generated: '2026-10-04' method: derived generator: derive-data-model.py source: - openapi/datadog-account-api-openapi.yml - openapi/datadog-accounts-api-openapi.yml - openapi/datadog-acknowledge-api-openapi.yml - openapi/datadog-across-api-openapi.yml - openapi/datadog-action-api-openapi.yml - openapi/datadog-active-api-openapi.yml - openapi/datadog-add-api-openapi.yml - openapi/datadog-agent-api-openapi.yml - openapi/datadog-agents-api-openapi.yml - openapi/datadog-aggregate-api-openapi.yml - openapi/datadog-aggregated-api-openapi.yml - openapi/datadog-all-api-openapi.yml notation: has_one = property $ref; has_many = array of $ref; belongs_to = _id field summary: entities: 400 entities_in_spec: 1984 relationships: 356 entities: - name: APIKeyCreateData fields: 2 description: Object used to create an API key. - name: APIKeyRelationships fields: 2 description: Resources related to the API key. - name: APIKeyUpdateData fields: 3 description: Object used to update an API key. - name: APIKeysResponse fields: 3 description: Response for a list of API keys. - name: APIKeysResponseMeta fields: 2 description: Additional information related to api keys response. - name: APITrigger fields: 1 description: Trigger a workflow from an API request. The workflow must be published. - name: AWSAccountCreateRequestAttributes fields: 9 description: The AWS Account Integration Config to be created. - name: AWSAccountCreateRequestData fields: 2 description: AWS Account Create Request data. - name: AWSAccountResponseAttributes fields: 11 description: AWS Account response attributes. - name: AWSAccountResponseData fields: 3 description: AWS Account response data. - name: AWSAccountUpdateRequestAttributes fields: 9 description: The AWS Account Integration Config to be updated. - name: AWSAccountUpdateRequestData fields: 3 description: AWS Account Update Request data. - name: AWSLogsConfig fields: 1 description: AWS Logs Collection config. - name: AWSLogsServicesResponseData fields: 3 description: AWS Logs Services response body - name: AWSMetricsConfig fields: 6 description: AWS Metrics Collection config. - name: AWSNamespacesResponseData fields: 3 description: AWS Namespaces response data. - name: AWSNewExternalIDResponseData fields: 3 description: AWS External ID response body. - name: AWSResourcesConfig fields: 2 description: AWS Resources Collection config. - name: AWSTracesConfig fields: 1 description: AWS Traces Collection config. - name: AccountFilteringConfig fields: 3 description: The account filtering configuration. - name: ActionConnectionData fields: 3 description: Data related to the connection. - name: ActionConnectionDataUpdate fields: 2 description: Data related to the connection update. - name: ActionQuery fields: 5 description: An action query. This query type is used to trigger an action, such as sending a HTTP request. - name: ActionQuerySpecObject fields: 4 description: The action query spec object. - name: ActiveBillingDimensionsBody fields: 3 description: Active billing dimensions data. - name: Advisory fields: 3 description: Advisory. - name: Annotation fields: 3 description: A list of annotations used in the workflow. These are like sticky notes for your workflow! - name: AnnotationDisplay fields: 1 description: The definition of `AnnotationDisplay` object. - name: AppBuilderEvent fields: 2 description: An event on a UI component that triggers a response or action in an app. - name: AppMeta fields: 9 description: Metadata of an app. - name: AppRelationship fields: 2 description: The app's publication relationship and custom connections. - name: ApplicationKeyCreateData fields: 2 description: Object used to create an application key. - name: ApplicationKeyRelationships fields: 1 description: Resources related to the application key. - name: ApplicationKeyResponseMeta fields: 2 description: Additional information related to the application key response. - name: ApplicationKeyUpdateData fields: 3 description: Object used to update an application key. - name: ApplicationSecurityWafCustomRuleAction fields: 2 description: The definition of `ApplicationSecurityWafCustomRuleAction` object. - name: ApplicationSecurityWafCustomRuleAttributes fields: 9 description: A WAF custom rule. - name: ApplicationSecurityWafCustomRuleCondition fields: 2 description: One condition of the WAF Custom Rule. - name: ApplicationSecurityWafCustomRuleConditionParameters fields: 6 description: The scope of the WAF custom rule. - name: ApplicationSecurityWafCustomRuleCreateAttributes fields: 8 description: Create a new WAF custom rule. - name: ApplicationSecurityWafCustomRuleCreateData fields: 2 description: Object for a single WAF custom rule. - name: ApplicationSecurityWafCustomRuleData fields: 3 description: Object for a single WAF custom rule. - name: ApplicationSecurityWafCustomRuleScope fields: 2 description: The scope of the WAF custom rule. - name: ApplicationSecurityWafCustomRuleTags fields: 2 description: Tags associated with the WAF Custom Rule. The concatenation of category and type will form the security - name: ApplicationSecurityWafCustomRuleUpdateAttributes fields: 8 description: Update a WAF custom rule. - name: ApplicationSecurityWafCustomRuleUpdateData fields: 2 description: Object for a single WAF Custom Rule. - name: ApplicationSecurityWafExclusionFilterAttributes fields: 11 description: Attributes describing a WAF exclusion filter. - name: ApplicationSecurityWafExclusionFilterCreateAttributes fields: 8 description: Attributes for creating a WAF exclusion filter. - name: ApplicationSecurityWafExclusionFilterCreateData fields: 2 description: Object for creating a single WAF exclusion filter. - name: ApplicationSecurityWafExclusionFilterResource fields: 3 description: A JSON:API resource for an WAF exclusion filter. - name: ApplicationSecurityWafExclusionFilterRulesTarget fields: 2 description: Target WAF rules based either on an identifier or tags. - name: ApplicationSecurityWafExclusionFilterScope fields: 2 description: Deploy on services based on their environment and/or service name. - name: ApplicationSecurityWafExclusionFilterUpdateAttributes fields: 8 description: Attributes for updating a WAF exclusion filter. - name: ApplicationSecurityWafExclusionFilterUpdateData fields: 2 description: Object for updating a single WAF exclusion filter. - name: Asset fields: 3 description: A single vulnerable asset - name: AssetAttributes fields: 7 description: The JSON:API attributes of the asset. - name: AuditLogsEvent fields: 3 description: Object description of an Audit Logs event after it is processed and stored by Datadog. - name: AuditLogsEventsResponse fields: 3 description: Response object with all events matching the request and pagination information. - name: AuditLogsResponseMetadata fields: 5 description: The metadata associated with a request. - name: AuditLogsSearchEventsRequest fields: 4 description: The request for a Audit Logs events list. - name: AuthNMapping fields: 4 description: The AuthN Mapping object returned by API. - name: AuthNMappingRelationships fields: 3 description: All relationships associated with AuthN Mapping. - name: AwsCURConfig fields: 3 description: AWS CUR config. - name: AwsOnDemandData fields: 3 description: Single AWS on demand task. - name: AwsScanOptionsData fields: 3 description: Single AWS Scan Options entry. - name: AzureUCConfigPair fields: 3 description: Azure config pair. - name: AzureUCConfigPostRequestAttributes fields: 6 description: Attributes for Azure config Post Request. - name: BudgetAttributes fields: 11 description: The attributes of a budget. - name: BulkMuteFindingsRequestData fields: 4 description: Data object containing the new bulk mute properties of the finding. - name: CIAppCIError fields: 4 description: Contains information of the CI error. - name: CIAppGitInfo fields: 12 description: If pipelines are triggered due to actions to a Git repository, then all payloads must contain this. - name: CIAppHostInfo fields: 4 description: Contains information of the host running the pipeline, stage, job, or step. - name: CIAppPipelineEventFinishedPipeline fields: 20 description: Details of a finished pipeline. - name: CIAppPipelineEventInProgressPipeline fields: 19 description: Details of a running pipeline. - name: CIAppPipelineEventJob fields: 19 description: Details of a CI job. - name: CIAppPipelineEventStage fields: 16 description: Details of a CI stage. - name: CIAppPipelineEventStep