datadog_api_client 1.2.0 → 1.6.0

data/{data → .generator/schemas}/v2/openapi.yaml

@@ -95,7 +95,7 @@ components:
       required: false
       schema:
         type: string
-    ApplicationKeyId:
+    ApplicationKeyID:
       description: The ID of the application key.
       in: path
       name: app_key_id
@@ -130,8 +130,16 @@ components:
       required: true
       schema:
         type: string
+    CloudWorkloadSecurityAgentRuleID:
+      description: The ID of the Agent rule.
+      example: 3b5-v82-ns6
+      in: path
+      name: agent_rule_id
+      required: true
+      schema:
+        type: string
     IncidentIDPathParameter:
-      description: The UUID the incident.
+      description: The UUID of the incident.
       in: path
       name: incident_id
       required: true
@@ -260,6 +268,14 @@ components:
       required: true
       schema:
         type: string
+    ServiceAccountID:
+      description: The ID of the service account.
+      in: path
+      name: service_account_id
+      required: true
+      schema:
+        example: 00000000-0000-0000-0000-000000000000
+        type: string
     UserID:
       description: The ID of the user.
       in: path
@@ -469,8 +485,21 @@ components:
       properties:
         name:
           description: Name of the application key.
-          example: Application Key for submitting metrics
+          example: Application Key for managing dashboards
           type: string
+        scopes:
+          description: Array of scopes to grant the application key. This feature
+            is in private beta, please contact Datadog support to enable scopes for
+            your application keys.
+          example:
+          - dashboards_read
+          - dashboards_write
+          - dashboards_public_share
+          items:
+            description: Name of scope.
+            type: string
+          nullable: true
+          type: array
       required:
       - name
       type: object
@@ -496,7 +525,7 @@ components:
     ApplicationKeyRelationships:
       description: Resources related to the application key.
       properties:
-        created_by:
+        owned_by:
           $ref: '#/components/schemas/RelationshipToUser'
       type: object
     ApplicationKeyResponse:
@@ -521,10 +550,21 @@ components:
       properties:
         name:
           description: Name of the application key.
-          example: Application Key for submitting metrics
+          example: Application Key for managing dashboards
           type: string
-      required:
-      - name
+        scopes:
+          description: Array of scopes to grant the application key. This feature
+            is in private beta, please contact Datadog support to enable scopes for
+            your application keys.
+          example:
+          - dashboards_read
+          - dashboards_write
+          - dashboards_public_share
+          items:
+            description: Name of scope.
+            type: string
+          nullable: true
+          type: array
       type: object
     ApplicationKeyUpdateData:
       description: Object used to update an application key.
@@ -577,6 +617,199 @@ components:
       type: string
       x-enum-varnames:
       - APPLICATION_KEYS
+    CloudWorkloadSecurityAgentRuleAttributes:
+      description: A Cloud Workload Security Agent rule returned by the API.
+      properties:
+        category:
+          description: The category of the Agent rule.
+          example: Process Activity
+          type: string
+        creationDate:
+          description: When the Agent rule was created, timestamp in milliseconds.
+          example: 1624366480320
+          format: int64
+          type: integer
+        creator:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleCreatorAttributes'
+        defaultRule:
+          description: Whether the rule is included by default.
+          example: false
+          type: boolean
+        description:
+          description: The description of the Agent rule.
+          example: My Agent rule
+          type: string
+        enabled:
+          description: Whether the Agent rule is enabled.
+          example: true
+          type: boolean
+        expression:
+          description: The SECL expression of the Agent rule.
+          example: exec.file.name == \"sh\"
+          type: string
+        name:
+          description: The name of the Agent rule.
+          example: my_agent_rule
+          type: string
+        updatedAt:
+          description: When the Agent rule was last updated, timestamp in milliseconds.
+          example: 1624366480320
+          format: int64
+          type: integer
+        updater:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleUpdaterAttributes'
+        version:
+          description: The version of the Agent rule.
+          example: 23
+          format: int64
+          type: integer
+    CloudWorkloadSecurityAgentRuleCreateAttributes:
+      description: Create a new Cloud Workload Security Agent rule.
+      properties:
+        description:
+          description: The description of the Agent rule.
+          example: My Agent rule
+          type: string
+        enabled:
+          description: Whether the Agent rule is enabled.
+          example: true
+          type: boolean
+        expression:
+          description: The SECL expression of the Agent rule.
+          example: exec.file.name == \"sh\"
+          type: string
+        name:
+          description: The name of the Agent rule.
+          example: my_agent_rule
+          type: string
+      required:
+      - name
+      - expression
+      type: object
+    CloudWorkloadSecurityAgentRuleCreateData:
+      description: Object for a single Agent rule.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleCreateAttributes'
+        type:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleType'
+      required:
+      - attributes
+      - type
+      type: object
+    CloudWorkloadSecurityAgentRuleCreateRequest:
+      description: Request object that includes the Agent rule to create.
+      properties:
+        data:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleCreateData'
+      required:
+      - data
+      type: object
+    CloudWorkloadSecurityAgentRuleCreatorAttributes:
+      description: The attributes of the user who created the Agent rule.
+      properties:
+        handle:
+          description: The handle of the user.
+          example: datadog.user@example.com
+          type: string
+        name:
+          description: The name of the user.
+          example: Datadog User
+          type: string
+      type: object
+    CloudWorkloadSecurityAgentRuleData:
+      description: Object for a single Agent rule.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleAttributes'
+        id:
+          description: The ID of the Agent rule.
+          example: 3dd-0uc-h1s
+          type: string
+        type:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleType'
+      type: object
+    CloudWorkloadSecurityAgentRuleResponse:
+      description: Response object that includes an Agent rule.
+      properties:
+        data:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleData'
+      type: object
+    CloudWorkloadSecurityAgentRuleType:
+      default: agent_rule
+      description: The type of the resource. The value should always be `agent_rule`.
+      enum:
+      - agent_rule
+      example: agent_rule
+      type: string
+      x-enum-varnames:
+      - AGENT_RULE
+    CloudWorkloadSecurityAgentRuleUpdateAttributes:
+      description: Update an existing Cloud Workload Security Agent rule.
+      properties:
+        description:
+          description: The description of the Agent rule.
+          example: My Agent rule
+          type: string
+        enabled:
+          description: Whether the Agent rule is enabled.
+          example: true
+          type: boolean
+        expression:
+          description: The SECL expression of the Agent rule.
+          example: exec.file.name == \"sh\"
+          type: string
+      type: object
+    CloudWorkloadSecurityAgentRuleUpdateData:
+      description: Object for a single Agent rule.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleUpdateAttributes'
+        type:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleType'
+      required:
+      - attributes
+      - type
+      type: object
+    CloudWorkloadSecurityAgentRuleUpdateRequest:
+      description: Request object that includes the Agent rule with the attributes
+        to update.
