skills.rest
lauhon
lauhonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

agentless-scanning

Configure and manage Datadog Agentless Scanning for AWS and Azure cloud resources.

5|2|Updated Mar 9, 2026
Search Tags:#aws#api#azure#cloud security#datadog#vulnerability scanning#agentless scanning
One-click install
npx skills add https://github.com/lauhon/pi --skill agentless-scanning-lauhon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agentless-scanning
Source: https://github.com/lauhon/pi/tree/main/skills/agentless-scanning
Command: npx skills add https://github.com/lauhon/pi --skill agentless-scanning-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security teams need visibility into vulnerabilities and sensitive data across cloud infrastructure without installing agents on every host, container, or Lambda function. This Skill provides complete operational guidance for the Datadog Agentless Scanning API, covering account activation, scan configuration, and on-demand scanning for AWS and Azure. ## Core Features & Use Cases - AWS & Azure Scan Configuration: Create, read, update, and delete scan options for AWS accounts and Azure subscriptions, controlling Lambda, sensitive data, container, and host OS vulnerability scanning. - On-Demand Scanning: Trigger high-priority scans of specific AWS resources (EC2, Lambda, AMI, ECR, RDS, S3) and monitor task status for incident response and remediation validation. - Use Case: During a security incident, trigger an on-demand scan of a suspicious EC2 instance, poll the task status until completion, and audit scan coverage across all accounts to confirm no gaps in protection. ## Quick Start Use the agentless-scanning skill to activate full agentless scanning for AWS account 123456789012 with Lambda, sensitive data, container, and host vulnerability scanning enabled.

Frequently Asked Questions about agentless-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enable Datadog agentless scanning for an AWS account?▼

Send a POST request to /api/v2/agentless_scanning/accounts/aws with the account ID and scan options for lambda, sensitive_data, vuln_containers_os, and vuln_host_os. You need DD_API_KEY and DD_APP_KEY headers with org_management permission.

How do I trigger an on-demand scan of an AWS resource?▼

POST to /api/v2/agentless_scanning/ondemand/aws with the resource ARN in the request body. Supported resources include EC2 instances, Lambda functions, AMIs, ECR repositories, RDS databases, and S3 buckets.

Does Datadog agentless scanning support Azure subscriptions?▼

Yes, Azure subscriptions are supported through /api/v2/agentless_scanning/accounts/azure endpoints. Azure scan options cover container vulnerability scanning and host OS vulnerability scanning, but not Lambda or sensitive data scanning.

Why is my on-demand scan task showing ABORTED status?▼

ABORTED status means the scan failed due to technical issues such as the resource not being found, insufficient IAM permissions, or no scanner configured for that account or region. Verify the resource exists and the agentless scanning infrastructure is deployed.

What permissions are required for the agentless scanning API?▼

Read operations require security_monitoring_findings_read, creating on-demand tasks requires security_monitoring_findings_write, and creating, updating, or deleting scan options requires org_management permission on the application key.

What is the difference between periodic and on-demand scanning?▼

Periodic scanning runs automatically on configured accounts for continuous vulnerability detection and compliance monitoring. On-demand scanning triggers immediate high-priority scans of specific resources, suited for incident response and remediation validation.

Related Skills

Explore More Software Engineering Skills→
alexmaruccialexmarucci

agentless-scanning

Manage Datadog Agentless Scanning for AWS and Azure accounts.

Community
Advanced
dandyedandye
85

cloud-vulnerability-triage

Triages SCC vulnerability findings with GTI enrichment and SIEM exploitation checks.

Community
Advanced
alexmaruccialexmarucci

security-posture-management

Manage cloud security posture via Datadog CSPM, Vulnerability Management, and Security Findings APIs.

Community
Advanced
alexmaruccialexmarucci

fleet-automation

Automate Datadog Agent fleet management tasks via the Fleet Automation API.

Community
Advanced