fields: 19 description: Details of a CI step. - name: CIAppPipelineEventsRequest fields: 4 description: The request for a pipelines search. - name: CIAppPipelineEventsResponse fields: 3 description: Response object with all pipeline events matching the request and pagination information. - name: CIAppPipelinesAggregateRequest fields: 4 description: The object sent with the request to retrieve aggregation buckets of pipeline events from your organization. - name: CIAppPipelinesAnalyticsAggregateResponse fields: 3 description: The response object for the pipeline events aggregate API endpoint. - name: CIAppPipelinesGroupBy fields: 6 description: A group-by rule. - name: CIAppQueryOptions fields: 2 description: Global query options that are used during the query. - name: CIAppResponseLinks fields: 1 description: Links attributes. - name: CIAppResponseMetadataWithPagination fields: 5 description: The metadata associated with a request. - name: CIAppTestEventsRequest fields: 4 description: The request for a tests search. - name: CIAppTestEventsResponse fields: 3 description: Response object with all test events matching the request and pagination information. - name: CIAppTestsAggregateRequest fields: 4 description: The object sent with the request to retrieve aggregation buckets of test events from your organization. - name: CIAppTestsAnalyticsAggregateResponse fields: 3 description: The response object for the test events aggregate API endpoint. - name: CIAppTestsGroupBy fields: 6 description: A group-by rule. - name: Case fields: 4 description: A case - name: CaseAttributes fields: 12 description: Case attributes - name: CaseCreate fields: 3 description: Case creation data - name: CaseCreateRelationships fields: 2 description: Relationships formed with the case on creation - name: CaseRelationships fields: 4 description: Resources related to a case - name: ChangeEventCustomAttributes fields: 6 description: Object representing custom change event attributes. - name: CloudConfigurationComplianceRuleOptions fields: 3 description: Options for cloud_configuration rules. - name: CloudConfigurationRuleComplianceSignalOptions fields: 4 description: How to generate compliance signals. Useful for cloud_configuration rules only. - name: CloudConfigurationRuleCreatePayload fields: 9 description: Create a new cloud configuration rule. - name: CloudConfigurationRuleOptions fields: 1 description: Options on cloud configuration rules. - name: CloudConfigurationRulePayload fields: 9 description: The payload of a cloud configuration rule. - name: CloudWorkloadSecurityAgentPolicyData fields: 3 description: Object for a single Agent policy - name: CloudWorkloadSecurityAgentRuleAction fields: 4 description: The action the rule can perform if triggered - name: CloudWorkloadSecurityAgentRuleAttributes fields: 21 description: A Cloud Workload Security Agent rule returned by the API - name: CloudWorkloadSecurityAgentRuleData fields: 3 description: Object for a single Agent rule - name: CloudflareAccountResponseData fields: 3 description: Data object of a Cloudflare account. - name: CompletionGate fields: 2 description: Used to create conditions before running subsequent actions. - name: Component fields: 5 description: '[Definition of a UI component in the app](https://docs.datadoghq.com/service_management/app_builder/components/)' - name: ComponentGrid fields: 5 description: A grid component. The grid component is the root canvas for an app and contains all other components. - name: ConfluentAccountResponseData fields: 3 description: An API key and API secret pair that represents a Confluent account. - name: ConfluentResourceResponseData fields: 3 description: Confluent Cloud resource data. - name: ConnectionEnv fields: 3 description: A list of connections or connection groups used in the workflow. - name: ContainerImageAttributes fields: 17 description: Attributes for a Container Image. - name: CreateRuleResponseData fields: 4 description: Create rule response data. - name: CsmCloudAccountsCoverageAnalysisAttributes fields: 5 description: CSM Cloud Accounts Coverage Analysis attributes. - name: CsmCoverageAnalysis fields: 4 description: CSM Coverage Analysis. - name: CsmHostsAndContainersCoverageAnalysisAttributes fields: 5 description: CSM Hosts and Containers Coverage Analysis attributes. - name: CsmServerlessCoverageAnalysisAttributes fields: 3 description: CSM Serverless Resources Coverage Analysis attributes. - name: CustomCostsFileMetadata fields: 8 description: Schema of a Custom Costs metadata. - name: CustomCostsFileMetadataHighLevel fields: 3 description: JSON API format for a Custom Costs file. - name: CustomCostsFileMetadataWithContent fields: 9 description: Schema of a cost file's metadata. - name: CustomDestinationResponseDefinition fields: 3 description: The definition of a custom destination. - name: CustomFrameworkData fields: 2 description: Contains type and attributes for custom frameworks. - name: CustomFrameworkRequirement fields: 2 description: Framework Requirement. - name: DashboardListItemRequest fields: 2 description: A dashboard within a list. - name: DashboardListItemResponse fields: 2 description: A dashboard within a list. - name: DataRelationshipsTeams fields: 1 description: Associates teams with this schedule in a data structure. - name: DependencyLocation fields: 5 description: Static library vulnerability location. - name: Deployment fields: 4 description: The version of the app that was published. - name: DeploymentMetadata fields: 4 description: Metadata object containing the publication creation information. - name: DeploymentRelationship fields: 2 description: Information pointing to the app's publication status. - name: DetailedFindingAttributes fields: 11 description: The JSON:API attributes of the detailed finding. - name: DowntimeMeta fields: 1 description: Pagination metadata returned by the API. - name: DowntimeRelationships fields: 2 description: All relationships associated with downtime. - name: DowntimeResponseData fields: 4 description: Downtime data. - name: EntityData fields: 5 description: Entity data. - name: EntityRelationships fields: 5 description: Entity relationships. - name: EntityV3API fields: 7 description: Schema for API entities. - name: EntityV3APIDatadog fields: 5 description: Datadog product integrations for the API entity. - name: EntityV3DatadogPerformance fields: 1 description: Performance stats association. - name: EntityV3DatadogPipelines fields: 1 description: CI Pipelines association. - name: EntityV3Datastore fields: 7 description: Schema for datastore entities. - name: EntityV3Integrations fields: 2 description: A base schema for defining third-party integrations. - name: EntityV3Metadata fields: 12 description: The definition of Entity V3 Metadata object. - name: EntityV3Queue fields: 7 description: Schema for queue entities. - name: EntityV3Service fields: 7 description: Schema for service entities. - name: EntityV3ServiceDatadog fields: 5 description: Datadog product integrations for the service entity. - name: EntityV3System fields: 7 description: Schema for system entities. - name: EntityV3SystemDatadog fields: 4 description: Datadog product integrations for the service entity. - name: EscalationPolicyCreateRequestData fields: 3 description: Represents the data for creating an escalation policy, including its attributes, relationships, and resource type. - name: EscalationPolicyData fields: 4 description: Represents the data for a single escalation policy, including its attributes, ID, relationships, and resource type. - name: EscalationPolicyDataRelationships fields: 2 description: Represents the relationships for an escalation policy, including references to steps and teams. - name: EscalationPolicyUpdateRequestData fields: 4 description: Represents the data for updating an existing escalation policy, including its ID, attributes, relationships, and resource type. - name: EventAttributes fields: 19 description: Object description of attributes from your event. - name: Event_2 fields: 3 description: A single event from the Datadog Events Explorer - name: EventsListRequest fields: 4 description: The object sent with the request to retrieve a list of events from your organization. - name: EventsListResponse fields: 3 description: The response object with all events matching the request and pagination information. - name: EventsResponseMetadata fields: 5 description: The metadata associated with a request. - name: ExternalUser fields: 8 description: Definition of a user. - name: FastlyAccountResponseData fields: 3 description: Data object of a Fastly account. - name: FastlyServiceData fields: 3 description: Data object for Fastly service requests. - name: FindingAttributes fields: 10 description: The JSON:API attributes of the finding. - name: FrameworkHandleAndVersionResponseData fields: 3 description: Contains type and attributes for custom frameworks. - name: FullAPIKey fields: 4 description: Datadog API key. - name: FullApplicationKey fields: 4 description: Datadog application key. - name: GCPSTSServiceAccount fields: 4 description: Info on your service account. - name: GCPSTSServiceAccountAttributes fields: 11 description: Attributes associated with your service account. - name: GetAppResponse fields: 4 description: The full app definition response object. - name: HTTPTokenAuth fields: 5 description: The definition of `HTTPTokenAuth` object. - name: HTTPTokenAuthUpdate fields: 5 description: The definition of `HTTPTokenAuthUpdate` object. - name: HistoricalJobOptions fields: 7 description: Job options. - name: HistoricalJobResponseData fields: 3 description: Historical job response data. - name: IPAllowlistData fields: 3 description: IP allowlist data. - name: IncidentAttachmentData fields: 4 description: A single incident attachment. - name: IncidentCreateData fields: 3 description: Incident data for a create request. - name: IncidentIntegrationMetadataAttributes fields: 6 description: Incident integration metadata's attributes for a create request. - name: IncidentIntegrationMetadataResponseData fields: 4 description: Incident integration metadata from a response. - name: IncidentIntegrationRelationships fields: 2 description: The incident's integration relationships from a response. - name: IncidentResponseAttributes fields: 24 description: The incident's attributes from a response. - name: IncidentResponseData fields: 4 description: Incident data from a response. - name: IncidentResponseMeta fields: 1 description: The metadata object containing pagination metadata. - name: IncidentResponseRelationships fields: 8 description: The incident's relationships from a response. - name: IncidentSearchResponseAttributes fields: 3 description: Attributes returned by an incident search. - name: IncidentSearchResponseFacetsData fields: 11 description: Facet data for incidents returned by a search query. - name: IncidentSearchResponseFieldFacetData fields: 2 description: Facet value and number of occurrences for a property field of an incident. - name: IncidentSearchResponseNumericFacetData fields: 2 description: Facet data numeric attributes of an incident. - name: IncidentSearchResponsePropertyFieldFacetData fields: 3 description: Facet data for the incident property fields. - name: IncidentSearchResponseUserFacetData fields: 5 description: Facet data for user attributes of an incident. - name: IncidentServiceCreateData fields: 3 description: Incident Service payload for create requests. - name: IncidentServiceRelationships fields: 2 description: The incident service's relationships. - name: IncidentServiceResponseData fields: 4 description: Incident Service data from responses. - name: IncidentServiceUpdateData fields: 4 description: Incident Service payload for update requests. - name: IncidentTeamCreateData fields: 3 description: Incident Team data for a create request. - name: IncidentTeamRelationships fields: 2 description: The incident team's relationships. - name: IncidentTeamResponseData fields: 4 description: Incident Team data from a response. - name: IncidentTeamUpdateData fields: 4 description: Incident Team data for an update request. - name: IncidentTodoAttributes fields: 7 description: Incident todo's attributes. - name: IncidentTodoRelationships fields: 2 description: The incident's relationships from a response. - name: IncidentTodoResponseData fields: 4 description: Incident todo response data. - name: IncidentTypeObject fields: 3 description: Incident type response data. - name: IncidentUpdateData fields: 4 description: Incident data for an update request. - name: IncidentUpdateRelationships fields: 3 description: The incident's relationships for an update request. - name: JobDefinition fields: 14 description: Definition of a historical job. - name: LayerAttributes fields: 6 description: Describes key properties of a Layer, including rotation details, name, start/end times, and any restrictions. - name: LayerAttributesInterval fields: 2 description: Defines how often the rotation repeats, using a combination of days and optional seconds. - name: ListAppsResponse fields: 3 description: A paginated list of apps matching the specified filters and sorting. - name: ListAppsResponseDataItems fields: 5 description: An app definition object. This contains only basic information about the app such as ID, name, and tags. - name: ListExternalUserGroupResponseResourcesItems fields: 6 description: Resources returned in response to a List groups request. - name: ListExternalUsersResponseResourcesItems fields: 8 description: Resources returned in response to a List users request. - name: ListPowerpacksResponse fields: 4 description: Response object which includes all powerpack configurations. - name: ListVulnerabilitiesResponse fields: 3 description: The expected response schema when listing vulnerabilities. - name: ListVulnerableAssetsResponse fields: 3 description: The expected response schema when listing vulnerable assets. - name: LogsAggregateRequest fields: 5 description: The object sent with the request to retrieve a list of logs from your organization. - name: LogsArchiveDefinition fields: 3 description: The definition of an archive. - name: LogsGroupBy fields: 6 description: A group by rule - name: LogsIndex fields: 6 description: Configuration for a single Datadog log index - name: LogsListRequest fields: 4 description: The request for a logs list. - name: LogsListResponse fields: 3 description: Response object with all logs matching the request and pagination information. - name: LogsMetricCreateAttributes fields: 3 description: The object describing the Datadog log-based metric to create. - name: LogsMetricResponseAttributes fields: 3 description: The object describing a Datadog log-based metric. - name: LogsMetricResponseData fields: 3 description: The log-based metric properties. - name: LogsMetricUpdateAttributes fields: 3 description: The log-based metric properties that will be updated. - name: LogsResponseMetadata fields: 5 description: The metadata associated with a request - name: MetricAssetAttributes fields: 2 description: Assets related to the object, including title and url. - name: MetricAssetResponseRelationships fields: 4 description: Relationships to assets related to the metric. - name: MetricSeries fields: 9 description: A metric to submit to Datadog. - name: MetricSeries_2 fields: 8 description: A single metric series containing data points and associated metadata - name: MicrosoftTeamsTenantBasedHandleAttributes fields: 4 description: Tenant-based handle attributes. - name: MicrosoftTeamsWorkflowsWebhookHandleResponseData fields: 3 description: Workflows Webhook handle data from a response. - name: Monitor fields: 14 description: A Datadog monitor that watches a metric or check and alerts when thresholds are exceeded - name: MonitorConfigPolicyResponseData fields: 3 description: A monitor configuration policy data. - name: MonitorNotificationRuleData fields: 4 description: Monitor notification rule data. - name: MonitorOptions fields: 14 description: Configuration options for a monitor controlling evaluation, notification, and recovery behavior - name: NotificationRuleAttributes fields: 10 description: Attributes of the notification rule. - name: NullableRelationshipToUser fields: 1 description: Relationship to user. - name: NullableUserRelationship fields: 1 description: Relationship to user. - name: ObservabilityPipelineAwsAuth fields: 3 description: AWS authentication credentials used for accessing AWS services such as S3. - name: ObservabilityPipelineData fields: 3 description: Contains the pipeline’s ID, type, and configuration attributes. - name: ObservabilityPipelineDataAttributes fields: 2 description: Defines the pipeline’s name and its components (sources, processors, and destinations). - name: ObservabilityPipelineEnrichmentTableFile fields: 4 