datadog_api_client 1.0.0 → 1.4.0

data/data/v2/openapi.yaml

@@ -95,13 +95,22 @@ components:
       required: false
       schema:
         type: string
-    ApplicationKeyId:
+    ApplicationKeyID:
       description: The ID of the application key.
       in: path
       name: app_key_id
       required: true
       schema:
         type: string
+    ApplicationKeyIncludeParameter:
+      description: Resource path for related resources to include in the response.
+        Only `owned_by` is supported.
+      in: query
+      name: include
+      required: false
+      schema:
+        example: owned_by
+        type: string
     ApplicationKeysSortParameter:
       description: 'Application key attribute used to sort results. Sort order is
         ascending
@@ -207,6 +216,7 @@ components:
       required: false
       schema:
         default: 0
+        example: 0
         format: int64
         type: integer
     PageOffset:
@@ -216,6 +226,7 @@ components:
       required: false
       schema:
         default: 0
+        example: 0
         format: int64
         type: integer
     PageSize:
@@ -225,6 +236,7 @@ components:
       required: false
       schema:
         default: 10
+        example: 10
         format: int64
         type: integer
     RoleID:
@@ -234,6 +246,13 @@ components:
       required: true
       schema:
         type: string
+    SecurityFilterID:
+      description: The ID of the security filter.
+      in: path
+      name: security_filter_id
+      required: true
+      schema:
+        type: string
     SecurityMonitoringRuleID:
       description: The ID of the rule.
       in: path
@@ -241,12 +260,21 @@ components:
       required: true
       schema:
         type: string
+    ServiceAccountID:
+      description: The ID of the service account.
+      in: path
+      name: service_account_id
+      required: true
+      schema:
+        example: 00000000-0000-0000-0000-000000000000
+        type: string
     UserID:
       description: The ID of the user.
       in: path
       name: user_id
       required: true
       schema:
+        example: 00000000-0000-0000-0000-000000000000
         type: string
   requestBodies: {}
   responses:
@@ -476,7 +504,7 @@ components:
     ApplicationKeyRelationships:
       description: Resources related to the application key.
       properties:
-        created_by:
+        owned_by:
           $ref: '#/components/schemas/RelationshipToUser'
       type: object
     ApplicationKeyResponse:
@@ -835,7 +863,7 @@ components:
               type: dropdown
               value: SEV-5
           type: object
-        initial_timeline_cells:
+        initial_cells:
           description: An array of initial timeline cells to be placed at the beginning
             of the incident timeline.
           items:
@@ -845,9 +873,7 @@ components:
           description: Notification handles that will be notified of the incident
             at creation.
           items:
-            description: A notification handle that will be notified at incident creation.
-            example: '@test.user@test.com'
-            type: string
+            $ref: '#/components/schemas/IncidentNotificationHandle'
           type: array
         title:
           description: The title of the incident, which summarizes what happened.
@@ -910,6 +936,7 @@ components:
             description: A value which has been selected for the parent field.
             example: '1.1'
             type: string
+          nullable: true
           type: array
       type: object
     IncidentFieldAttributesSingleValue:
@@ -920,6 +947,7 @@ components:
         value:
           description: The single value selected for this field.
           example: SEV-1
+          nullable: true
           type: string
       type: object
     IncidentFieldAttributesSingleValueType:
@@ -949,14 +977,26 @@ components:
       - METRICTAG
       - AUTOCOMPLETE
     IncidentIntegrationMetadataType:
-      default: incident_integration_metadata
+      default: incident_integrations
       description: Integration metadata resource type.
       enum:
-      - incident_integration_metadata
-      example: incident_integration_metadata
+      - incident_integrations
+      example: incident_integrations
       type: string
       x-enum-varnames:
-      - INCIDENT_INTEGRATION_METADATA
+      - INCIDENT_INTEGRATIONS
+    IncidentNotificationHandle:
+      description: A notification handle that will be notified at incident creation.
+      properties:
+        display_name:
+          description: The name of the notified handle.
+          example: Jane Doe
+          type: string
+        handle:
+          description: The email address used for the notification.
+          example: '@test.user@test.com'
+          type: string
+      type: object
     IncidentPostmortemType:
       default: incident_postmortems
       description: Incident postmortem resource type.
@@ -1044,10 +1084,8 @@ components:
           description: Notification handles that will be notified of the incident
             during update.
           items:
-            description: A notification handle that will be notified during incident
-              update.
-            example: '@test.user@test.com'
-            type: string
+            $ref: '#/components/schemas/IncidentNotificationHandle'
+          nullable: true
           type: array
         postmortem_id:
           description: The UUID of the postmortem object attached to the incident.
@@ -1582,10 +1620,7 @@ components:
           description: Notification handles that will be notified of the incident
             during update.
           items:
-            description: A notification handle that will be notified during incident
-              update.
-            example: '@test.user@test.com'
-            type: string
+            $ref: '#/components/schemas/IncidentNotificationHandle'
           type: array
         resolved:
           description: Timestamp when the incident's state was set to resolved.
@@ -1674,9 +1709,9 @@ components:
               integrations:
                 data:
                 - id: 00000000-0000-0000-0000-000000000000
-                  type: incident_integration_metadata
+                  type: incident_integrations
                 - id: 00000000-0000-0000-0000-000000000000
-                  type: incident_integration_metadata
+                  type: incident_integrations
               last_modified_by_user:
                 data:
                   id: 00000000-0000-0000-0000-000000000000
@@ -1718,9 +1753,9 @@ components:
               integrations:
                 data:
                 - id: 00000000-0000-0000-0000-000000000000
-                  type: incident_integration_metadata
+                  type: incident_integrations
                 - id: 00000000-0000-0000-0000-000000000000
-                  type: incident_integration_metadata
+                  type: incident_integrations
               last_modified_by_user:
                 data:
                   id: 00000000-0000-0000-0000-000000000000
@@ -3328,6 +3363,17 @@ components:
           example: Application Key for submitting metrics
           type: string
       type: object
+    PartialApplicationKeyResponse:
+      description: Response for retrieving a partial application key.
+      properties:
+        data:
+          $ref: '#/components/schemas/PartialApplicationKey'
+        included:
+          description: Array of objects related to the application key.