+      properties:
+        data:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleUpdateData'
+      required:
+      - data
+      type: object
+    CloudWorkloadSecurityAgentRuleUpdaterAttributes:
+      description: The attributes of the user who last updated the Agent rule.
+      properties:
+        handle:
+          description: The handle of the user.
+          example: datadog.user@example.com
+          type: string
+        name:
+          description: The name of the user.
+          example: Datadog User
+          type: string
+      type: object
+    CloudWorkloadSecurityAgentRulesListResponse:
+      description: Response object that includes a list of Agent rule.
+      properties:
+        data:
+          description: A list of Agent rules objects.
+          items:
+            $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleData'
+          type: array
+      type: object
+    ContentEncoding:
+      description: HTTP header used to compress the media-type.
+      enum:
+      - gzip
+      - deflate
+      type: string
+      x-enum-varnames:
+      - GZIP
+      - DEFLATE
     Creator:
       description: Creator of the object.
       properties:
@@ -784,6 +1017,7 @@ components:
           description: The API key.
           readOnly: true
           type: string
+          x-secret: true
         last4:
           description: The last four characters of the API key.
           example: abcd
@@ -791,6 +1025,7 @@ components:
           minLength: 4
           readOnly: true
           type: string
+          x-secret: true
         modified_at:
           description: Date the API key was last modified.
           example: '2020-11-23T10:00:00.000Z'
@@ -826,6 +1061,7 @@ components:
           description: The application key.
           readOnly: true
           type: string
+          x-secret: true
         last4:
           description: The last four characters of the application key.
           example: abcd
@@ -833,10 +1069,98 @@ components:
           minLength: 4
           readOnly: true
           type: string
+          x-secret: true
         name:
           description: Name of the application key.
-          example: Application Key for submitting metrics
+          example: Application Key for managing dashboards
+          type: string
+        scopes:
+          description: Array of scopes to grant the application key. This feature
+            is in private beta, please contact Datadog support to enable scopes for
+            your application keys.
+          example:
+          - dashboards_read
+          - dashboards_write
+          - dashboards_public_share
+          items:
+            description: Name of scope.
+            type: string
+          nullable: true
+          type: array
+      type: object
+    HTTPLog:
+      description: Structured log message.
+      items:
+        $ref: '#/components/schemas/HTTPLogItem'
+      type: array
+    HTTPLogError:
+      description: List of errors.
+      properties:
+        detail:
+          description: Error message.
+          example: Malformed payload
+          type: string
+        status:
+          description: Error code.
+          example: 400
+          type: string
+        title:
+          description: Error title.
+          example: Bad Request
+          type: string
+      type: object
+    HTTPLogErrors:
+      description: Invalid query performed.
+      properties:
+        errors:
+          description: Structured errors.
+          items:
+            $ref: '#/components/schemas/HTTPLogError'
+          type: array
+      type: object
+    HTTPLogItem:
+      description: Logs that are sent over HTTP.
+      properties:
+        ddsource:
+          description: 'The integration name associated with your log: the technology
+            from which the log originated.
+
+            When it matches an integration name, Datadog automatically installs the
+            corresponding parsers and facets.
+
+            See [reserved attributes](https://docs.datadoghq.com/logs/log_collection/#reserved-attributes).'
+          example: nginx
+          type: string
+        ddtags:
+          description: Tags associated with your logs.
+          example: env:staging,version:5.1
+          type: string
+        hostname:
+          description: The name of the originating host of the log.
+          example: i-012345678
+          type: string
+        message:
+          description: 'The message [reserved attribute](https://docs.datadoghq.com/logs/log_collection/#reserved-attributes)
+
+            of your log. By default, Datadog ingests the value of the message attribute
+            as the body of the log entry.
+
+            That value is then highlighted and displayed in the Logstream, where it
+            is indexed for full text search.'
+          example: 2019-11-19T14:37:58,995 INFO [process.name][20081] Hello World
+          type: string
+        service:
+          description: 'The name of the application or service generating the log
+            events.
+
+            It is used to switch from Logs to APM, so make sure you define the same
+            value when you use both products.
+
+            See [reserved attributes](https://docs.datadoghq.com/logs/log_collection/#reserved-attributes).'
+          example: payment
           type: string
+      required:
+      - name
       type: object
     IncidentCreateAttributes:
       description: The incident's attributes for a create request.
@@ -855,7 +1179,7 @@ components:
               type: dropdown
               value: SEV-5
           type: object
-        initial_timeline_cells:
+        initial_cells:
           description: An array of initial timeline cells to be placed at the beginning
             of the incident timeline.
           items:
@@ -865,9 +1189,7 @@ components:
           description: Notification handles that will be notified of the incident
             at creation.
           items:
-            description: A notification handle that will be notified at incident creation.
-            example: '@test.user@test.com'
-            type: string
+            $ref: '#/components/schemas/IncidentNotificationHandle'
           type: array
         title:
           description: The title of the incident, which summarizes what happened.
@@ -930,6 +1252,7 @@ components:
             description: A value which has been selected for the parent field.
             example: '1.1'
             type: string
+          nullable: true
           type: array
       type: object
     IncidentFieldAttributesSingleValue:
@@ -940,6 +1263,7 @@ components:
         value:
           description: The single value selected for this field.
           example: SEV-1
+          nullable: true
           type: string
       type: object
     IncidentFieldAttributesSingleValueType:
@@ -955,7 +1279,7 @@ components:
       - TEXTBOX
     IncidentFieldAttributesValueType:
       default: multiselect
-      description: Type of the single value field definitions.
+      description: Type of the multiple value field definitions.
       enum:
       - multiselect
       - textarray
@@ -977,6 +1301,18 @@ components:
       type: string
       x-enum-varnames:
       - INCIDENT_INTEGRATIONS
+    IncidentNotificationHandle:
+      description: A notification handle that will be notified at incident creation.
+      properties:
+        display_name:
+          description: The name of the notified handle.
+          example: Jane Doe
+          type: string
+        handle:
+          description: The email address used for the notification.
+          example: '@test.user@test.com'
+          type: string
+      type: object
     IncidentPostmortemType:
       default: incident_postmortems
       description: Incident postmortem resource type.
@@ -1064,10 +1400,8 @@ components:
           description: Notification handles that will be notified of the incident
             during update.
           items:
-            description: A notification handle that will be notified during incident
-              update.
-            example: '@test.user@test.com'
-            type: string
+            $ref: '#/components/schemas/IncidentNotificationHandle'
+          nullable: true
           type: array
         postmortem_id:
           description: The UUID of the postmortem object attached to the incident.
@@ -1602,10 +1936,7 @@ components:
           description: Notification handles that will be notified of the incident
             during update.
           items:
-            description: A notification handle that will be notified during incident
-              update.
