is enabled.
      - `sensitive_data` boolean — Indicates if scanning for sensitive data is enabled.
      - `vuln_containers_os` boolean — Indicates if scanning for vulnerabilities in containers is enabled.
      - `vuln_host_os` boolean — Indicates if scanning for vulnerabilities in hosts is enabled.
    - `id` string — The ID of the AWS account.
    - `type` 'aws_scan_options' — The type of the resource. The value should always be `aws_scan_options`.

## Other responses

- `400` — Bad Request
- `403` — Not Authorized
- `409` — Conflict
- `429` — Too many requests

---

[API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)