+          items:
+            $ref: '#/components/schemas/ApplicationKeyResponseIncludedItem'
+          type: array
+      type: object
     Permission:
       description: Permission object.
       properties:
@@ -3484,7 +3530,7 @@ components:
       description: A relationship reference for an integration metadata object.
       example:
         id: 00000000-0000-0000-0000-000000000000
-        type: incident_integration_metadata
+        type: incident_integrations
       properties:
         id:
           description: A unique identifier that represents the integration metadata.
@@ -3501,17 +3547,17 @@ components:
       example:
         data:
         - id: 00000000-0000-0000-0000-000000000000
-          type: incident_integration_metadata
+          type: incident_integrations
         - id: 00000000-0000-0000-0000-000000000000
-          type: incident_integration_metadata
+          type: incident_integrations
       properties:
         data:
           description: The integration metadata relationship array
           example:
           - id: 00000000-0000-0000-0000-000000000000
-            type: incident_integration_metadata
+            type: incident_integrations
           - id: 00000000-0000-0000-0000-000000000000
-            type: incident_integration_metadata
+            type: incident_integrations
           items:
             $ref: '#/components/schemas/RelationshipToIncidentIntegrationMetadataData'
           type: array
@@ -3881,6 +3927,231 @@ components:
       type: string
       x-enum-varnames:
       - ROLES
+    SecurityFilter:
+      description: The security filter's properties.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/SecurityFilterAttributes'
+        id:
+          $ref: '#/components/schemas/SecurityFilterID'
+        type:
+          $ref: '#/components/schemas/SecurityFilterType'
+      type: object
+    SecurityFilterAttributes:
+      description: The object describing a security filter.
+      properties:
+        exclusion_filters:
+          description: The list of exclusion filters applied in this security filter.
+          items:
+            $ref: '#/components/schemas/SecurityFilterExclusionFilterResponse'
+          type: array
+        filtered_data_type:
+          $ref: '#/components/schemas/SecurityFilterFilteredDataType'
+        is_builtin:
+          description: Whether the security filter is the built-in filter.
+          example: false
+          type: boolean
+        is_enabled:
+          description: Whether the security filter is enabled.
+          example: false
+          type: boolean
+        name:
+          description: The security filter name.
+          example: Custom security filter
+          type: string
+        query:
+          description: The security filter query. Logs accepted by this query will
+            be accepted by this filter.
+          example: service:api
+          type: string
+        version:
+          description: The version of the security filter.
+          example: 1
+          format: int32
+          maximum: 2147483647
+          type: integer
+      type: object
+    SecurityFilterCreateAttributes:
+      description: Object containing the attributes of the security filter to be created.
+      properties:
+        exclusion_filters:
+          description: Exclusion filters to exclude some logs from the security filter.
+          example:
+          - name: Exclude staging
+            query: source:staging
+          items:
+            $ref: '#/components/schemas/SecurityFilterExclusionFilter'
+          type: array
+        filtered_data_type:
+          $ref: '#/components/schemas/SecurityFilterFilteredDataType'
+        is_enabled:
+          description: Whether the security filter is enabled.
+          example: true
+          type: boolean
+        name:
+          description: The name of the security filter.
+          example: Custom security filter
+          type: string
+        query:
+          description: The query of the security filter.
+          example: service:api
+          type: string
+      required:
+      - name
+      - query
+      - exclusion_filters
+      - filtered_data_type
+      - is_enabled
+      type: object
+    SecurityFilterCreateData:
+      description: Object for a single security filter.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/SecurityFilterCreateAttributes'
+        type:
+          $ref: '#/components/schemas/SecurityFilterType'
+      required:
+      - type
+      - attributes
+      type: object
+    SecurityFilterCreateRequest:
+      description: Request object that includes the security filter that you would
+        like to create.
+      properties:
+        data:
+          $ref: '#/components/schemas/SecurityFilterCreateData'
+      required:
+      - data
+      type: object
+    SecurityFilterExclusionFilter:
+      description: Exclusion filter for the security filter.
+      example:
+        name: Exclude staging
+        query: source:staging
+      properties:
+        name:
+          description: Exclusion filter name.
+          example: Exclude staging
+          type: string
+        query:
+          description: Exclusion filter query. Logs that match this query are excluded
+            from the security filter.
+          example: source:staging
+          type: string
+      required:
+      - name
+      - query
+      type: object
+    SecurityFilterExclusionFilterResponse:
+      description: A single exclusion filter.
+      properties:
+        name:
+          description: The exclusion filter name.
+          example: Exclude staging
+          type: string
+        query:
+          description: The exclusion filter query.
+          example: source:staging
+          type: string
+      type: object
+    SecurityFilterFilteredDataType:
+      description: The filtered data type.
+      enum:
+      - logs
+      example: logs
+      type: string
+      x-enum-varnames:
+      - LOGS
+    SecurityFilterID:
+      description: The ID of the security filter.
+      example: 3dd-0uc-h1s
+      type: string
+    SecurityFilterMeta:
+      description: Optional metadata associated to the response.
+      properties:
+        warning:
+          description: A warning message.
+          example: All the security filters are disabled. As a result, no logs are
+            being analyzed.
+          type: string
+      type: object
+    SecurityFilterResponse:
+      description: Response object which includes a single security filter.
+      properties:
+        data:
+          $ref: '#/components/schemas/SecurityFilter'
+        meta:
+          $ref: '#/components/schemas/SecurityFilterMeta'
+      type: object
+    SecurityFilterType:
+      default: security_filters
+      description: The type of the resource. The value should always be `security_filters`.
+      enum:
+      - security_filters
+      example: security_filters
+      type: string
+      x-enum-varnames:
+      - SECURITY_FILTERS
+    SecurityFilterUpdateAttributes:
+      description: The security filters properties to be updated.
+      properties:
+        exclusion_filters:
+          description: Exclusion filters to exclude some logs from the security filter.
+          example: []
+          items:
+            $ref: '#/components/schemas/SecurityFilterExclusionFilter'
+          type: array
+        filtered_data_type:
+          $ref: '#/components/schemas/SecurityFilterFilteredDataType'
+        is_enabled:
+          description: Whether the security filter is enabled.