-            example: '@test.user@test.com'
-            type: string
+            $ref: '#/components/schemas/IncidentNotificationHandle'
           type: array
         resolved:
           description: Timestamp when the incident's state was set to resolved.
@@ -1911,7 +2242,7 @@ components:
       items:
         $ref: '#/components/schemas/LogsAggregateBucketValueTimeseriesPoint'
       type: array
-      x-generate-alias-as-model: true
+      
     LogsAggregateBucketValueTimeseriesPoint:
       description: A timeseries point
       properties:
@@ -2756,7 +3087,7 @@ components:
         from:
           default: now-15m
           description: The minimum time for the requested logs, supports date math
-            and regular timestamps
+            and regular timestamps (milliseconds).
           example: now-15m
           type: string
         indexes:
@@ -2779,7 +3110,7 @@ components:
         to:
           default: now
           description: The maximum time for the requested logs, supports date math
-            and regular timestamps
+            and regular timestamps (milliseconds).
           example: now
           type: string
       type: object
@@ -2913,6 +3244,91 @@ components:
           $ref: '#/components/schemas/MetricAllTags'
       readOnly: true
       type: object
+    MetricCustomAggregation:
+      description: A time and space aggregation combination for use in query.
+      example:
+        space: sum
+        time: sum
+      properties:
+        space:
+          $ref: '#/components/schemas/MetricCustomSpaceAggregation'
+        time:
+          $ref: '#/components/schemas/MetricCustomTimeAggregation'
+      required:
+      - time
+      - space
+      type: object
+    MetricCustomAggregations:
+      description: 'A list of queryable aggregation combinations for a count, rate,
+        or gauge metric.
+
+        By default, count and rate metrics require the (time: sum, space: sum) aggregation
+        and
+
+        Gauge metrics require the (time: avg, space: avg) aggregation.
+
+        Additional time & space combinations are also available:
+
+
+        - time: avg, space: avg
+
+        - time: avg, space: max
+
+        - time: avg, space: min
+
+        - time: avg, space: sum
+
+        - time: count, space: sum
+
+        - time: max, space: max
+
+        - time: min, space: min
+
+        - time: sum, space: avg
+
+        - time: sum, space: sum
+
+
+        Can only be applied to metrics that have a `metric_type` of `count`, `rate`,
+        or `gauge`.'
+      example:
+      - space: sum
+        time: sum
+      - space: sum
+        time: count
+      items:
+        $ref: '#/components/schemas/MetricCustomAggregation'
+      type: array
+    MetricCustomSpaceAggregation:
+      description: A space aggregation for use in query.
+      enum:
+      - avg
+      - max
+      - min
+      - sum
+      example: sum
+      type: string
+      x-enum-varnames:
+      - AVG
+      - MAX
+      - MIN
+      - SUM
+    MetricCustomTimeAggregation:
+      description: A time aggregation for use in query.
+      enum:
+      - avg
+      - count
+      - max
+      - min
+      - sum
+      example: sum
+      type: string
+      x-enum-varnames:
+      - AVG
+      - COUNT
+      - MAX
+      - MIN
+      - SUM
     MetricDistinctVolume:
       description: Object for a single metric's distinct volume.
       properties:
@@ -2983,6 +3399,9 @@ components:
       description: Object for a single metric tag configuration.
       example:
         attributes:
+          aggregations:
+          - space: avg
+            time: avg
           created_at: '2020-03-31T09:48:37.463835Z'
           metric_type: gauge
           modified_at: '2020-04-31T09:48:37.463835Z'
@@ -3003,6 +3422,8 @@ components:
       description: Object containing the definition of a metric tag configuration
         attributes.
       properties:
+        aggregations:
+          $ref: '#/components/schemas/MetricCustomAggregations'
         created_at:
           description: Timestamp when the tag configuration was created.
           example: '2020-03-31T09:48:37.463835Z'
@@ -3036,6 +3457,8 @@ components:
       description: Object containing the definition of a metric tag configuration
         to be created.
       properties:
+        aggregations:
+          $ref: '#/components/schemas/MetricCustomAggregations'
         include_percentiles:
           default: false
           description: 'Toggle to include/exclude percentiles for a distribution metric.
@@ -3126,6 +3549,8 @@ components:
       description: Object containing the definition of a metric tag configuration
         to be updated.
       properties:
+        aggregations:
+          $ref: '#/components/schemas/MetricCustomAggregations'
         include_percentiles:
           default: false
           description: 'Toggle to include/exclude percentiles for a distribution metric.
@@ -3305,6 +3730,7 @@ components:
           minLength: 4
           readOnly: true
           type: string
+          x-secret: true
         modified_at:
           description: Date the API key was last modified.
           example: '2020-11-23T10:00:00.000Z'
@@ -3343,10 +3769,35 @@ components:
           minLength: 4
           readOnly: true
           type: string
+          x-secret: true
         name:
           description: Name of the application key.
-          example: Application Key for submitting metrics
+          example: Application Key for managing dashboards
           type: string
+        scopes:
+          description: Array of scopes to grant the application key. This feature
+            is in private beta, please contact Datadog support to enable scopes for
+            your application keys.
+          example:
+          - dashboards_read
+          - dashboards_write
+          - dashboards_public_share
+          items:
+            description: Name of scope.
+            type: string
+          nullable: true
+          type: array
+      type: object
+    PartialApplicationKeyResponse:
+      description: Response for retrieving a partial application key.
+      properties:
+        data:
+          $ref: '#/components/schemas/PartialApplicationKey'
+        included:
+          description: Array of objects related to the application key.
+          items:
+            $ref: '#/components/schemas/ApplicationKeyResponseIncludedItem'
+          type: array
       type: object
     Permission:
       description: Permission object.
@@ -3724,6 +4175,36 @@ components:
           readOnly: true
           type: integer
       type: object
+    RoleClone:
+      description: Data for the clone role request.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/RoleCloneAttributes'
+        type:
+          $ref: '#/components/schemas/RolesType'
+      required:
+      - type
+      - attributes
+      type: object
+    RoleCloneAttributes:
+      description: Attributes required to create a new role by cloning an existing
+        one.
+      properties:
+        name:
+          description: Name of the new role that is cloned.
+          example: cloned-role
+          type: string
+      required:
+      - name
+      type: object
+    RoleCloneRequest:
+      description: Request to create a role by cloning an existing role.
