--- title: "List Scanning Groups" method: GET path: "/api/v2/sensitive-data-scanner/config" tags: ["Sensitive Data Scanner"] --- # List Scanning Groups `GET /api/v2/sensitive-data-scanner/config` List all the Scanning groups in your organization. ## Response `200` OK - SensitiveDataScannerGetConfigResponse — Get all groups response. - `data` SensitiveDataScannerGetConfigResponseData — Response data related to the scanning groups. - `attributes` object — Attributes of the Sensitive Data configuration. - `id` string — ID of the configuration. - `relationships` SensitiveDataScannerConfigurationRelationships — Relationships of the configuration. - `groups` SensitiveDataScannerGroupList — List of groups, ordered. - `data` SensitiveDataScannerGroupItem[] — List of groups. The order is important. - `id` string — ID of the group. - `type` 'sensitive_data_scanner_group' — Sensitive Data Scanner group type. - `type` 'sensitive_data_scanner_configuration' — Sensitive Data Scanner configuration type. - `included` SensitiveDataScannerGetConfigIncludedItem[] — Included objects from relationships. - union — An object related to the configuration. - SensitiveDataScannerRuleIncludedItem — A Scanning Rule included item. - `attributes` SensitiveDataScannerRuleAttributes — Attributes of the Sensitive Data Scanner rule. - `description` string — Description of the rule. - `excluded_namespaces` string[] — Attributes excluded from the scan. If namespaces is provided, it has to be a sub-path of the namespaces array. - `included_keyword_configuration` SensitiveDataScannerIncludedKeywordConfiguration — Object defining a set of keywords and a number of characters that help reduce noise. You can provide a list of keywords you would like to check within a defined proximity of the matching pattern. If any of the keywords are found within the proximity check, the match is kept. If none are found, the match is discarded. - `character_count` integer, required — The number of characters behind a match detected by Sensitive Data Scanner to look for the keywords defined. `character_count` should be greater than the maximum length of a keyword defined for a rule. - `keywords` string[], required — Keyword list that will be checked during scanning in order to validate a match. The number of keywords in the list must be less than or equal to 30. - `use_recommended_keywords` boolean — Should the rule use the underlying standard pattern keyword configuration. If set to `true`, the rule must be tied to a standard pattern. If set to `false`, the specified keywords and `character_count` are applied. - `is_enabled` boolean — Whether or not the rule is enabled. - `name` string — Name of the rule. - `namespaces` string[] — Attributes included in the scan. If namespaces is empty or missing, all attributes except excluded_namespaces are scanned. If both are missing the whole event is scanned. - `pattern` string — Not included if there is a relationship to a standard pattern. - `priority` integer — Integer from 1 (high) to 5 (low) indicating rule issue severity. - `suppressions` SensitiveDataScannerSuppressions — Object describing the suppressions for a rule. There are three types of suppressions, `starts_with`, `ends_with`, and `exact_match`. Suppressed matches are not obfuscated, counted in metrics, or displayed in the Findings page. - `ends_with` string[] — List of strings to use for suppression of matches ending with these strings. - `exact_match` string[] — List of strings to use for suppression of matches exactly matching these strings. - `starts_with` string[] — List of strings to use for suppression of matches starting with these strings. - `tags` string[] — List of tags. - `text_replacement` SensitiveDataScannerTextReplacement — Object describing how the scanned event will be replaced. - `number_of_chars` integer — Required if type == 'partial_replacement_from_beginning' or 'partial_replacement_from_end'. It must be > 0. - `replacement_string` string — Required if type == 'replacement_string'. - `should_save_match` boolean — Only valid when type == `replacement_string`. When enabled, matches can be unmasked in logs by users with ‘Data Scanner Unmask’ permission. As a security best practice, avoid masking for highly-sensitive, long-lived data. - `type` 'none' | 'hash' | 'replacement_string' | 'partial_replacement_from_beginning' | 'partial_replacement_from_end' — Type of the replacement text. None means no replacement. hash means the data will be stubbed. replacement_string means that one can chose a text to replace the data. partial_replacement_from_beginning allows a user to partially replace the data from the beginning, and partial_replacement_from_end on the other hand, allows to replace data from the end. - `id` string — ID of the rule. - `relationships` SensitiveDataScannerRuleRelationships — Relationships of a scanning rule. - `group` SensitiveDataScannerGroupData — A scanning group data. - `data` SensitiveDataScannerGroup — A scanning group. - … - `standard_pattern` SensitiveDataScannerStandardPatternData — A standard pattern. - `data` SensitiveDataScannerStandardPattern — Data containing the standard pattern id. - … - `type` 'sensitive_data_scanner_rule' — Sensitive Data Scanner rule type. - SensitiveDataScannerGroupIncludedItem — A Scanning Group included item. - `attributes` SensitiveDataScannerGroupAttributes — Attributes of the Sensitive Data Scanner group. - `description` string — Description of the group. - `filter` SensitiveDataScannerFilter — Filter for the Scanning Group. - `query` string — Query to filter the events. - `is_enabled` boolean — Whether or not the group is enabled. - `name` string — Name of the group. - `product_list` SensitiveDataScannerProduct[] — List of products the scanning group applies. - `samplings` SensitiveDataScannerSamplings[] — List of sampling rates per product type. - `product` 'logs' | 'rum' | 'events' | 'apm' — Datadog product onto which Sensitive Data Scanner can be activated. - `rate` number, double — Rate at which data in product type will be scanned, as a percentage. - `id` string — ID of the group. - `relationships` SensitiveDataScannerGroupRelationships — Relationships of the group. - `configuration` SensitiveDataScannerConfigurationData — A Sensitive Data Scanner configuration data. - `data` SensitiveDataScannerConfiguration — A Sensitive Data Scanner configuration. - … - `rules` SensitiveDataScannerRuleData — Rules included in the group. - `data` SensitiveDataScannerRule[] — Rules included in the group. The order is important. - … - `type` 'sensitive_data_scanner_group' — Sensitive Data Scanner group type. - `meta` SensitiveDataScannerMeta — Meta response containing information about the API. - `count_limit` integer — Maximum number of scanning rules allowed for the org. - `group_count_limit` integer — Maximum number of scanning groups allowed for the org. - `has_highlight_enabled` boolean — (Deprecated) Whether or not scanned events are highlighted in Logs or RUM for the org. - `has_multi_pass_enabled` boolean — (Deprecated) Whether or not scanned events have multi-pass enabled. - `is_pci_compliant` boolean — Whether or not the org is compliant to the payment card industry standard. - `version` integer — Version of the API. ## Other responses - `400` — Bad Request - `403` — Authentication Error - `429` — Too many requests --- [API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)