+          example: true
+          type: boolean
+        name:
+          description: The name of the security filter.
+          example: Custom security filter
+          type: string
+        query:
+          description: The query of the security filter.
+          example: service:api
+          type: string
+        version:
+          description: The version of the security filter to update.
+          example: 1
+          format: int32
+          maximum: 2147483647
+          type: integer
+      type: object
+    SecurityFilterUpdateData:
+      description: The new security filter properties.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/SecurityFilterUpdateAttributes'
+        type:
+          $ref: '#/components/schemas/SecurityFilterType'
+      required:
+      - type
+      - attributes
+      type: object
+    SecurityFilterUpdateRequest:
+      description: The new security filter body.
+      properties:
+        data:
+          $ref: '#/components/schemas/SecurityFilterUpdateData'
+      required:
+      - data
+      type: object
+    SecurityFiltersResponse:
+      description: All the available security filters objects.
+      properties:
+        data:
+          description: A list of security filters objects.
+          items:
+            $ref: '#/components/schemas/SecurityFilter'
+          type: array
+        meta:
+          $ref: '#/components/schemas/SecurityFilterMeta'
+      type: object
     SecurityMonitoringFilter:
       description: The rule's suppression filter.
       properties:
@@ -3903,7 +4174,7 @@ components:
       description: List of rules.
       properties:
         data:
-          description: TODO.
+          description: Array containing the list of rules.
           items:
             $ref: '#/components/schemas/SecurityMonitoringRuleResponse'
           type: array
@@ -3969,6 +4240,11 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringFilter'
           type: array
+        hasExtendedTitle:
+          description: Whether the notifications include the triggering group-by values
+            in their title.
+          example: true
+          type: boolean
         isEnabled:
           description: Whether the rule is enabled.
           example: true
@@ -3979,7 +4255,7 @@ components:
           type: string
         name:
           description: The name of the rule.
-          example: ''
+          example: My security monitoring rule.
           type: string
         options:
           $ref: '#/components/schemas/SecurityMonitoringRuleOptions'
@@ -3998,6 +4274,8 @@ components:
             description: Tag.
             type: string
           type: array
+        type:
+          $ref: '#/components/schemas/SecurityMonitoringRuleTypeCreate'
       required:
       - name
       - isEnabled
@@ -4043,8 +4321,8 @@ components:
       - ONE_HOUR
       - TWO_HOURS
     SecurityMonitoringRuleKeepAlive:
-      description: "Once a signal is generated, the signal will remain \u201Copen\u201D\
-        \ if a case is matched at least once within\nthis keep alive window."
+      description: "Once a signal is generated, the signal will remain \u201Copen\u201D
+        if a case is matched at least once within\nthis keep alive window."
       enum:
       - 0
       - 60
@@ -4070,9 +4348,9 @@ components:
       - THREE_HOURS
       - SIX_HOURS
     SecurityMonitoringRuleMaxSignalDuration:
-      description: "A signal will \u201Cclose\u201D regardless of the query being\
-        \ matched once the time exceeds the maximum duration.\nThis time is calculated\
-        \ from the first seen timestamp."
+      description: "A signal will \u201Cclose\u201D regardless of the query being
+        matched once the time exceeds the maximum duration.\nThis time is calculated
+        from the first seen timestamp."
       enum:
       - 0
       - 60
@@ -4232,13 +4510,13 @@ components:
           type: string
         query:
           description: Query to run on logs.
-          example: a < 3
+          example: a > 3
           type: string
       required:
       - query
       type: object
     SecurityMonitoringRuleResponse:
-      description: Detection rule.
+      description: Rule.
       properties:
         cases:
           description: Cases for generating signals.
@@ -4259,6 +4537,10 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringFilter'
           type: array
+        hasExtendedTitle:
+          description: Whether the notifications include the triggering group-by values
+            in their title.
+          type: boolean
         id:
           description: The ID of the rule.
           type: string
@@ -4290,6 +4572,12 @@ components:
             description: Tag.
             type: string
           type: array
+        type:
+          $ref: '#/components/schemas/SecurityMonitoringRuleTypeRead'
+        updateAuthorId:
+          description: User ID of the user who updated the rule.
+          format: int64
+          type: integer
         version:
           description: The version of the rule.
           format: int64
@@ -4302,6 +4590,7 @@ components:
       - medium
       - high
       - critical
+      example: critical
       type: string
       x-enum-varnames:
       - INFO
@@ -4309,6 +4598,28 @@ components:
       - MEDIUM
       - HIGH
       - CRITICAL
+    SecurityMonitoringRuleTypeCreate:
+      description: The rule type.
+      enum:
+      - log_detection
+      - workload_security
+      type: string
+      x-enum-varnames:
+      - LOG_DETECTION
+      - WORKLOAD_SECURITY
+    SecurityMonitoringRuleTypeRead:
+      description: The rule type.
+      enum:
+      - log_detection
+      - infrastructure_configuration
+      - workload_security
+      - cloud_configuration
+      type: string
+      x-enum-varnames:
+      - LOG_DETECTION
+      - INFRASTRUCTURE_CONFIGURATION
+      - WORKLOAD_SECURITY
+      - CLOUD_CONFIGURATION
     SecurityMonitoringRuleUpdatePayload:
       description: Update an existing rule.
       properties:
@@ -4323,6 +4634,11 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringFilter'
           type: array
+        hasExtendedTitle:
+          description: Whether the notifications include the triggering group-by values
+            in their title.
+          example: true
+          type: boolean
         isEnabled:
           description: Whether the rule is enabled.
           type: boolean
@@ -4345,6 +4661,12 @@ components:
             description: Tag.
             type: string
           type: array
+        version:
+          description: The version of the rule being updated.
+          example: 1
+          format: int32
+          maximum: 2147483647
+          type: integer
       type: object
     SecurityMonitoringRuntimeAgentRule:
       description: The Agent rule.
@@ -4506,6 +4828,48 @@ components:
       x-enum-varnames:
       - TIMESTAMP_ASCENDING
       - TIMESTAMP_DESCENDING
+    ServiceAccountCreateAttributes:
+      description: Attributes of the created user.
+      properties:
+        email:
+          description: The email of the user.