+      properties:
+        data:
+          $ref: '#/components/schemas/RoleClone'
+      required:
+      - data
+      type: object
     RoleCreateAttributes:
       description: Attributes of the created role.
       properties:
@@ -4248,6 +4729,8 @@ components:
             description: Tag.
             type: string
           type: array
+        type:
+          $ref: '#/components/schemas/SecurityMonitoringRuleTypeCreate'
       required:
       - name
       - isEnabled
@@ -4410,8 +4893,6 @@ components:
     SecurityMonitoringRuleQuery:
       description: Query for matching rule.
       properties:
-        agentRule:
-          $ref: '#/components/schemas/SecurityMonitoringRuntimeAgentRule'
         aggregation:
           $ref: '#/components/schemas/SecurityMonitoringRuleQueryAggregation'
         distinctFields:
@@ -4456,8 +4937,6 @@ components:
     SecurityMonitoringRuleQueryCreate:
       description: Query for matching rule.
       properties:
-        agentRule:
-          $ref: '#/components/schemas/SecurityMonitoringRuntimeAgentRule'
         aggregation:
           $ref: '#/components/schemas/SecurityMonitoringRuleQueryAggregation'
         distinctFields:
@@ -4544,6 +5023,8 @@ components:
             description: Tag.
             type: string
           type: array
+        type:
+          $ref: '#/components/schemas/SecurityMonitoringRuleTypeRead'
         updateAuthorId:
           description: User ID of the user who updated the rule.
           format: int64
@@ -4560,6 +5041,7 @@ components:
       - medium
       - high
       - critical
+      example: critical
       type: string
       x-enum-varnames:
       - INFO
@@ -4567,11 +5049,33 @@ components:
       - MEDIUM
       - HIGH
       - CRITICAL
-    SecurityMonitoringRuleUpdatePayload:
-      description: Update an existing rule.
-      properties:
-        cases:
-          description: Cases for generating signals.
+    SecurityMonitoringRuleTypeCreate:
+      description: The rule type.
+      enum:
+      - log_detection
+      - workload_security
+      type: string
+      x-enum-varnames:
+      - LOG_DETECTION
+      - WORKLOAD_SECURITY
+    SecurityMonitoringRuleTypeRead:
+      description: The rule type.
+      enum:
+      - log_detection
+      - infrastructure_configuration
+      - workload_security
+      - cloud_configuration
+      type: string
+      x-enum-varnames:
+      - LOG_DETECTION
+      - INFRASTRUCTURE_CONFIGURATION
+      - WORKLOAD_SECURITY
+      - CLOUD_CONFIGURATION
+    SecurityMonitoringRuleUpdatePayload:
+      description: Update an existing rule.
+      properties:
+        cases:
+          description: Cases for generating signals.
           items:
             $ref: '#/components/schemas/SecurityMonitoringRuleCase'
           type: array
@@ -4615,24 +5119,6 @@ components:
           maximum: 2147483647
           type: integer
       type: object
-    SecurityMonitoringRuntimeAgentRule:
-      description: The Agent rule.
-      properties:
-        agentRuleId:
-          description: The Agent rule ID. Must be unique within the rule.
-          example: etc_shadow
-          type: string
-        expression:
-          description: 'A Runtime Security expression determines what activity should
-            be collected by the Datadog Agent.
-
-            These logical expressions can use predefined operators and attributes.
-            Tags cannot be used in Runtime
-
-            Security expressions. Instead, allow or deny based on tags under the advanced
-            option.'
-          type: string
-      type: object
     SecurityMonitoringSignal:
       description: Object description of a security signal.
       properties:
@@ -4666,7 +5152,7 @@ components:
               format: array
               items:
                 description: The tag associated with the security signal.
-                format: string
+                type: string
             timestamp:
               description: The timestamp of the security signal.
               example: '2019-01-02T09:42:36.320Z'
@@ -4775,6 +5261,48 @@ components:
       x-enum-varnames:
       - TIMESTAMP_ASCENDING
       - TIMESTAMP_DESCENDING
+    ServiceAccountCreateAttributes:
+      description: Attributes of the created user.
+      properties:
+        email:
+          description: The email of the user.
+          example: jane.doe@example.com
+          type: string
+        name:
+          description: The name of the user.
+          type: string
+        service_account:
+          description: Whether the user is a service account. Must be true.
+          example: true
+          type: boolean
+        title:
+          description: The title of the user.
+          type: string
+      required:
+      - email
+      - service_account
+      type: object
+    ServiceAccountCreateData:
+      description: Object to create a service account User.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/ServiceAccountCreateAttributes'
+        relationships:
+          $ref: '#/components/schemas/UserRelationships'
+        type:
+          $ref: '#/components/schemas/UsersType'
+      required:
+      - attributes
+      - type
+      type: object
+    ServiceAccountCreateRequest:
+      description: Create a service account.
+      properties:
+        data:
+          $ref: '#/components/schemas/ServiceAccountCreateData'
+      required:
+      - data
+      type: object
     User:
       description: User object returned by the API.
       properties:
@@ -4813,12 +5341,17 @@ components:
           type: string
         name:
           description: Name of the user.
+          nullable: true
           type: string
+        service_account:
+          description: Whether the user is a service account.
+          type: boolean
         status:
           description: Status of the user.
           type: string
         title:
           description: Title of the user.
+          nullable: true
           type: string
         verified:
           description: Whether the user is verified.
@@ -5045,6 +5578,32 @@ components:
       x-enum-varnames:
       - USERS
   securitySchemes:
+    AuthZ:
+      description: This API uses OAuth 2 with the implicit grant flow.
+      flows:
+        authorizationCode:
+          authorizationUrl: /oauth2/v1/authorize
+          scopes:
+            dashboards_public_share: The ability to share dashboards externally.
+            dashboards_read: The ability to view dashboards.
+            dashboards_write: The ability to create and change dashboards.
+            events_read: The ability to read Events data.
+            incident_read: The ability to view incidents in Datadog.
+            incident_settings_write: The ability to configure Incidents settings.
+            incident_write: The ability to create, view, and manage incidents in Datadog.
+            metrics_read: The ability to view custom metrics.
+            security_monitoring_filters_read: The ability to read Security Filters.
+            security_monitoring_filters_write: The ability to create, edit and delete
+              Security Filters.
+            security_monitoring_rules_read: The ability to read Detection Rules.
+            security_monitoring_rules_write: The ability to create and edit Detection
+              Rules.
+            security_monitoring_signals_read: The ability to view Security Signals.
+            user_access_invite: The ability to invite other users to your organization.
+            user_access_manage: The ability to disable users, manage user roles, and
+              manage SAML-to-role mappings.