description: Defines a static enrichment table loaded from a CSV file. - name: ObservabilityPipelineGcpAuth fields: 1 description: GCP credentials used to authenticate with Google Cloud Storage. - name: ObservabilityPipelineKafkaSource fields: 7 description: The `kafka` source ingests data from Apache Kafka topics. - name: ObservabilityPipelineParseGrokProcessorRule fields: 3 description: A Grok parsing rule used in the `parse_grok` processor. Each rule defines how to extract structured fields - name: ObservabilityPipelineQuotaProcessorOverride fields: 2 description: Defines a custom quota limit that applies to specific log events based on matching field values. - name: ObservabilityPipelineTls fields: 3 description: Configuration for enabling TLS encryption between the pipeline component and external services. - name: OktaAccount fields: 3 description: Schema for an Okta account. - name: OpsgenieServiceResponseData fields: 3 description: Opsgenie service data from a response. - name: OrgConfigRead fields: 3 description: A single Org Config. - name: PartialAPIKey fields: 4 description: Partial Datadog API key. - name: PartialApplicationKey fields: 4 description: Partial Datadog application key. - name: PowerpackAttributes fields: 5 description: Powerpack attribute object. - name: PowerpackData fields: 4 description: Powerpack data object. - name: PowerpackGroupWidget fields: 3 description: Powerpack group widget definition object. - name: Project fields: 4 description: A Project - name: ProjectRelationship fields: 1 description: Relationship to project - name: ProjectRelationships fields: 2 description: Project relationships - name: QueryFormula fields: 2 description: A formula for calculation based on one or more queries. - name: RUMAggregateRequest fields: 5 description: The object sent with the request to retrieve aggregation buckets of RUM events from your organization. - name: RUMAnalyticsAggregateResponse fields: 3 description: The response object for the RUM events aggregate API endpoint. - name: RUMEventsResponse fields: 3 description: Response object with all events matching the request and pagination information. - name: RUMGroupBy fields: 6 description: A group-by rule. - name: RUMResponseMetadata fields: 5 description: The metadata associated with a request. - name: RUMSearchEventsRequest fields: 4 description: The request for a RUM events list. - name: RelationAttributes fields: 3 description: Relation attributes. - name: RelationRelationships fields: 2 description: Relation relationships. - name: RelationResponse fields: 6 description: Relation response data. - name: RelationToEntity fields: 2 description: Relation to entity. - name: RelationshipItem fields: 2 description: Relationship entry. - name: RelationshipToIncidentIntegrationMetadatas fields: 1 description: A relationship reference for multiple integration metadata objects. - name: RelationshipToPermissions fields: 1 description: Relationship to multiple permissions objects. - name: RelationshipToRole fields: 1 description: Relationship to role. - name: RelationshipToRoles fields: 1 description: Relationship to roles. - name: RelationshipToRule fields: 1 description: Scorecard create rule response relationship. - name: RelationshipToTeam fields: 1 description: Relationship to team. - name: RelationshipToTeamLinks fields: 2 description: Relationship between a team and a team link - name: RelationshipToUser fields: 1 description: Relationship to user. - name: RelationshipToUserTeamPermission fields: 2 description: Relationship between a user team permission and a team - name: RelationshipToUsers fields: 1 description: Relationship to users. - name: Remediation fields: 8 description: Vulnerability remediation. - name: ResourceFilterAttributes fields: 2 description: Attributes of a resource filter. - name: ResponseMetaAttributes fields: 1 description: Object describing meta attributes of response. - name: RestrictionPolicy fields: 3 description: Restriction policy object. - name: RestrictionQueryWithRelationships fields: 4 description: Restriction query object returned by the API. - name: RestrictionQueryWithoutRelationships fields: 3 description: Restriction query object returned by the API. - name: RetentionFilterAll fields: 3 description: The definition of the retention filter. - name: RetryStrategy fields: 2 description: The definition of `RetryStrategy` object. - name: Role fields: 4 description: Role object returned by the API. - name: RoleCreateData fields: 3 description: Data related to the creation of a role. - name: RoleCreateResponseData fields: 4 description: Role object returned by the API. - name: RoleRelationships fields: 1 description: Relationships of the role object. - name: RoleResponseRelationships fields: 1 description: Relationships of the role object returned by the API. - name: RoleUpdateData fields: 4 description: Data related to the update of a role. - name: RoleUpdateResponseData fields: 4 description: Role object returned by the API. - name: RuleAttributes fields: 9 description: Details of a rule. - name: RumMetricCreateAttributes fields: 5 description: The object describing the Datadog rum-based metric to create. - name: RumMetricResponseAttributes fields: 5 description: The object describing a Datadog rum-based metric. - name: RumMetricResponseData fields: 3 description: The rum-based metric properties. - name: RumMetricUpdateAttributes fields: 3 description: The rum-based metric properties that will be updated. - name: RumRetentionFilterData fields: 3 description: The RUM retention filter. - name: RunHistoricalJobRequestAttributes fields: 3 description: Run a historical job request. - name: SBOMAttributes fields: 6 description: The JSON:API attributes of the SBOM. - name: ScheduleCreateRequestData fields: 3 description: The core data wrapper for creating a schedule, encompassing attributes, relationships, and the resource type. - name: ScheduleCreateRequestDataAttributesLayersItems fields: 7 description: Describes a schedule layer, including rotation intervals, members, restrictions, and timeline settings. - name: ScheduleData fields: 4 description: Represents the primary data object for a schedule, linking attributes and relationships. - name: ScheduleDataRelationships fields: 2 description: Groups the relationships for a schedule object, referencing layers and teams. - name: ScheduleRequestDataAttributesLayersItemsMembersItems fields: 1 description: Defines a single member within a schedule layer, including the reference to the underlying user. - name: ScheduleUpdateRequestData fields: 4 description: Contains all data needed to update an existing schedule, including its attributes (such as name and time zone) and any relationships to teams. - name: ScheduleUpdateRequestDataAttributesLayersItems fields: 8 description: Represents a layer within a schedule update, including rotation details, members, - name: SecurityFilter fields: 3 description: The security filter's properties. - name: SecurityMonitoringFilter fields: 2 description: The rule's suppression filter. - name: SecurityMonitoringReferenceTable fields: 5 description: Reference tables used in the queries. - name: SecurityMonitoringRuleCase fields: 5 description: Case when signal is generated. - name: SecurityMonitoringRuleCaseAction fields: 2 description: Action to perform when a signal is triggered. Only available for Application Security rule type. - name: SecurityMonitoringRuleCaseCreate fields: 5 description: Case when signal is generated. - name: SecurityMonitoringRuleOptions fields: 10 description: Options. - name: SecurityMonitoringRuleThirdPartyOptions fields: 4 description: Options on third party detection method. - name: SecurityMonitoringRuleUpdatePayload fields: 14 description: Update an existing rule. - name: SecurityMonitoringSignal fields: 3 description: Object description of a security signal. - name: SecurityMonitoringSignalRuleCreatePayload fields: 10 description: Create a new signal correlation rule. - name: SecurityMonitoringSignalRulePayload fields: 10 description: The payload of a signal correlation rule. - name: SecurityMonitoringSignalRuleResponse fields: 18 description: Rule. - name: SecurityMonitoringSignalTriageAttributes fields: 9 description: Attributes describing a triage state update operation over a security signal. - name: SecurityMonitoringSignalsListResponse fields: 3 description: The response object with all security signals matching