+          example: jane.doe@example.com
+          type: string
+        name:
+          description: The name of the user.
+          type: string
+        service_account:
+          description: Whether the user is a service account. Must be true.
+          example: true
+          type: boolean
+        title:
+          description: The title of the user.
+          type: string
+      required:
+      - email
+      - service_account
+      type: object
+    ServiceAccountCreateData:
+      description: Object to create a service account User.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/ServiceAccountCreateAttributes'
+        relationships:
+          $ref: '#/components/schemas/UserRelationships'
+        type:
+          $ref: '#/components/schemas/UsersType'
+      required:
+      - attributes
+      - type
+      type: object
+    ServiceAccountCreateRequest:
+      description: Create a service account.
+      properties:
+        data:
+          $ref: '#/components/schemas/ServiceAccountCreateData'
+      required:
+      - data
+      type: object
     User:
       description: User object returned by the API.
       properties:
@@ -4544,12 +4908,17 @@ components:
           type: string
         name:
           description: Name of the user.
+          nullable: true
           type: string
+        service_account:
+          description: Whether the user is a service account.
+          type: boolean
         status:
           description: Status of the user.
           type: string
         title:
           description: Title of the user.
+          nullable: true
           type: string
         verified:
           description: Whether the user is verified.
@@ -4776,6 +5145,32 @@ components:
       x-enum-varnames:
       - USERS
   securitySchemes:
+    AuthZ:
+      description: This API uses OAuth 2 with the implicit grant flow.
+      flows:
+        authorizationCode:
+          authorizationUrl: /oauth2/v1/authorize
+          scopes:
+            dashboards_public_share: The ability to share dashboards externally.
+            dashboards_read: The ability to view dashboards.
+            dashboards_write: The ability to create and change dashboards.
+            events_read: The ability to read events data.
+            incident_read: The ability to view incidents in Datadog.
+            incident_settings_write: The ability to configure incident settings.
+            incident_write: The ability to create, view, and manage incidents in Datadog.
+            metrics_read: The ability to view custom metrics.
+            security_monitoring_filters_read: The ability to read Security Filters.
+            security_monitoring_filters_write: The ability to create, edit and delete
+              Security Filters.
+            security_monitoring_rules_read: The ability to read Detection rules.
+            security_monitoring_rules_write: The ability to create and edit Detection
+              rules.
+            security_monitoring_signals_read: The ability to view Security signals.
+            user_access_invite: Allows users to invite other users to your organization.
+            user_access_manage: Grants the permission to disable users, manage user
+              roles and SAML-to-role mappings.
+          tokenUrl: /oauth2/v1/token
+      type: oauth2
     apiKeyAuth:
       description: Your Datadog API Key.
       in: header
@@ -4872,8 +5267,8 @@ paths:
         api_key:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{\
-              \ unique }}\"\n    },\n    \"type\": \"api_keys\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{
+              unique }}\"\n    },\n    \"type\": \"api_keys\"\n  }\n}"
           step: there is a valid "api_key" in the system
       x-undo:
         operationId: DeleteAPIKey
@@ -5025,7 +5420,7 @@ paths:
       description: Delete an application key
       operationId: DeleteApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       responses:
         '204':
           description: No Content
@@ -5047,11 +5442,47 @@ paths:
       x-codegen-request-body-name: body
       x-undo:
         type: idempotent
+    get:
+      description: Get an application key for your org.
+      operationId: GetApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ApplicationKeyID'
+      - $ref: '#/components/parameters/ApplicationKeyIncludeParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ApplicationKeyResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+      summary: Get an application key
+      tags:
+      - Key Management
+      x-undo:
+        type: safe
     patch:
       description: Edit an application key
       operationId: UpdateApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       requestBody:
         content:
           application/json:
@@ -5166,8 +5597,8 @@ paths:
         application_key:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{\
-              \ unique }}\"\n    },\n    \"type\": \"application_keys\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{
+              unique }}\"\n    },\n    \"type\": \"application_keys\"\n  }\n}"
           step: there is a valid "application_key" in the system
       x-undo:
         operationId: DeleteCurrentUserApplicationKey
@@ -5180,7 +5611,7 @@ paths:
       description: Delete an application key owned by current user
       operationId: DeleteCurrentUserApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       responses:
         '204':
           description: No Content
@@ -5205,7 +5636,7 @@ paths:
       description: Get an application key owned by current user
       operationId: GetCurrentUserApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       responses:
         '200':
           content:
@@ -5234,7 +5665,7 @@ paths:
       description: Edit an application key owned by current user
       operationId: UpdateCurrentUserApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       requestBody:
         content:
           application/json:
@@ -5353,6 +5784,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - dashboards_read
       summary: Get items of a Dashboard List
       tags:
       - Dashboard Lists
@@ -5482,6 +5918,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get a list of incidents
       tags:
       - Incidents
@@ -5515,6 +5956,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_write
       summary: Create an incident
       tags:
       - Incidents
@@ -5523,9 +5969,9 @@ paths:
         incident:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"title\": \"{{\
-              \ unique }}\",\n      \"customer_impacted\": false\n     },\n     \"\
-              type\": \"incidents\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"title\": \"{{
+              unique }}\",\n      \"customer_impacted\": false\n     },\n     \"type\":
+              \"incidents\"\n  }\n}"
           step: there is a valid "incident" in the system
       x-undo:
         operationId: DeleteIncident
@@ -5553,6 +5999,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_write
       summary: Delete an existing incident
       tags:
       - Incidents
@@ -5582,6 +6033,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get the details of an incident
       tags:
       - Incidents
@@ -5618,6 +6074,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_write
       summary: Update an existing incident
       tags:
       - Incidents
@@ -6086,10 +6547,10 @@ paths:
         logs_metric:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"id\": \"{{ unique }}\",\n    \"attributes\"\
-              : {\n      \"filter\": {\n        \"query\": \"source:{{ unique }}\"\
-              \n      },\n      \"compute\": {\n        \"aggregation_type\": \"count\"\
-              \n      }\n    },\n    \"type\": \"logs_metrics\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"id\": \"{{ unique }}\",\n    \"attributes\":
+              {\n      \"filter\": {\n        \"query\": \"source:{{ unique }}\"\n
+              \     },\n      \"compute\": {\n        \"aggregation_type\": \"count\"\n
+              \     }\n    },\n    \"type\": \"logs_metrics\"\n  }\n}"
           step: there is a valid "logs_metric" in the system
       x-menu-order: 2
       x-undo:
@@ -6403,16 +6864,21 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Too Many Requests
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - metrics_read
       summary: List tag configurations
       tags:
       - Metrics
       x-menu-order: 5
       x-undo:
         type: safe
-      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types\
-        \ is only accessible for Metrics without Limits&trade; beta customers.\nIf\
-        \ you\u2019re interested in Metrics without Limits&trade;, please contact\
-        \ your Customer Success Manager.**"
+      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types
+        is only accessible for Metrics without Limits&trade; beta customers.\nIf you\u2019re
+        interested in Metrics without Limits&trade;, please contact your Customer
+        Success Manager.**"
   /api/v2/metrics/{metric_name}/all-tags:
     get:
       description: View indexed tag key-value pairs for a given metric name.