+          tokenUrl: /oauth2/v1/token
+      type: oauth2
     apiKeyAuth:
       description: Your Datadog API Key.
       in: header
@@ -5100,6 +5659,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get all API keys
       tags:
       - Key Management
@@ -5133,6 +5694,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Create an API key
       tags:
       - Key Management
@@ -5171,6 +5734,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Delete an API key
       tags:
       - Key Management
@@ -5201,6 +5766,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get API key
       tags:
       - Key Management
@@ -5242,6 +5809,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Edit an API key
       tags:
       - Key Management
@@ -5284,6 +5853,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get all application keys
       tags:
       - Key Management
@@ -5294,7 +5865,7 @@ paths:
       description: Delete an application key
       operationId: DeleteApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       responses:
         '204':
           description: No Content
@@ -5310,6 +5881,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Delete an application key
       tags:
       - Key Management
@@ -5320,7 +5893,7 @@ paths:
       description: Get an application key for your org.
       operationId: GetApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       - $ref: '#/components/parameters/ApplicationKeyIncludeParameter'
       responses:
         '200':
@@ -5347,6 +5920,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get an application key
       tags:
       - Key Management
@@ -5356,7 +5931,7 @@ paths:
       description: Edit an application key
       operationId: UpdateApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       requestBody:
         content:
           application/json:
@@ -5388,6 +5963,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Edit an application key
       tags:
       - Key Management
@@ -5430,6 +6007,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get all application keys owned by current user
       tags:
       - Key Management
@@ -5463,6 +6042,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Create an application key for current user
       tags:
       - Key Management
@@ -5485,7 +6066,7 @@ paths:
       description: Delete an application key owned by current user
       operationId: DeleteCurrentUserApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       responses:
         '204':
           description: No Content
@@ -5501,6 +6082,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Delete an application key owned by current user
       tags:
       - Key Management
@@ -5510,7 +6093,7 @@ paths:
       description: Get an application key owned by current user
       operationId: GetCurrentUserApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       responses:
         '200':
           content:
@@ -5530,6 +6113,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get one application key owned by current user
       tags:
       - Key Management
@@ -5539,7 +6124,7 @@ paths:
       description: Edit an application key owned by current user
       operationId: UpdateCurrentUserApplicationKey
       parameters:
-      - $ref: '#/components/parameters/ApplicationKeyId'
+      - $ref: '#/components/parameters/ApplicationKeyID'
       requestBody:
         content:
           application/json:
@@ -5571,6 +6156,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Edit an application key owned by current user
       tags:
       - Key Management
@@ -5621,6 +6208,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Delete items from a dashboard list
       tags:
       - Dashboard Lists
@@ -5658,6 +6247,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - dashboards_read
       summary: Get items of a Dashboard List
       tags:
       - Dashboard Lists
@@ -5707,6 +6303,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Add Items to a Dashboard List
       tags:
       - Dashboard Lists
@@ -5757,6 +6355,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Update items of a dashboard list
       tags:
       - Dashboard Lists
@@ -5787,6 +6387,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get a list of incidents
       tags:
       - Incidents
@@ -5820,6 +6427,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_write
       summary: Create an incident
       tags:
       - Incidents
@@ -5858,6 +6472,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_write
       summary: Delete an existing incident
       tags:
       - Incidents
@@ -5887,6 +6508,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get the details of an incident
       tags:
       - Incidents
@@ -5923,6 +6551,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_write
       summary: Update an existing incident
       tags:
       - Incidents
@@ -5932,6 +6567,222 @@ paths:
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+  /api/v2/logs:
+    post:
+      description: 'Send your logs to your Datadog platform over HTTP. Limits per
+        HTTP request are:
+
+
+        - Maximum content size per payload (uncompressed): 5MB
+
+        - Maximum size for a single log: 1MB
+
+        - Maximum array size if sending multiple logs in an array: 1000 entries
+
+
+        Any log exceeding 1MB is accepted and truncated by Datadog:
+
+        - For a single log request, the API truncates the log at 1MB and returns a
+        2xx.
+
+        - For a multi-logs request, the API processes all logs, truncates only logs
+        larger than 1MB, and returns a 2xx.
+
+
+        Datadog recommends sending your logs compressed.
+
+        Add the `Content-Encoding: gzip` header to the request when sending compressed
+        logs.
+
+
+        The status codes answered by the HTTP API are:
+
+        - 202: Accepted: the request has been accepted for processing
+
+        - 400: Bad request (likely an issue in the payload formatting)
+
+        - 401: Unauthorized (likely a missing API Key)
+
+        - 403: Permission issue (likely using an invalid API Key)
+
+        - 408: Request Timeout, request should be retried after some time
+
+        - 413: Payload too large (batch is above 5MB uncompressed)
+
+        - 429: Too Many Requests, request should be retried after some time
+
+        - 500: Internal Server Error, the server encountered an unexpected condition
+        that prevented it from fulfilling the request, request should be retried after
+        some time
+
+        - 503: Service Unavailable, the server is not ready to handle the request
+        probably because it is overloaded, request should be retried after some time'
+      operationId: SubmitLog
+      parameters:
+      - description: HTTP header used to compress the media-type.
+        in: header
+        name: Content-Encoding
+        required: false
+        schema:
+          $ref: '#/components/schemas/ContentEncoding'
+      - description: Log tags can be passed as query parameters with `text/plain`
+          content type.
+        example: env:prod,user:my-user
+        in: query
+        name: ddtags
+        required: false
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            examples:
+              multi-json-messages:
+                description: Pass multiple log objects at once.
+                summary: Multi JSON Messages
+                value:
+                - message: hello
+                - message: world
+              simple-json-message:
+                description: Log attributes can be passed as `key:value` pairs in
+                  valid JSON messages.
+                summary: Simple JSON Message
+                value:
+                  ddsource: agent
+                  ddtags: env:prod,user:joe.doe
+                  hostname: fa1e1e739d95
+                  message: hello world
+            schema:
+              $ref: '#/components/schemas/HTTPLog'
+          application/logplex-1:
+            examples:
+              multi-raw-message:
+                description: Submit log messages.
+                summary: Multi Logplex Messages
+                value: 'hello
+
+                  world'
+              simple-logplex-message:
+                description: Submit log string.
+                summary: Simple Logplex Message
+                value: hello world
+            schema:
+              type: string
+          text/plain:
+            examples:
+              multi-raw-message:
+                description: Submit log string.
+                summary: Multi Raw Messages
+                value: 'hello
+
+                  world
+
+                  '
+              simple-raw-message:
+                description: 'Submit log string. Log attributes can be passed as query
+                  parameters in the URL. This enables the addition of tags or the
+                  source by using the `ddtags` and `ddsource` parameters: `?host=my-hostname&service=my-service&ddsource=my-source&ddtags=env:prod,user:my-user`.'
+                summary: Simple Raw Message
+                value: hello world
+            schema:
+              type: string
+        description: Log to send (JSON format).
+        required: true
+      responses:
+        '202':
+          content:
+            application/json:
+              schema:
+                type: object
+          description: Request accepted for processing (always 202 empty JSON).
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Bad Request
+        '401':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Unauthorized
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Forbidden
+        '408':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Request Timeout
+        '413':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Payload Too Large
+        '429':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Too Many Requests
+        '500':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Internal Server Error
+        '503':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPLogErrors'
+          description: Service Unavailable
+      security:
+      - apiKeyAuth: []
+      servers:
+      - url: https://{subdomain}.{site}
+        variables:
+          site:
+            default: datadoghq.com
+            description: The regional site for customers.