the request - name: SecurityMonitoringStandardRuleCreatePayload fields: 13 description: Create a new rule. - name: SecurityMonitoringStandardRulePayload fields: 13 description: The payload of a rule. - name: SecurityMonitoringStandardRuleQuery fields: 9 description: Query for matching rule. - name: SecurityMonitoringStandardRuleResponse fields: 24 description: Rule. - name: SecurityMonitoringStandardRuleTestPayload fields: 13 description: The payload of a rule to test - name: SecurityMonitoringSuppression fields: 3 description: The suppression rule's properties. - name: SecurityMonitoringSuppressionAttributes fields: 14 description: The attributes of the suppression rule. - name: SecurityMonitoringThirdPartyRuleCaseCreate fields: 4 description: Case when a signal is generated by a third party rule. - name: SecurityMonitoringTriageUser fields: 5 description: Object representing a given user entity. - name: Selectors fields: 4 description: Selectors are used to filter security issues for which notifications should be generated. - name: SensitiveDataScannerConfigurationRelationships fields: 1 description: Relationships of the configuration. - name: SensitiveDataScannerGroupAttributes fields: 5 description: Attributes of the Sensitive Data Scanner group. - name: SensitiveDataScannerGroupCreate fields: 3 description: Data related to the creation of a group. - name: SensitiveDataScannerGroupRelationships fields: 2 description: Relationships of the group. - name: SensitiveDataScannerGroupResponse fields: 4 description: Response data related to the creation of a group. - name: SensitiveDataScannerGroupUpdate fields: 4 description: Data related to the update of a group. - name: SensitiveDataScannerMetaVersionOnly fields: 1 description: Meta payload containing information about the API. - name: SensitiveDataScannerRuleAttributes fields: 10 description: Attributes of the Sensitive Data Scanner rule. - name: SensitiveDataScannerRuleCreate fields: 3 description: Data related to the creation of a rule. - name: SensitiveDataScannerRuleRelationships fields: 2 description: Relationships of a scanning rule. - name: SensitiveDataScannerRuleResponse fields: 4 description: Response data related to the creation of a rule. - name: SensitiveDataScannerRuleUpdate fields: 4 description: Data related to the update of a rule. - name: ServiceAccountCreateData fields: 3 description: Object to create a service account User. - name: ServiceDefinitionData fields: 3 description: Service definition data. - name: ServiceDefinitionV1 fields: 8 description: Deprecated - Service definition V1 for providing additional service metadata and integrations. - name: ServiceDefinitionV2 fields: 11 description: Service definition V2 for providing service metadata and integrations. - name: ServiceDefinitionV2Dot1Integrations fields: 2 description: Third party integrations that Datadog supports. - name: ServiceDefinitionV2Dot2 fields: 15 description: Service definition v2.2 for providing service metadata and integrations. - name: ServiceDefinitionV2Dot2Integrations fields: 2 description: Third party integrations that Datadog supports. - name: ShiftData fields: 4 description: The definition of `ShiftData` object. - name: Span fields: 3 description: Object description of a spans after being processed and stored by Datadog. - name: SpansAggregateRequestAttributes fields: 4 description: The object containing all the query parameters. - name: SpansGroupBy fields: 6 description: A group by rule. - name: SpansListRequestAttributes fields: 4 description: The object containing all the query parameters. - name: SpansListResponse fields: 3 description: Response object with all spans matching the request and pagination information. - name: SpansListResponseMetadata fields: 5 description: The metadata associated with a request. - name: SpansMetricCreateAttributes fields: 3 description: The object describing the Datadog span-based metric to create. - name: SpansMetricResponseAttributes fields: 3 description: The object describing a Datadog span-based metric. - name: SpansMetricResponseData fields: 3 description: The span-based metric properties. - name: SpansMetricUpdateAttributes fields: 3 description: The span-based metric properties that will be updated. - name: Spec fields: 7 description: The spec defines what the workflow does. - name: Step fields: 9 description: A Step is a sub-component of a workflow. Each Step performs an action. - name: Team fields: 4 description: A team - name: TeamCreate fields: 3 description: Team create - name: TeamLink fields: 3 description: Team link - name: TeamLinkAttributes fields: 4 description: Team link attributes - name: TeamOnCallRespondersDataRelationships fields: 2 description: Relationship objects linked to a team's on-call responder configuration, including escalations and responders. - name: TeamPermissionSetting fields: 3 description: Team permission setting - name: TeamRelationships fields: 2 description: Resources related to a team - name: TeamUpdate fields: 3 description: Team update request - name: TeamsResponse fields: 4 description: Response with multiple teams - name: TeamsResponseMeta fields: 1 description: Teams response metadata. - name: TimeRestriction fields: 4 description: Defines a single time restriction rule with start and end times and the applicable weekdays. - name: TimeRestrictions fields: 2 description: Holds time zone information and a list of time restrictions for a routing rule. - name: TriggerRateLimit fields: 2 description: Defines a rate limit for a trigger. - name: UpdateAppResponse fields: 4 description: The response object after an app is successfully updated. - name: UpdateRuleResponseData fields: 4 description: The data for a rule update response. - name: UsageDataObject fields: 3 description: Usage data. - name: User fields: 4 description: User object returned by the API. - name: UserCreateData fields: 3 description: Object to create a user. - name: UserInvitationRelationships fields: 1 description: Relationships data for user invitation. - name: UserInvitationResponseData fields: 4 description: Object of a user invitation returned by the API. - name: UserRelationships fields: 1 description: Relationships of the user object. - name: UserResponseRelationships fields: 4 description: Relationships of the user object returned by the API. - name: UserTeam fields: 4 description: A user's relationship with a team - name: UserTeamAttributes fields: 3 description: Team membership attributes - name: UserTeamCreate fields: 3 description: A user's relationship with a team - name: UserTeamRelationships fields: 2 description: Relationship between membership and a user - name: UserTeamsResponse fields: 4 description: Team memberships response - name: Vulnerability fields: 4 description: A single vulnerability - name: VulnerabilityAttributes fields: 20 description: The JSON:API attributes of the vulnerability. - name: VulnerabilityCvss fields: 2 description: Vulnerability severities. - name: VulnerabilityDependencyLocations fields: 3 description: Static library vulnerability location. - name: WorkflowData fields: 4 description: Data related to the workflow. - name: WorkflowDataRelationships fields: 2 description: The definition of `WorkflowDataRelationships` object. - name: WorkflowDataUpdate fields: 4 description: Data related to the workflow being updated. - name: WorkflowUserRelationship fields: 1 description: The definition of `WorkflowUserRelationship` object. relationships: - from: PartialApplicationKey to: ApplicationKeyRelationships type: has_one via: relationships - from: RoleResponseRelationships to: RelationshipToPermissions type: has_one via: permissions - from: Role to: RoleResponseRelationships type: has_one via: relationships - from: UserRelationships to: RelationshipToRoles type: has_one via: roles - from: ServiceAccountCreateData to: UserRelationships type: has_one via: relationships - from: FullApplicationKey to: ApplicationKeyRelationships type: has_one via: relationships - from: ApplicationKeyRelationships to: RelationshipToUser type: has_one via: owned_by - from: UserResponseRelationships to: RelationshipToUsers type: has_one via: other_users - from: UserResponseRelationships to: RelationshipToRoles type: has_one via: roles - from: GCPSTSServiceAccount to: GCPSTSServiceAccountAttributes type: has_one via: attributes - from: User to: UserResponseRelationships type: has_one via: relationships - from: CsmCloudAccountsCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: aws_coverage - from: CsmCloudAccountsCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: azure_coverage - from: CsmCloudAccountsCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: gcp_coverage - from: CsmCloudAccountsCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: total_coverage - from: UserTeamCreate to: UserTeamAttributes type: has_one via: attributes - from: UserTeamCreate to: UserTeamRelationships type: has_one via: relationships - from: UserTeam to: UserTeamAttributes type: has_one via: attributes - from: UserTeam to: UserTeamRelationships type: has_one via: relationships - from: TeamRelationships to: RelationshipToTeamLinks type: has_one via: team_links - from: TeamRelationships to: RelationshipToUserTeamPermission type: has_one via: user_team_permissions - from: Team to: TeamRelationships type: has_one via: relationships - from: CloudWorkloadSecurityAgentRuleData to: CloudWorkloadSecurityAgentRuleAttributes type: has_one via: attributes - from: CIAppPipelinesAnalyticsAggregateResponse to: CIAppResponseLinks type: has_one via: links - from: LogsAggregateRequest to: LogsGroupBy type: has_many via: group_by - from: CIAppTestsAnalyticsAggregateResponse to: CIAppResponseLinks type: has_one via: links - from: CIAppTestsAnalyticsAggregateResponse to: CIAppResponseMetadataWithPagination type: has_one via: meta - from: SpansAggregateRequestAttributes to: SpansGroupBy type: has_many via: group_by - from: CIAppPipelinesAggregateRequest to: CIAppPipelinesGroupBy type: has_many via: group_by - from: CIAppPipelinesAggregateRequest to: CIAppQueryOptions type: has_one via: options - from: RUMAggregateRequest to: RUMGroupBy type: has_many via: group_by - from: RUMAnalyticsAggregateResponse to: RUMResponseMetadata type: has_one via: meta - from: CIAppTestsAggregateRequest to: CIAppTestsGroupBy type: has_many via: group_by - from: CIAppTestsAggregateRequest to: CIAppQueryOptions type: has_one via: options - from: APIKeyRelationships to: RelationshipToUser type: has_one via: created_by - from: APIKeyRelationships to: NullableRelationshipToUser type: has_one via: modified_by - from: AWSAccountResponseAttributes to: AWSLogsConfig type: has_one via: logs_config - from: AWSAccountResponseAttributes to: AWSMetricsConfig type: has_one via: metrics_config - from: AWSAccountResponseAttributes to: AWSResourcesConfig type: has_one via: resources_config - from: AWSAccountResponseAttributes to: AWSTracesConfig type: has_one via: traces_config - from: IncidentTeamRelationships to: RelationshipToUser type: has_one via: created_by - from: IncidentTeamRelationships to: RelationshipToUser type: has_one via: last_modified_by - from: ApplicationSecurityWafCustomRuleCondition to: ApplicationSecurityWafCustomRuleConditionParameters type: has_one via: parameters - from: TeamsResponse to: Team type: has_many via: data - from: TeamsResponse to: TeamsResponseMeta type: has_one via: meta - from: AuthNMappingRelationships to: RelationshipToRole type: has_one via: role - from: AuthNMappingRelationships to: RelationshipToTeam type: has_one via: team - from: APIKeysResponse to: PartialAPIKey type: has_many via: data - from: APIKeysResponse to: APIKeysResponseMeta type: has_one via: meta - from: PowerpackData to: PowerpackAttributes type: has_one via: attributes - from: PowerpackAttributes to: PowerpackGroupWidget type: has_one via: group_widget - from: ApplicationSecurityWafExclusionFilterResource to: ApplicationSecurityWafExclusionFilterAttributes type: has_one via: attributes - from: SecurityMonitoringSuppression to: SecurityMonitoringSuppressionAttributes type: has_one via: attributes - from: ApplicationSecurityWafCustomRuleData to: ApplicationSecurityWafCustomRuleAttributes type: has_one via: attributes - from: AuthNMapping to: AuthNMappingRelationships type: has_one via: relationships - from: ApplicationSecurityWafCustomRuleAttributes to: ApplicationSecurityWafCustomRuleAction type: has_one via: action - from: ApplicationSecurityWafCustomRuleAttributes to: ApplicationSecurityWafCustomRuleCondition type: has_many via: conditions - from: ApplicationSecurityWafCustomRuleAttributes to: ApplicationSecurityWafCustomRuleScope type: has_many via: scope - from: ApplicationSecurityWafCustomRuleAttributes to: ApplicationSecurityWafCustomRuleTags type: has_one via: tags - from: TeamLinkAttributes to: Team type: belongs_to via: team_id - from: Project to: ProjectRelationships type: has_one via: relationships - from: RumMetricResponseData to: RumMetricResponseAttributes type: has_one via: attributes - from: SpansMetricResponseData to: SpansMetricResponseAttributes type: has_one via: attributes - from: AWSAccountResponseData to: AWSAccountResponseAttributes type: has_one via: attributes - from: IncidentServiceResponseData to: IncidentServiceRelationships type: has_one via: relationships - from: ApplicationSecurityWafExclusionFilterAttributes to: ApplicationSecurityWafExclusionFilterRulesTarget type: has_many via: rules_target - from: ApplicationSecurityWafExclusionFilterAttributes to: ApplicationSecurityWafExclusionFilterScope type: has_many via: scope - from: ProjectRelationships to: RelationshipToTeamLinks type: has_one via: member_team - from: LogsMetricResponseData to: LogsMetricResponseAttributes type: has_one via: attributes - from: IncidentTeamResponseData to: IncidentTeamRelationships type: has_one via: relationships - from: PartialAPIKey to: APIKeyRelationships type: has_one via: relationships - from: ServiceDefinitionV2Dot2 to: ServiceDefinitionV2Dot2Integrations type: has_one via: integrations - from: ListPowerpacksResponse to: PowerpackData type: has_many via: data - from: ListPowerpacksResponse to: User type: has_many via: included - from: DowntimeResponseData to: DowntimeRelationships type: has_one via: relationships - from: IncidentServiceRelationships to: RelationshipToUser type: has_one via: created_by - from: IncidentServiceRelationships to: RelationshipToUser type: has_one via: last_modified_by - from: TeamLink to: TeamLinkAttributes type: has_one via: attributes - from: CsmServerlessCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: cws_coverage - from: CsmServerlessCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: total_coverage - from: CsmHostsAndContainersCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: cspm_coverage - from: CsmHostsAndContainersCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: cws_coverage - from: CsmHostsAndContainersCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: total_coverage - from: CsmHostsAndContainersCoverageAnalysisAttributes to: CsmCoverageAnalysis type: has_one via: vm_coverage - from: Deployment to: DeploymentMetadata type: has_one via: meta - from: ListAppsResponse to: ListAppsResponseDataItems type: has_many via: data - from: ListAppsResponse to: Deployment type: has_many via: included - from: GetAppResponse to: Deployment type: has_many via: included - from: GetAppResponse to: AppMeta type: has_one via: meta - from: GetAppResponse to: AppRelationship type: has_one via: relationship - from: Component to: AppBuilderEvent type: has_many via: events - from: ListAppsResponseDataItems to: AppMeta type: has_one via: meta - from: AppRelationship to: DeploymentRelationship type: has_one via: deployment - from: AppMeta to: User type: belongs_to via: user_id - from: ActionQuery to: AppBuilderEvent type: has_many via: events - from: DeploymentRelationship to: DeploymentMetadata type: has_one via: meta - from: UpdateAppResponse to: Deployment type: has_many via: included - from: UpdateAppResponse to: AppMeta type: has_one via: meta - from: UpdateAppResponse to: AppRelationship type: has_one via: relationship - from: DeploymentMetadata to: User type: belongs_to via: user_id - from: ComponentGrid to: AppBuilderEvent type: has_many via: events - from: CaseRelationships to: NullableUserRelationship type: has_one via: assignee - from: CaseRelationships to: NullableUserRelationship type: has_one via: created_by - from: CaseRelationships to: NullableUserRelationship type: has_one via: modified_by - from: CaseRelationships to: ProjectRelationship type: has_one via: project - from: Case to: CaseAttributes type: has_one via: attributes - from: Case to: CaseRelationships type: has_one via: relationships - from: ListVulnerableAssetsResponse to: Asset type: has_many via: data - from: Asset to: AssetAttributes type: has_one via: attributes - from: SecurityMonitoringSignalTriageAttributes to: SecurityMonitoringTriageUser type: has_one via: archive_comment_user - from: SecurityMonitoringSignalTriageAttributes to: SecurityMonitoringTriageUser type: has_one via: assignee - from: SecurityMonitoringSignalTriageAttributes to: SecurityMonitoringTriageUser type: has_one via: state_update_user - from: AuditLogsEventsResponse to: AuditLogsEvent type: has_many via: data - from: AuditLogsEventsResponse to: AuditLogsResponseMetadata type: has_one via: meta - from: CaseCreate to: CaseCreateRelationships type: has_one via: relationships - from: CaseCreateRelationships to: NullableUserRelationship type: has_one via: assignee - from: CaseCreateRelationships to: ProjectRelationship type: has_one via: project - from: SecurityMonitoringRuleCaseCreate to: SecurityMonitoringRuleCaseAction type: has_many via: actions - from: SecurityMonitoringRuleOptions to: CloudConfigurationComplianceRuleOptions type: has_one via: complianceRuleOptions - from: SecurityMonitoringRuleOptions to: SecurityMonitoringRuleThirdPartyOptions type: has_one via: thirdPartyRuleOptions - from: SecurityMonitoringStandardRulePayload to: SecurityMonitoringRuleCaseCreate type: has_many via: cases - from: SecurityMonitoringStandardRulePayload to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringStandardRulePayload to: SecurityMonitoringRuleOptions type: has_one via: options - from: SecurityMonitoringStandardRulePayload to: SecurityMonitoringStandardRuleQuery type: has_many via: queries - from: SecurityMonitoringStandardRulePayload to: SecurityMonitoringReferenceTable type: has_many via: referenceTables - from: SecurityMonitoringStandardRulePayload to: SecurityMonitoringThirdPartyRuleCaseCreate type: has_many via: thirdPartyCases - from: SecurityMonitoringSignalRulePayload to: SecurityMonitoringRuleCaseCreate type: has_many via: cases - from: SecurityMonitoringSignalRulePayload to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringSignalRulePayload to: SecurityMonitoringRuleOptions type: has_one via: options - from: SensitiveDataScannerGroupResponse to: SensitiveDataScannerGroupAttributes type: has_one via: attributes - from: SensitiveDataScannerGroupResponse to: SensitiveDataScannerGroupRelationships type: has_one via: relationships - from: AWSAccountCreateRequestData to: AWSAccountCreateRequestAttributes type: has_one via: attributes - from: FullAPIKey to: APIKeyRelationships type: has_one via: relationships - from: EntityV3SystemDatadog to: EntityV3DatadogPerformance type: has_one via: performanceData - from: EntityV3SystemDatadog to: EntityV3DatadogPipelines type: has_one via: pipelines - from: IncidentResponseAttributes to: Case type: belongs_to via: case_id - from: RoleCreateResponseData to: RoleResponseRelationships type: has_one via: relationships - from: SecurityMonitoringStandardRuleResponse to: SecurityMonitoringRuleCase type: has_many via: cases - from: SecurityMonitoringStandardRuleResponse to: CloudConfigurationRuleComplianceSignalOptions type: has_one via: complianceSignalOptions - from: SecurityMonitoringStandardRuleResponse to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringStandardRuleResponse to: SecurityMonitoringRuleOptions type: has_one via: options - from: SecurityMonitoringStandardRuleResponse to: SecurityMonitoringStandardRuleQuery type: has_many via: queries - from: SecurityMonitoringStandardRuleResponse to: SecurityMonitoringReferenceTable type: has_many via: referenceTables - from: AWSAccountCreateRequestAttributes to: AWSLogsConfig type: has_one via: logs_config - from: AWSAccountCreateRequestAttributes to: AWSMetricsConfig type: has_one via: metrics_config - from: AWSAccountCreateRequestAttributes to: AWSResourcesConfig type: has_one via: resources_config - from: AWSAccountCreateRequestAttributes to: AWSTracesConfig type: has_one via: traces_config - from: ScheduleDataRelationships to: DataRelationshipsTeams type: has_one via: teams - from: ScheduleCreateRequestDataAttributesLayersItems to: LayerAttributesInterval type: has_one via: interval - from: ScheduleCreateRequestDataAttributesLayersItems to: ScheduleRequestDataAttributesLayersItemsMembersItems type: has_many via: members - from: ScheduleCreateRequestDataAttributesLayersItems to: TimeRestriction type: has_many via: restrictions - from: WorkflowData to: WorkflowDataRelationships type: has_one via: relationships - from: ObservabilityPipelineData to: ObservabilityPipelineDataAttributes type: has_one via: attributes - from: ScheduleData to: ScheduleDataRelationships type: has_one via: relationships - from: Annotation to: AnnotationDisplay type: has_one via: display - from: SensitiveDataScannerGroupCreate to: SensitiveDataScannerGroupAttributes type: has_one via: attributes - from: SensitiveDataScannerGroupCreate to: SensitiveDataScannerGroupRelationships type: has_one via: relationships - from: EntityV3API to: EntityV3APIDatadog type: has_one via: datadog - from: EntityV3API to: EntityV3Integrations type: has_one via: integrations - from: EntityV3API to: EntityV3Metadata type: has_one via: metadata - from: SecurityMonitoringStandardRuleCreatePayload to: SecurityMonitoringRuleCaseCreate type: has_many via: cases - from: SecurityMonitoringStandardRuleCreatePayload to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringStandardRuleCreatePayload to: SecurityMonitoringRuleOptions type: has_one via: options - from: SecurityMonitoringStandardRuleCreatePayload to: SecurityMonitoringStandardRuleQuery type: has_many via: queries - from: SecurityMonitoringStandardRuleCreatePayload to: SecurityMonitoringReferenceTable type: has_many via: referenceTables - from: SecurityMonitoringStandardRuleCreatePayload to: SecurityMonitoringThirdPartyRuleCaseCreate type: has_many via: thirdPartyCases - from: RoleRelationships to: RelationshipToPermissions type: has_one via: permissions - from: SecurityMonitoringRuleCase to: SecurityMonitoringRuleCaseAction type: has_many via: actions - from: EntityV3Service to: EntityV3ServiceDatadog type: has_one via: datadog - from: EntityV3Service to: EntityV3Integrations type: has_one via: integrations - from: EntityV3Service to: EntityV3Metadata type: has_one via: metadata - from: SensitiveDataScannerRuleCreate to: SensitiveDataScannerRuleAttributes type: has_one via: attributes - from: SensitiveDataScannerRuleCreate to: SensitiveDataScannerRuleRelationships type: has_one via: relationships - from: ObservabilityPipelineKafkaSource to: ObservabilityPipelineTls type: has_one via: tls - from: EntityV3Queue to: EntityV3Integrations type: has_one via: integrations - from: EntityV3Queue to: EntityV3Metadata type: has_one via: metadata - from: EntityV3ServiceDatadog to: EntityV3DatadogPerformance type: has_one via: performanceData - from: EntityV3ServiceDatadog to: EntityV3DatadogPipelines type: has_one via: pipelines - from: LayerAttributes to: LayerAttributesInterval type: has_one via: interval - from: LayerAttributes to: TimeRestriction type: has_many via: restrictions - from: SecurityMonitoringSignalRuleResponse to: SecurityMonitoringRuleCase type: has_many via: cases - from: SecurityMonitoringSignalRuleResponse to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringSignalRuleResponse to: SecurityMonitoringRuleOptions type: has_one via: options - from: Step to: CompletionGate type: has_one via: completionGate - from: CloudConfigurationRuleCreatePayload to: CloudConfigurationRuleComplianceSignalOptions type: has_one via: complianceSignalOptions - from: CloudConfigurationRuleCreatePayload to: SecurityMonitoringFilter type: has_many via: filters - from: CloudConfigurationRuleCreatePayload to: CloudConfigurationRuleOptions type: has_one via: options - from: IncidentResponseData to: IncidentResponseAttributes type: has_one via: attributes - from: IncidentResponseData to: IncidentResponseRelationships type: has_one via: relationships - from: EscalationPolicyData to: EscalationPolicyDataRelationships type: has_one via: relationships - from: SensitiveDataScannerRuleResponse to: SensitiveDataScannerRuleAttributes type: has_one via: attributes - from: SensitiveDataScannerRuleResponse to: SensitiveDataScannerRuleRelationships type: has_one via: relationships - from: ApplicationSecurityWafCustomRuleCreateData to: ApplicationSecurityWafCustomRuleCreateAttributes type: has_one via: attributes - from: CreateRuleResponseData to: RuleAttributes type: has_one via: attributes - from: CreateRuleResponseData