@@ -6450,6 +6916,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Too Many Requests
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List tags by metric name
       tags:
       - Metrics
@@ -6491,10 +6961,10 @@ paths:
       x-menu-order: 4
       x-undo:
         type: idempotent
-      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types\
-        \ is only accessible for Metrics without Limits&trade; beta customers.\nIf\
-        \ you\u2019re interested in Metrics without Limits&trade;, please contact\
-        \ your Customer Success Manager.**"
+      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types
+        is only accessible for Metrics without Limits&trade; beta customers.\nIf you\u2019re
+        interested in Metrics without Limits&trade;, please contact your Customer
+        Success Manager.**"
     get:
       description: Returns the tag configuration for the given metric name.
       operationId: ListTagConfigurationByName
@@ -6531,10 +7001,10 @@ paths:
       x-menu-order: 2
       x-undo:
         type: safe
-      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types\
-        \ is only accessible for Metrics without Limits&trade; beta customers.\nIf\
-        \ you\u2019re interested in Metrics without Limits&trade;, please contact\
-        \ your Customer Success Manager.**"
+      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types
+        is only accessible for Metrics without Limits&trade; beta customers.\nIf you\u2019re
+        interested in Metrics without Limits&trade;, please contact your Customer
+        Success Manager.**"
     patch:
       description: 'Update the tag configuration of a metric or percentile aggregations
         of a distribution metric. Can only be used with
@@ -6587,10 +7057,10 @@ paths:
       x-menu-order: 3
       x-undo:
         type: idempotent
-      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types\
-        \ is only accessible for Metrics without Limits&trade; beta customers.\nIf\
-        \ you\u2019re interested in Metrics without Limits&trade;, please contact\
-        \ your Customer Success Manager.**"
+      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types
+        is only accessible for Metrics without Limits&trade; beta customers.\nIf you\u2019re
+        interested in Metrics without Limits&trade;, please contact your Customer
+        Success Manager.**"
     post:
       description: 'Create and define a list of queryable tag keys for an existing
         count/gauge/rate/distribution metric. Optionally, include percentile aggregations
@@ -6648,10 +7118,10 @@ paths:
           - name: metric_name
             value: '"{{ unique_alnum }}"'
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"tags\":[\"app\"\
-              , \"datacenter\", \"{{ unique_alnum }}\"],\n      \"metric_type\":\"\
-              distribution\"\n     },\n     \"type\": \"manage_tags\",\n     \"id\"\
-              : \"{{ unique_alnum }}\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"tags\":[\"app\",
+              \"datacenter\", \"{{ unique_alnum }}\"],\n      \"metric_type\":\"distribution\"\n
+              \    },\n     \"type\": \"manage_tags\",\n     \"id\": \"{{ unique_alnum
+              }}\"\n  }\n}"
           step: there is a valid "metric_tag_configuration" in the system
       x-menu-order: 1
       x-undo:
@@ -6660,10 +7130,10 @@ paths:
         - name: metric_name
           source: data.id
         type: unsafe
-      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types\
-        \ is only accessible for Metrics without Limits&trade; beta customers.\nIf\
-        \ you\u2019re interested in Metrics without Limits&trade;, please contact\
-        \ your Customer Success Manager.**"
+      x-unstable: "**Note: Use of this endpoint for count/gauge/rate metric types
+        is only accessible for Metrics without Limits&trade; beta customers.\nIf you\u2019re
+        interested in Metrics without Limits&trade;, please contact your Customer
+        Success Manager.**"
   /api/v2/metrics/{metric_name}/volumes:
     get:
       description: 'View distinct metrics volumes for the given metric name.
@@ -6711,6 +7181,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Too Many Requests
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List distinct metric volumes by metric name
       tags:
       - Metrics
@@ -6741,6 +7215,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List permissions
       tags:
       - Roles
@@ -6832,6 +7310,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication Error
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get all processes
       tags:
       - Processes
@@ -6876,6 +7358,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List roles
       tags:
       - Roles
@@ -6910,6 +7396,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Create role
       tags:
       - Roles
@@ -6918,8 +7409,8 @@ paths:
         role:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{\
-              \ unique }}\"\n     },\n     \"type\": \"roles\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{
+              unique }}\"\n     },\n     \"type\": \"roles\"\n  }\n}"
           step: there is a valid "role" in the system
       x-menu-order: 2
       x-undo:
@@ -6949,6 +7440,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Delete role
       tags:
       - Roles
@@ -6980,6 +7476,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get a role
       tags:
       - Roles
@@ -7030,6 +7530,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Unprocessable Entity
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Update a role
       tags:
       - Roles
@@ -7074,6 +7579,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Revoke permission
       tags:
       - Roles
@@ -7105,6 +7615,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List permissions for a role
       tags:
       - Roles
@@ -7148,6 +7662,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Grant permission to a role
       tags:
       - Roles
@@ -7158,8 +7677,8 @@ paths:
           - name: role_id
             source: role.data.id
           - name: body
-            value: "{\n  \"data\": {\n    \"id\": \"{{ permission.id }}\",\n    \"\
-              type\": \"{{ permission.type }}\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"id\": \"{{ permission.id }}\",\n    \"type\":
+              \"{{ permission.type }}\"\n  }\n}"
           step: the "permission" is granted to the "role"
       x-menu-order: 7
       x-undo:
@@ -7201,6 +7720,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Remove a user from a role
       tags:
       - Roles
@@ -7252,6 +7776,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get all users of a role
       tags:
       - Roles
@@ -7294,6 +7822,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Add a user to a role
       tags:
       - Roles
@@ -7304,70 +7837,261 @@ paths:
           - name: role_id
             source: role.data.id
           - name: body
-            value: "{\n  \"data\": {\n    \"id\": \"{{ user.data.id }}\",\n    \"\
-              type\": \"{{ user.data.type }}\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"id\": \"{{ user.data.id }}\",\n    \"type\":
+              \"{{ user.data.type }}\"\n  }\n}"
           step: the "user" has the "role"
       x-menu-order: 10
       x-undo:
         type: safe
-  /api/v2/security_monitoring/rules:
+  /api/v2/security_monitoring/configuration/security_filters:
     get:
-      description: List rules.