+            enum:
+            - datadoghq.com
+            - us3.datadoghq.com
+            - us5.datadoghq.com
+            - datadoghq.eu
+            - ddog-gov.com
+          subdomain:
+            default: http-intake.logs
+            description: The subdomain where the API is deployed.
+      - url: '{protocol}://{name}'
+        variables:
+          name:
+            default: http-intake.logs.datadoghq.com
+            description: Full site DNS name.
+          protocol:
+            default: https
+            description: The protocol for accessing the API.
+      - url: https://{subdomain}.{site}
+        variables:
+          site:
+            default: datadoghq.com
+            description: Any Datadog deployment.
+          subdomain:
+            default: http-intake.logs
+            description: The subdomain where the API is deployed.
+      summary: Send logs
+      tags:
+      - Logs
+      x-codegen-request-body-name: body
+      x-menu-order: 1
+      x-undo:
+        type: safe
   /api/v2/logs/analytics/aggregate:
     post:
       description: The API endpoint to aggregate events into buckets and compute metrics
@@ -5954,6 +6805,8 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Aggregate events
       tags:
       - Logs
@@ -5980,6 +6833,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get archive order
       tags:
       - Logs Archives
@@ -6030,6 +6885,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Unprocessable Entity
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Update archive order
       tags:
       - Logs Archives
@@ -6054,6 +6911,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get all archives
       tags:
       - Logs Archives
@@ -6089,6 +6948,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Create an archive
       tags:
       - Logs Archives
@@ -6127,6 +6988,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Delete an archive
       tags:
       - Logs Archives
@@ -6163,6 +7026,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get an archive
       tags:
       - Logs Archives
@@ -6211,6 +7076,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Update an archive
       tags:
       - Logs Archives
@@ -6251,6 +7118,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Revoke role from an archive
       tags:
       - Logs Archives
@@ -6288,6 +7157,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: List read roles for an archive
       tags:
       - Logs Archives
@@ -6327,6 +7198,8 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Grant role to an archive
       tags:
       - Logs Archives
@@ -6574,6 +7447,8 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Get a list of logs
       tags:
       - Logs
@@ -6618,6 +7493,8 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
       summary: Search logs
       tags:
       - Logs
@@ -6708,6 +7585,11 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Too Many Requests
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - metrics_read
       summary: List tag configurations
       tags:
       - Metrics
@@ -6755,6 +7637,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Too Many Requests
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List tags by metric name
       tags:
       - Metrics
@@ -6842,9 +7728,12 @@ paths:
         Success Manager.**"
     patch:
       description: 'Update the tag configuration of a metric or percentile aggregations
-        of a distribution metric. Can only be used with
+        of a distribution metric or custom aggregations
 
-        application keys from users with the `Manage Tags for Metrics` permission.'
+        of a count, rate, or gauge metric.
+
+        Can only be used with application keys from users with the `Manage Tags for
+        Metrics` permission.'
       operationId: UpdateTagConfiguration
       parameters:
       - $ref: '#/components/parameters/MetricName'
@@ -6898,8 +7787,12 @@ paths:
         Success Manager.**"
     post:
       description: 'Create and define a list of queryable tag keys for an existing
-        count/gauge/rate/distribution metric. Optionally, include percentile aggregations
-        on any distribution metric.
+        count/gauge/rate/distribution metric.
+
+        Optionally, include percentile aggregations on any distribution metric or
+        configure custom aggregations
+
+        on any count, rate, or gauge metric.
 
         Can only be used with application keys of users with the `Manage Tags for
         Metrics` permission.'
@@ -7016,6 +7909,10 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Too Many Requests
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List distinct metric volumes by metric name
       tags:
       - Metrics
@@ -7046,6 +7943,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List permissions
       tags:
       - Roles
@@ -7137,6 +8040,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication Error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get all processes
       tags:
       - Processes
@@ -7181,6 +8090,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List roles
       tags:
       - Roles
@@ -7215,6 +8130,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Create role
       tags:
       - Roles
@@ -7254,6 +8176,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Delete role
       tags:
       - Roles
@@ -7285,6 +8214,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get a role
       tags:
       - Roles
@@ -7335,6 +8270,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Unprocessable Entity
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Update a role
       tags:
       - Roles
@@ -7342,24 +8284,24 @@ paths:
       x-menu-order: 4
       x-undo:
         type: idempotent
-  /api/v2/roles/{role_id}/permissions:
-    delete:
-      description: Removes a permission from a role.
-      operationId: RemovePermissionFromRole
+  /api/v2/roles/{role_id}/clone:
+    post:
+      description: Clone an existing role
+      operationId: CloneRole
       parameters:
       - $ref: '#/components/parameters/RoleID'
       requestBody:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/RelationshipToPermission'
+              $ref: '#/components/schemas/RoleCloneRequest'
         required: true
       responses:
         '200':
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/PermissionsResponse'
+                $ref: '#/components/schemas/RoleResponse'
           description: OK
         '400':
           content:
@@ -7379,18 +8321,43 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
-      summary: Revoke permission
+        '409':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Conflict
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
+      summary: Create a new role by cloning an existing role
       tags:
       - Roles
       x-codegen-request-body-name: body
-      x-menu-order: 8
+      x-menu-order: 12
+      x-permission: OR(USER_ACCESS_MANAGE)
       x-undo:
-        type: idempotent
-    get:
-      description: Returns a list of all permissions for a single role.
-      operationId: ListRolePermissions
+        operationId: DeleteRole
+        parameters:
+        - name: role_id
+          source: data.id
+        type: unsafe
+  /api/v2/roles/{role_id}/permissions:
+    delete:
+      description: Removes a permission from a role.
+      operationId: RemovePermissionFromRole
       parameters:
       - $ref: '#/components/parameters/RoleID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/RelationshipToPermission'
+        required: true
       responses:
         '200':
           content:
@@ -7398,7 +8365,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/PermissionsResponse'
           description: OK
-        '403':
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
           content:
             application/json:
               schema:
@@ -7410,6 +8383,50 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
+      summary: Revoke permission
+      tags:
+      - Roles
+      x-codegen-request-body-name: body
+      x-menu-order: 8
+      x-undo:
+        type: idempotent
+    get:
+      description: Returns a list of all permissions for a single role.
+      operationId: ListRolePermissions
+      parameters:
+      - $ref: '#/components/parameters/RoleID'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PermissionsResponse'
+          description: OK
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Authentication error
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List permissions for a role
       tags:
       - Roles
@@ -7453,6 +8470,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Grant permission to a role
       tags:
       - Roles
@@ -7506,6 +8530,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Remove a user from a role
       tags:
       - Roles
@@ -7557,6 +8588,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get all users of a role
       tags:
       - Roles
@@ -7599,6 +8636,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Add a user to a role
       tags:
       - Roles
@@ -7615,6 +8659,213 @@ paths:
       x-menu-order: 10
       x-undo:
         type: safe
+  /api/v2/security/cloud_workload/policy/download:
+    get:
+      description: 'The download endpoint generates a Cloud Workload Security policy
+        file from your currently active
+
+        Cloud Workload Security rules, and downloads them as a .policy file. This
+        file can then be deployed to
+
+        your agents to update the policy running in your environment.'
