Files
trufflehog/pkg/analyzer/analyzers/datadog/permissions.yaml
Amaan Ullah bb506f63a1 Analyzer/datadog (#4132)
* task: Datadog analyzer init commit with limited resources and permissions
No cases covered

* task: added more permissions

* task: added more permissions | refactoring

* task: added domain handling

* refactor: incorporated PR feedback

* task: Analyzer Result implementation for enterprise

* task: added tests | Analysis Info configuration changes | permissions.yaml

* revert: reverted datadog detector base URL

* refactor: streamline Datadog API key analysis and permission handling

- Simplified API key retrieval logic by removing redundant checks for "key".
- Enhanced permission binding extraction by introducing a new function for permissions.
- Cleaned up resource binding logic for better clarity and maintainability.
- Removed unnecessary ID fields from scopes.json to reduce clutter.
2025-06-10 11:51:33 -05:00

69 lines
1.7 KiB
YAML

permissions:
- dashboards_read
- dashboards_write
- dashboards_public_share
- monitors_read
- monitors_write
- logs_modify_indexes
- logs_write_pipelines
- logs_write_archives
- logs_generate_metrics
- monitors_downtime
- logs_read_data
- logs_read_archives
- security_monitoring_rules_read
- security_monitoring_rules_write
- security_monitoring_signals_read
- security_monitoring_signals_write
- user_access_invite
- user_app_keys
- org_app_keys_read
- org_app_keys_write
- user_access_manage
- synthetics_private_location_read
- synthetics_private_location_write
- usage_read
- metric_tags_write
- audit_logs_read
- api_keys_read
- api_keys_write
- synthetics_global_variable_read
- synthetics_global_variable_write
- synthetics_read
- synthetics_write
- synthetics_default_settings_read
- service_account_write
- apm_read
- apm_retention_filter_read
- apm_retention_filter_write
- rum_apps_write
- data_scanner_read
- data_scanner_write
- org_management
- security_monitoring_filters_read
- security_monitoring_filters_write
- incident_read
- incident_write
- incident_settings_write
- rum_apps_read
- security_monitoring_notification_profiles_read
- security_monitoring_notification_profiles_write
- apm_generate_metrics
- apm_pipelines_write
- apm_pipelines_read
- observability_pipelines_read
- workflows_read
- workflows_write
- workflows_run
- connections_read
- connections_write
- notebooks_read
- notebooks_write
- aws_configurations_manage
- azure_configurations_manage
- gcp_configurations_manage
- manage_integrations
- slos_read
- slos_write
- slos_corrections
- monitor_config_policy_write