-      operationId: ListSecurityMonitoringRules
-      parameters:
-      - $ref: '#/components/parameters/PageSize'
-      - $ref: '#/components/parameters/PageNumber'
+      description: Get the list of configured security filters with their definitions.
+      operationId: ListSecurityFilters
       responses:
         '200':
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/SecurityMonitoringListRulesResponse'
+                $ref: '#/components/schemas/SecurityFiltersResponse'
           description: OK
-        '400':
-          $ref: '#/components/responses/BadRequestResponse'
-      summary: List rules
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_read
+      summary: Get all security filters
       tags:
       - Security Monitoring
-      x-menu-order: 1
       x-undo:
         type: safe
     post:
-      description: Create a detection rule.
-      operationId: CreateSecurityMonitoringRule
+      description: 'Create a security filter.
+
+
+        See the [security filter guide](https://docs.datadoghq.com/security_platform/guide/how-to-setup-security-filters-using-security-monitoring-api/)
+
+        for more examples.'
+      operationId: CreateSecurityFilter
       requestBody:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/SecurityMonitoringRuleCreatePayload'
+              $ref: '#/components/schemas/SecurityFilterCreateRequest'
+        description: The definition of the new security filter.
         required: true
       responses:
         '200':
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/SecurityMonitoringRuleResponse'
+                $ref: '#/components/schemas/SecurityFilterResponse'
           description: OK
         '400':
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
-      summary: Create a detection rule
-      tags:
-      - Security Monitoring
-      x-codegen-request-body-name: body
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_write
+      summary: Create a security filter
+      tags:
+      - Security Monitoring
+      x-codegen-request-body-name: body
+      x-given:
+        security_filter:
+          parameters:
+          - name: body
+            value: "{\n  \"data\": {\n    \"type\": \"security_filters\",\n    \"attributes\":
+              {\n      \"name\": \"{{ unique }}\",\n      \"query\": \"service:{{
+              unique_alnum }}\",\n      \"exclusion_filters\":[\n        {\n          \"name\":
+              \"Exclude logs from staging\",\n          \"query\": \"source:staging\"\n
+              \       }\n     ],\n      \"filtered_data_type\":\"logs\",\n      \"is_enabled\":
+              true\n     }\n  }\n}"
+          step: there is a valid "security_filter" in the system
+      x-undo:
+        operationId: DeleteSecurityFilter
+        parameters:
+        - name: security_filter_id
+          source: data.id
+        type: unsafe
+  /api/v2/security_monitoring/configuration/security_filters/{security_filter_id}:
+    delete:
+      description: Delete a specific security filter.
+      operationId: DeleteSecurityFilter
+      parameters:
+      - $ref: '#/components/parameters/SecurityFilterID'
+      responses:
+        '204':
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_write
+      summary: Delete a security filter
+      tags:
+      - Security Monitoring
+      x-undo:
+        type: idempotent
+    get:
+      description: 'Get the details of a specific security filter.
+
+
+        See the [security filter guide](https://docs.datadoghq.com/security_platform/guide/how-to-setup-security-filters-using-security-monitoring-api/)
+
+        for more examples.'
+      operationId: GetSecurityFilter
+      parameters:
+      - $ref: '#/components/parameters/SecurityFilterID'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityFilterResponse'
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_read
+      summary: Get a security filter
+      tags:
+      - Security Monitoring
+      x-undo:
+        type: safe
+    patch:
+      description: 'Update a specific security filter.
+
+        Returns the security filter object when the request is successful.'
+      operationId: UpdateSecurityFilter
+      parameters:
+      - $ref: '#/components/parameters/SecurityFilterID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/SecurityFilterUpdateRequest'
+        description: New definition of the security filter.
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityFilterResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '409':
+          $ref: '#/components/responses/ConcurrentModificationResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_write
+      summary: Update a security filter
+      tags:
+      - Security Monitoring
+      x-codegen-request-body-name: body
+      x-undo:
+        type: idempotent
+  /api/v2/security_monitoring/rules:
+    get:
+      description: List rules.
+      operationId: ListSecurityMonitoringRules
+      parameters:
+      - $ref: '#/components/parameters/PageSize'
+      - $ref: '#/components/parameters/PageNumber'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringListRulesResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_read
+      summary: List rules
+      tags:
+      - Security Monitoring
+      x-menu-order: 1
+      x-undo:
+        type: safe
+    post:
+      description: Create a detection rule.