+      operationId: DownloadCloudWorkloadPolicyFile
+      responses:
+        '200':
+          content:
+            application/yaml:
+              schema:
+                format: binary
+                type: string
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_read
+      summary: Get the latest Cloud Workload Security policy
+      tags:
+      - Cloud Workload Security
+      x-menu-order: 1
+      x-undo:
+        type: safe
+  /api/v2/security_monitoring/cloud_workload_security/agent_rules:
+    get:
+      description: Get the list of Agent rules.
+      operationId: ListCloudWorkloadSecurityAgentRules
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/CloudWorkloadSecurityAgentRulesListResponse'
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_cws_agent_rules_read
+      summary: Get all Cloud Workload Security Agent rules
+      tags:
+      - Cloud Workload Security
+      x-menu-order: 3
+      x-undo:
+        type: safe
+    post:
+      description: Create a new Agent rule with the given parameters.
+      operationId: CreateCloudWorkloadSecurityAgentRule
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleCreateRequest'
+        description: The definition of the new Agent rule.
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_cws_agent_rules_write
+      summary: Create a Cloud Workload Security Agent rule
+      tags:
+      - Cloud Workload Security
+      x-codegen-request-body-name: body
+      x-given:
+        agent_rule:
+          parameters:
+          - name: body
+            value: "{\n  \"data\": {\n    \"type\": \"agent_rule\",\n    \"attributes\":
+              {\n      \"name\": \"{{ unique_lower_alnum }}\",\n      \"description\":
+              \"My Agent rule\",\n      \"expression\": \"exec.file.name == \\\"sh\\\"\",\n
+              \     \"enabled\": true\n     }\n  }\n}"
+          step: there is a valid "agent_rule" in the system
+      x-menu-order: 4
+      x-undo:
+        operationId: DeleteCloudWorkloadSecurityAgentRule
+        parameters:
+        - name: agent_rule_id
+          source: data.id
+        type: unsafe
+  /api/v2/security_monitoring/cloud_workload_security/agent_rules/{agent_rule_id}:
+    delete:
+      description: Delete a specific Agent rule.
+      operationId: DeleteCloudWorkloadSecurityAgentRule
+      parameters:
+      - $ref: '#/components/parameters/CloudWorkloadSecurityAgentRuleID'
+      responses:
+        '204':
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_cws_agent_rules_write
+      summary: Delete a Cloud Workload Security Agent rule
+      tags:
+      - Cloud Workload Security
+      x-menu-order: 6
+      x-undo:
+        type: idempotent
+    get:
+      description: Get the details of a specific Agent rule.
+      operationId: GetCloudWorkloadSecurityAgentRule
+      parameters:
+      - $ref: '#/components/parameters/CloudWorkloadSecurityAgentRuleID'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleResponse'
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_cws_agent_rules_read
+      summary: Get a Cloud Workload Security Agent rule
+      tags:
+      - Cloud Workload Security
+      x-menu-order: 2
+      x-undo:
+        type: safe
+    patch:
+      description: 'Update a specific Agent rule.
+
+        Returns the Agent rule object when the request is successful.'
+      operationId: UpdateCloudWorkloadSecurityAgentRule
+      parameters:
+      - $ref: '#/components/parameters/CloudWorkloadSecurityAgentRuleID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleUpdateRequest'
+        description: New definition of the Agent rule.
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '409':
+          $ref: '#/components/responses/ConcurrentModificationResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_cws_agent_rules_write
+      summary: Update a Cloud Workload Security Agent rule
+      tags:
+      - Cloud Workload Security
+      x-codegen-request-body-name: body
+      x-menu-order: 5
+      x-undo:
+        type: idempotent
   /api/v2/security_monitoring/configuration/security_filters:
     get:
       description: Get the list of configured security filters with their definitions.
@@ -7630,6 +8881,11 @@ paths:
           $ref: '#/components/responses/NotAuthorizedResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_read
       summary: Get all security filters
       tags:
       - Security Monitoring
@@ -7665,6 +8921,11 @@ paths:
           $ref: '#/components/responses/ConflictResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_write
       summary: Create a security filter
       tags:
       - Security Monitoring
@@ -7701,6 +8962,11 @@ paths:
           $ref: '#/components/responses/NotFoundResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_write
       summary: Delete a security filter
       tags:
       - Security Monitoring
@@ -7729,6 +8995,11 @@ paths:
           $ref: '#/components/responses/NotFoundResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_read
       summary: Get a security filter
       tags:
       - Security Monitoring
@@ -7765,6 +9036,11 @@ paths:
           $ref: '#/components/responses/ConcurrentModificationResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_filters_write
       summary: Update a security filter
       tags:
       - Security Monitoring
@@ -7787,6 +9063,13 @@ paths:
           description: OK
         '400':
           $ref: '#/components/responses/BadRequestResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_read
       summary: List rules
       tags:
       - Security Monitoring
@@ -7813,6 +9096,13 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_write
       summary: Create a detection rule
       tags:
       - Security Monitoring
@@ -7828,7 +9118,7 @@ paths:
               \   \"condition\": \"a > 0\",\n    \"notifications\": []\n  }],\n  \"options\":
               {\n    \"evaluationWindow\": 900,\n    \"keepAlive\": 3600,\n    \"maxSignalDuration\":
               86400\n  },\n  \"message\": \"Test rule\",\n  \"tags\": [],\n  \"isEnabled\":
-              true\n}"
+              true,\n  \"type\": \"log_detection\"\n}"
           step: there is a valid "security_rule" in the system
       x-menu-order: 2
       x-undo:
@@ -7850,6 +9140,13 @@ paths:
           $ref: '#/components/responses/NotAuthorizedResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_write
       summary: Delete an existing rule
       tags:
       - Security Monitoring
@@ -7870,6 +9167,13 @@ paths:
           description: OK
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_read
       summary: Get a rule's details
       tags:
       - Security Monitoring
@@ -7908,6 +9212,13 @@ paths:
           $ref: '#/components/responses/NotAuthorizedResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_rules_write
       summary: Update an existing rule
       tags:
       - Security Monitoring
@@ -7983,6 +9294,13 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
       summary: Get a quick list of security signals
       tags:
       - Security Monitoring
@@ -8017,6 +9335,13 @@ paths:
           $ref: '#/components/responses/BadRequestResponse'
         '403':
           $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
       summary: Get a list of security signals
       tags:
       - Security Monitoring
@@ -8027,6 +9352,262 @@ paths:
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+  /api/v2/service_accounts:
+    post:
+      description: Create a service account for your organization.
+      operationId: CreateServiceAccount
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/ServiceAccountCreateRequest'
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/UserResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Authentication error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Create a service account
+      tags:
+      - Users
+      x-codegen-request-body-name: body
+      x-given:
+        service_account_user:
+          parameters:
+          - name: body
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"email\": \"{{
+              unique }}@datadoghq.com\",\n      \"title\": \"user title\",\n      \"service_account\":
+              true\n     },\n     \"type\": \"users\"\n  }\n}"
+          step: there is a valid "service_account_user" in the system
+      x-menu-order: 1
+      x-undo:
+        operationId: DisableUser
+        parameters:
+        - name: user_id
+          source: data.id
+        type: unsafe
+  /api/v2/service_accounts/{service_account_id}/application_keys:
+    get:
+      description: List all application keys available for this service account.
+      operationId: ListServiceAccountApplicationKeys
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/PageSize'
+      - $ref: '#/components/parameters/PageNumber'
+      - $ref: '#/components/parameters/ApplicationKeysSortParameter'
+      - $ref: '#/components/parameters/ApplicationKeyFilterParameter'
+      - $ref: '#/components/parameters/ApplicationKeyFilterCreatedAtStartParameter'
+      - $ref: '#/components/parameters/ApplicationKeyFilterCreatedAtEndParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ListApplicationKeysResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: List application keys for this service account
+      tags:
+      - Service Accounts
+      x-undo:
+        type: safe
+    post:
+      description: Create an application key for this service account.
+      operationId: CreateServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/ApplicationKeyCreateRequest'
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ApplicationKeyResponse'
+          description: Created
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Create an application key for this service account
+      tags:
+      - Service Accounts
+      x-codegen-request-body-name: body
+      x-given:
+        service_account_application_key:
+          parameters:
+          - name: service_account_id
+            value: '"{{ service_account_user.data.id }}"'
+          - name: body
+            value: "{\n  \"data\": {\n    \"attributes\": {\n      \"name\": \"{{
+              unique }}\"\n    },\n    \"type\": \"application_keys\"\n  }\n}"
+          step: there is a valid "service_account_application_key" for "service_account_user"
+      x-undo:
+        operationId: DeleteServiceAccountApplicationKey
+        parameters:
+        - name: app_key_id
+          source: data.id
+        - name: service_account_id
+          source: data.relationships.owned_by.data.id
+        type: unsafe
+  /api/v2/service_accounts/{service_account_id}/application_keys/{app_key_id}:
+    delete:
+      description: Delete an application key owned by this service account.
+      operationId: DeleteServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/ApplicationKeyID'
+      responses:
+        '204':
+          description: No Content
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Delete an application key for this service account
+      tags:
+      - Service Accounts
+      x-menu-order: 3
+      x-undo:
+        type: idempotent
+    get:
+      description: Get an application key owned by this service account.
+      operationId: GetServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/ApplicationKeyID'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PartialApplicationKeyResponse'
+          description: OK
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Get one application key for this service account
+      tags:
+      - Service Accounts
+      x-menu-order: 1
+      x-undo:
+        type: safe
+    patch:
+      description: Edit an application key owned by this service account.
+      operationId: UpdateServiceAccountApplicationKey
+      parameters:
+      - $ref: '#/components/parameters/ServiceAccountID'
+      - $ref: '#/components/parameters/ApplicationKeyID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/ApplicationKeyUpdateRequest'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PartialApplicationKeyResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Edit an application key for this service account
+      tags:
+      - Service Accounts
+      x-codegen-request-body-name: body
+      x-menu-order: 2
+      x-undo:
+        type: idempotent
   /api/v2/services:
     get:
       description: Get all incident services uploaded for the requesting user's organization.
@@ -8053,6 +9634,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get a list of all incident services
       tags:
       - Incident Services
@@ -8086,6 +9674,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Create a new incident service
       tags:
       - Incident Services
@@ -8123,6 +9718,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Delete an existing incident service
       tags:
       - Incident Services
@@ -8155,6 +9757,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get details of an incident service
       tags:
       - Incident Services
@@ -8191,6 +9800,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Update an existing incident service
       tags:
       - Incident Services
@@ -8226,6 +9842,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get a list of all incident teams
       tags:
       - Incident Teams
@@ -8259,6 +9882,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Create a new incident team
       tags:
       - Incident Teams
@@ -8296,6 +9926,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Delete an existing incident team
       tags:
       - Incident Teams
@@ -8328,6 +9965,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_read
       summary: Get details of an incident team
       tags:
       - Incident Teams
@@ -8364,6 +10008,13 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '404':
           $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_write
       summary: Update an existing incident team
       tags:
       - Incident Teams
@@ -8402,6 +10053,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_invite
       summary: Send invitation emails
       tags:
       - Users
@@ -8449,6 +10107,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_invite
       summary: Get a user invitation
       tags:
       - Users
@@ -8522,6 +10187,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: List all users
       tags:
       - Users
@@ -8557,6 +10228,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Authentication error
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_invite
       summary: Create a user
       tags:
       - Users
@@ -8599,6 +10277,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Disable a user
       tags:
       - Users
@@ -8630,6 +10315,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get user details
       tags:
       - Users
@@ -8681,6 +10372,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Unprocessable Entity
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - user_access_manage
       summary: Update a user
       tags:
       - Users
@@ -8716,6 +10414,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get a user organization
       tags:
       - Users
@@ -8749,6 +10453,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Not found
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ: []
       summary: Get a user permissions
       tags:
       - Users
@@ -8764,10 +10474,11 @@ servers:
   variables:
     site:
       default: datadoghq.com
-      description: The regional site for our customers.
+      description: The regional site for Datadog customers.
       enum:
       - datadoghq.com
       - us3.datadoghq.com
+      - us5.datadoghq.com
       - datadoghq.eu
       - ddog-gov.com
     subdomain:
@@ -8790,6 +10501,9 @@ servers:
       default: api
       description: The subdomain where the API is deployed.
 tags:
+- description: Workload activity security rules for generating events using the Datadog
+    security Agent.
+  name: Cloud Workload Security
 - description: 'Interact with your dashboard lists through the API to
 
     organize, find, and share all of your dashboards with your team and
@@ -8823,7 +10537,7 @@ tags:
 
     See the [Archives Page](https://app.datadoghq.com/logs/pipelines/archives)
 
-    for a list of the archives currently configured in our UI.'
+    for a list of the archives currently configured in web UI.'
   externalDocs:
     description: Find out more at
     url: https://docs.datadoghq.com/logs/archives/
@@ -8863,6 +10577,8 @@ tags:
 
     signals.'
   name: Security Monitoring
+- description: Create, edit, and disable service accounts.
+  name: Service Accounts
 - description: Create, edit, and disable users.
   externalDocs:
     url: https://docs.datadoghq.com/account_management/users