+      operationId: CreateSecurityMonitoringRule
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/SecurityMonitoringRuleCreatePayload'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringRuleResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_write
+      summary: Create a detection rule
+      tags:
+      - Security Monitoring
+      x-codegen-request-body-name: body
       x-given:
         security_rule:
           parameters:
           - name: body
-            value: "{\n  \"name\": \"{{ unique }}\",\n  \"queries\": [{\n    \"query\"\
-              : \"@test:true\",\n    \"aggregation\": \"count\",\n    \"groupByFields\"\
-              : [],\n    \"distinctFields\": [],\n    \"metric\": \"\"\n  }],\n  \"\
-              filters\": [],\n  \"cases\": [{\n    \"name\": \"\",\n    \"status\"\
-              : \"info\",\n    \"condition\": \"a > 0\",\n    \"notifications\": []\n\
-              \  }],\n  \"options\": {\n    \"evaluationWindow\": 900,\n    \"keepAlive\"\
-              : 3600,\n    \"maxSignalDuration\": 86400\n  },\n  \"message\": \"Test\
-              \ rule\",\n  \"tags\": [],\n  \"isEnabled\": true\n}"
+            value: "{\n  \"name\": \"{{ unique }}\",\n  \"queries\": [{\n    \"query\":
+              \"@test:true\",\n    \"aggregation\": \"count\",\n    \"groupByFields\":
+              [],\n    \"distinctFields\": [],\n    \"metric\": \"\"\n  }],\n  \"filters\":
+              [],\n  \"cases\": [{\n    \"name\": \"\",\n    \"status\": \"info\",\n
+              \   \"condition\": \"a > 0\",\n    \"notifications\": []\n  }],\n  \"options\":
+              {\n    \"evaluationWindow\": 900,\n    \"keepAlive\": 3600,\n    \"maxSignalDuration\":
+              86400\n  },\n  \"message\": \"Test rule\",\n  \"tags\": [],\n  \"isEnabled\":
+              true,\n  \"type\": \"log_detection\"\n}"
           step: there is a valid "security_rule" in the system
       x-menu-order: 2
       x-undo:
@@ -7389,6 +8113,11 @@ paths:
           $ref: '#/components/responses/NotAuthorizedResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_write
       summary: Delete an existing rule
       tags:
       - Security Monitoring
@@ -7409,6 +8138,11 @@ paths:
           description: OK
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_read
       summary: Get a rule's details
       tags:
       - Security Monitoring
@@ -7447,6 +8181,11 @@ paths:
           $ref: '#/components/responses/NotAuthorizedResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_write
       summary: Update an existing rule
       tags:
       - Security Monitoring
@@ -7522,6 +8261,11 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
       summary: Get a quick list of security signals
       tags:
       - Security Monitoring
@@ -7556,6 +8300,11 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
       summary: Get a list of security signals
       tags:
       - Security Monitoring
@@ -7566,6 +8315,250 @@ paths:
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+  /api/v2/service_accounts:
+    post:
+      description: Create a service account for your organization.
+      operationId: CreateServiceAccount
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/ServiceAccountCreateRequest'
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/UserResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Authentication error
+      summary: Create a service account
+      tags:
+      - Users
+      x-codegen-request-body-name: body
+      x-given:
+        service_account_user:
+          parameters:
+          - name: body
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"email\": \"{{
+              unique }}@datadoghq.com\",\n      \"title\": \"user title\",\n      \"service_account\":
+              true\n     },\n     \"type\": \"users\"\n  }\n}"
+          step: there is a valid "service_account_user" in the system
+      x-menu-order: 1
+      x-undo:
+        operationId: DisableUser
+        parameters:
+        - name: user_id
+          source: data.id
+        type: unsafe
+  /api/v2/service_accounts/{service_account_id}/application_keys:
+    get:
+      description: List all application keys available for this service account.
+      operationId: ListServiceAccountApplicationKeys
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/PageSize'
+      - $ref: '#/components/parameters/PageNumber'
+      - $ref: '#/components/parameters/ApplicationKeysSortParameter'
+      - $ref: '#/components/parameters/ApplicationKeyFilterParameter'
+      - $ref: '#/components/parameters/ApplicationKeyFilterCreatedAtStartParameter'
+      - $ref: '#/components/parameters/ApplicationKeyFilterCreatedAtEndParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ListApplicationKeysResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+      summary: List application keys for this service account
+      tags:
+      - Service Accounts
+      x-undo:
+        type: safe
+    post:
+      description: Create an application key for this service account.
+      operationId: CreateServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/ApplicationKeyCreateRequest'
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ApplicationKeyResponse'
+          description: Created
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+      summary: Create an application key for this service account
+      tags:
+      - Service Accounts
+      x-codegen-request-body-name: body
+      x-given:
+        service_account_application_key:
+          parameters:
+          - name: service_account_id
+            value: '"{{ service_account_user.data.id }}"'
+          - name: body
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{
+              unique }}\"\n    },\n    \"type\": \"application_keys\"\n  }\n}"
+          step: there is a valid "service_account_application_key" for "service_account_user"
+      x-undo:
+        operationId: DeleteServiceAccountApplicationKey
+        parameters:
+        - name: app_key_id
+          source: data.id
+        - name: service_account_id
+          source: data.relationships.owned_by.data.id
+        type: unsafe
+  /api/v2/service_accounts/{service_account_id}/application_keys/{app_key_id}:
+    delete:
+      description: Delete an application key owned by this service account.
+      operationId: DeleteServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/ApplicationKeyID'
+      responses:
+        '204':
+          description: No Content
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+      summary: Delete an application key for this service account
+      tags:
+      - Service Accounts
+      x-menu-order: 3
+      x-undo:
+        type: idempotent
+    get:
+      description: Get an application key owned by this service account.
+      operationId: GetServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/ApplicationKeyID'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PartialApplicationKeyResponse'
+          description: OK
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+      summary: Get one application key for this service account
+      tags:
+      - Service Accounts
+      x-menu-order: 1
+      x-undo:
+        type: safe
+    patch:
+      description: Edit an application key owned by this service account.
+      operationId: UpdateServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/ApplicationKeyID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/ApplicationKeyUpdateRequest'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PartialApplicationKeyResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+      summary: Edit an application key for this service account
+      tags:
+      - Service Accounts
+      x-codegen-request-body-name: body
+      x-menu-order: 2
+      x-undo:
+        type: idempotent
   /api/v2/services:
     get:
       description: Get all incident services uploaded for the requesting user's organization.
@@ -7592,6 +8585,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get a list of all incident services
       tags:
       - Incident Services
@@ -7625,6 +8623,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Create a new incident service
       tags:
       - Incident Services
@@ -7633,8 +8636,8 @@ paths:
         service:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{\
-              \ unique }}\"\n     },\n     \"type\": \"services\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{
+              unique }}\"\n     },\n     \"type\": \"services\"\n  }\n}"
           step: there is a valid "service" in the system
       x-undo:
         operationId: DeleteIncidentService
@@ -7662,6 +8665,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Delete an existing incident service
       tags:
       - Incident Services
@@ -7694,6 +8702,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get details of an incident service
       tags:
       - Incident Services
@@ -7730,6 +8743,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Update an existing incident service
       tags:
       - Incident Services
@@ -7765,6 +8783,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get a list of all incident teams
       tags:
       - Incident Teams
@@ -7798,6 +8821,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Create a new incident team
       tags:
       - Incident Teams
@@ -7806,8 +8834,8 @@ paths:
         team:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{\
-              \ unique }}\"\n     },\n     \"type\": \"teams\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{
+              unique }}\"\n     },\n     \"type\": \"teams\"\n  }\n}"
           step: there is a valid "team" in the system
       x-undo:
         operationId: DeleteIncidentTeam
@@ -7835,6 +8863,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Delete an existing incident team
       tags:
       - Incident Teams
@@ -7867,6 +8900,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get details of an incident team
       tags:
       - Incident Teams
@@ -7903,6 +8941,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Update an existing incident team
       tags:
       - Incident Teams
@@ -7941,6 +8984,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_invite
       summary: Send invitation emails
       tags:
       - Users
@@ -7949,10 +8997,9 @@ paths:
         user_invitation:
           parameters:
           - name: body
-            value: "{\n  \"data\": [\n    {\n      \"relationships\": {\"user\": {\"\
-              data\": {\n        \"id\": \"{{ user.data.id }}\",\n        \"type\"\
-              : \"{{ user.data.type }}\"\n      }}},\n      \"type\": \"user_invitations\"\
-              \n    }\n  ]\n}"
+            value: "{\n  \"data\": [\n    {\n      \"relationships\": {\"user\": {\"data\":
+              {\n        \"id\": \"{{ user.data.id }}\",\n        \"type\": \"{{ user.data.type
+              }}\"\n      }}},\n      \"type\": \"user_invitations\"\n    }\n  ]\n}"
           source: data[0]
           step: the "user" has a "user_invitation"
       x-menu-order: 8
@@ -7968,6 +9015,7 @@ paths:
         name: user_invitation_uuid
         required: true
         schema:
+          example: 00000000-0000-0000-0000-000000000000
           type: string
       responses:
         '200':
@@ -7988,6 +9036,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_invite
       summary: Get a user invitation
       tags:
       - Users
@@ -8017,6 +9070,7 @@ paths:
         required: false
         schema:
           default: name
+          example: name
           type: string
       - description: 'Direction of sort. Options: `asc`, `desc`.'
         in: query
@@ -8039,6 +9093,7 @@ paths:
         name: filter[status]
         required: false
         schema:
+          example: Active
           type: string
       responses:
         '200':
@@ -8059,6 +9114,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List all users
       tags:
       - Users
@@ -8094,6 +9153,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_invite
       summary: Create a user
       tags:
       - Users
@@ -8102,9 +9166,9 @@ paths:
         user:
           parameters:
           - name: body
-            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"email\": \"{{\
-              \ unique }}@datadoghq.com\",\n      \"title\": \"user title\"\n    \
-              \ },\n     \"type\": \"users\"\n  }\n}"
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"email\": \"{{
+              unique }}@datadoghq.com\",\n      \"title\": \"user title\"\n     },\n
+              \    \"type\": \"users\"\n  }\n}"
           step: there is a valid "user" in the system
       x-menu-order: 2
       x-undo:
@@ -8136,6 +9200,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Disable a user
       tags:
       - Users
@@ -8167,6 +9236,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get user details
       tags:
       - Users
@@ -8218,6 +9291,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Unprocessable Entity
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Update a user
       tags:
       - Users
@@ -8253,6 +9331,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get a user organization
       tags:
       - Users
@@ -8262,8 +9344,8 @@ paths:
         type: safe
   /api/v2/users/{user_id}/permissions:
     get:
-      description: "Get a user permission set. Returns a list of the user\u2019s permissions\n\
-        granted by the associated user's roles."
+      description: "Get a user permission set. Returns a list of the user\u2019s permissions\ngranted
+        by the associated user's roles."
       operationId: ListUserPermissions
       parameters:
       - $ref: '#/components/parameters/UserID'
@@ -8286,6 +9368,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get a user permissions
       tags:
       - Users
@@ -8305,6 +9391,7 @@ servers:
       enum:
       - datadoghq.com
       - us3.datadoghq.com
+      - us5.datadoghq.com
       - datadoghq.eu
       - ddog-gov.com
     subdomain:
@@ -8371,14 +9458,13 @@ tags:
     description: Find out more at
     url: https://docs.datadoghq.com/logs/logs_to_metrics/
   name: Logs Metrics
-- description: "The metrics endpoint allows you to:\n\n- Post metrics data so it can\
-    \ be graphed on Datadog\u2019s dashboards\n- Query metrics from any time period\n\
-    - Modify tag configurations for metrics\n- View tags and volumes for metrics\n\
-    \n**Note**: A graph can only contain a set number of points\nand as the timeframe\
-    \ over which a metric is viewed increases,\naggregation between points occurs\
-    \ to stay below that set number.\n\nThe Post, Patch, and Delete `manage_tags`\
-    \ API methods can only be performed by\na user who has the `Manage Tags for Metrics`\
-    \ permission."
+- description: "The metrics endpoint allows you to:\n\n- Post metrics data so it can
+    be graphed on Datadog\u2019s dashboards\n- Query metrics from any time period\n-
+    Modify tag configurations for metrics\n- View tags and volumes for metrics\n\n**Note**:
+    A graph can only contain a set number of points\nand as the timeframe over which
+    a metric is viewed increases,\naggregation between points occurs to stay below
+    that set number.\n\nThe Post, Patch, and Delete `manage_tags` API methods can
+    only be performed by\na user who has the `Manage Tags for Metrics` permission."
   name: Metrics
 - description: The processes API allows you to query processes data for your organization.
   name: Processes
@@ -8401,6 +9487,8 @@ tags:
 
     signals.'
   name: Security Monitoring
+- description: Create, edit, and disable service accounts.
+  name: Service Accounts
 - description: Create, edit, and disable users.
   externalDocs:
     url: https://docs.datadoghq.com/account_management/users