to: RelationshipToRule type: has_one via: relationships - from: ApplicationSecurityWafExclusionFilterCreateAttributes to: ApplicationSecurityWafExclusionFilterRulesTarget type: has_many via: rules_target - from: ApplicationSecurityWafExclusionFilterCreateAttributes to: ApplicationSecurityWafExclusionFilterScope type: has_many via: scope - from: EntityV3APIDatadog to: EntityV3DatadogPerformance type: has_one via: performanceData - from: EntityV3APIDatadog to: EntityV3DatadogPipelines type: has_one via: pipelines - from: EntityV3System to: EntityV3SystemDatadog type: has_one via: datadog - from: EntityV3System to: EntityV3Integrations type: has_one via: integrations - from: EntityV3System to: EntityV3Metadata type: has_one via: metadata - from: APITrigger to: TriggerRateLimit type: has_one via: rateLimit - from: EntityData to: EntityRelationships type: has_one via: relationships - from: IncidentTeamCreateData to: IncidentTeamRelationships type: has_one via: relationships - from: EscalationPolicyDataRelationships to: DataRelationshipsTeams type: has_one via: teams - from: NotificationRuleAttributes to: Selectors type: has_one via: selectors - from: Spec to: Annotation type: has_many via: annotations - from: Spec to: ConnectionEnv type: has_many via: connectionEnvs - from: Spec to: Step type: has_many via: steps - from: ApplicationSecurityWafCustomRuleCreateAttributes to: ApplicationSecurityWafCustomRuleAction type: has_one via: action - from: ApplicationSecurityWafCustomRuleCreateAttributes to: ApplicationSecurityWafCustomRuleCondition type: has_many via: conditions - from: ApplicationSecurityWafCustomRuleCreateAttributes to: ApplicationSecurityWafCustomRuleScope type: has_many via: scope - from: ApplicationSecurityWafCustomRuleCreateAttributes to: ApplicationSecurityWafCustomRuleTags type: has_one via: tags - from: IncidentTodoRelationships to: RelationshipToUser type: has_one via: created_by_user - from: IncidentTodoRelationships to: RelationshipToUser type: has_one via: last_modified_by_user - from: IncidentResponseRelationships to: NullableRelationshipToUser type: has_one via: commander_user - from: IncidentResponseRelationships to: RelationshipToUser type: has_one via: created_by_user - from: IncidentResponseRelationships to: RelationshipToIncidentIntegrationMetadatas type: has_one via: integrations - from: IncidentResponseRelationships to: RelationshipToUser type: has_one via: last_modified_by_user - from: CompletionGate to: RetryStrategy type: has_one via: retryStrategy - from: SecurityMonitoringSignalRuleCreatePayload to: SecurityMonitoringRuleCaseCreate type: has_many via: cases - from: SecurityMonitoringSignalRuleCreatePayload to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringSignalRuleCreatePayload to: SecurityMonitoringRuleOptions type: has_one via: options - from: EntityV3Datastore to: EntityV3Integrations type: has_one via: integrations - from: EntityV3Datastore to: EntityV3Metadata type: has_one via: metadata - from: WorkflowDataRelationships to: WorkflowUserRelationship type: has_one via: creator - from: WorkflowDataRelationships to: WorkflowUserRelationship type: has_one via: owner - from: MicrosoftTeamsTenantBasedHandleAttributes to: Team type: belongs_to via: team_id - from: IncidentServiceCreateData to: IncidentServiceRelationships type: has_one via: relationships - from: IncidentIntegrationMetadataResponseData to: IncidentIntegrationMetadataAttributes type: has_one via: attributes - from: IncidentIntegrationMetadataResponseData to: IncidentIntegrationRelationships type: has_one via: relationships - from: RoleCreateData to: RoleRelationships type: has_one via: relationships - from: CloudConfigurationRuleOptions to: CloudConfigurationComplianceRuleOptions type: has_one via: complianceRuleOptions - from: ApplicationSecurityWafExclusionFilterCreateData to: ApplicationSecurityWafExclusionFilterCreateAttributes type: has_one via: attributes - from: IncidentIntegrationRelationships to: RelationshipToUser type: has_one via: created_by_user - from: IncidentIntegrationRelationships to: RelationshipToUser type: has_one via: last_modified_by_user - from: UserCreateData to: UserRelationships type: has_one via: relationships - from: IncidentTodoResponseData to: IncidentTodoAttributes type: has_one via: attributes - from: IncidentTodoResponseData to: IncidentTodoRelationships type: has_one via: relationships - from: ApplicationSecurityWafCustomRuleUpdateData to: ApplicationSecurityWafCustomRuleUpdateAttributes type: has_one via: attributes - from: ApplicationSecurityWafCustomRuleUpdateAttributes to: ApplicationSecurityWafCustomRuleAction type: has_one via: action - from: ApplicationSecurityWafCustomRuleUpdateAttributes to: ApplicationSecurityWafCustomRuleCondition type: has_many via: conditions - from: ApplicationSecurityWafCustomRuleUpdateAttributes to: ApplicationSecurityWafCustomRuleScope type: has_many via: scope - from: ApplicationSecurityWafCustomRuleUpdateAttributes to: ApplicationSecurityWafCustomRuleTags type: has_one via: tags - from: CustomCostsFileMetadataHighLevel to: CustomCostsFileMetadata type: has_one via: attributes - from: CloudConfigurationRulePayload to: CloudConfigurationRuleComplianceSignalOptions type: has_one via: complianceSignalOptions - from: CloudConfigurationRulePayload to: SecurityMonitoringFilter type: has_many via: filters - from: CloudConfigurationRulePayload to: CloudConfigurationRuleOptions type: has_one via: options - from: UserInvitationResponseData to: UserInvitationRelationships type: has_one via: relationships - from: UserInvitationRelationships to: RelationshipToUser type: has_one via: user - from: RelationToEntity to: RelationshipItem type: has_one via: data - from: RelationResponse to: RelationAttributes type: has_one via: attributes - from: RelationResponse to: RelationRelationships type: has_one via: relationships - from: RelationRelationships to: RelationToEntity type: has_one via: fromEntity - from: RelationRelationships to: RelationToEntity type: has_one via: toEntity - from: EventsListResponse to: EventsResponseMetadata type: has_one via: meta - from: CIAppPipelineEventsRequest to: CIAppQueryOptions type: has_one via: options - from: RUMEventsResponse to: RUMResponseMetadata type: has_one via: meta - from: CIAppTestEventsResponse to: CIAppResponseLinks type: has_one via: links - from: CIAppTestEventsResponse to: CIAppResponseMetadataWithPagination type: has_one via: meta - from: CIAppTestEventsRequest to: CIAppQueryOptions type: has_one via: options - from: CIAppPipelineEventInProgressPipeline to: CIAppCIError type: has_one via: error - from: CIAppPipelineEventInProgressPipeline to: CIAppGitInfo type: has_one via: git - from: CIAppPipelineEventInProgressPipeline to: CIAppHostInfo type: has_one via: node - from: EventAttributes to: Monitor type: belongs_to via: monitor_id - from: CIAppPipelineEventsResponse to: CIAppResponseLinks type: has_one via: links - from: CIAppPipelineEventsResponse to: CIAppResponseMetadataWithPagination type: has_one via: meta - from: CIAppPipelineEventStage to: CIAppCIError type: has_one via: error - from: CIAppPipelineEventStage to: CIAppGitInfo type: has_one via: git - from: CIAppPipelineEventStage to: CIAppHostInfo type: has_one via: node - from: CIAppPipelineEventFinishedPipeline to: CIAppCIError type: has_one via: error - from: CIAppPipelineEventFinishedPipeline to: CIAppGitInfo type: has_one via: git - from: CIAppPipelineEventFinishedPipeline to: CIAppHostInfo type: has_one via: node - from: CIAppPipelineEventStep to: CIAppCIError type: has_one via: error - from: CIAppPipelineEventStep to: CIAppGitInfo type: has_one via: git - from: CIAppPipelineEventStep to: CIAppHostInfo type: has_one via: node - from: CIAppPipelineEventJob to: CIAppCIError type: has_one via: error - from: CIAppPipelineEventJob to: CIAppGitInfo type: has_one via: git - from: CIAppPipelineEventJob to: CIAppHostInfo type: has_one via: node - from: IncidentTeamUpdateData to: IncidentTeamRelationships type: has_one via: relationships - from: SecurityMonitoringRuleUpdatePayload to: SecurityMonitoringRuleCase type: has_many via: cases - from: SecurityMonitoringRuleUpdatePayload to: CloudConfigurationRuleComplianceSignalOptions type: has_one via: complianceSignalOptions - from: SecurityMonitoringRuleUpdatePayload to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringRuleUpdatePayload to: SecurityMonitoringRuleOptions type: has_one via: options - from: SecurityMonitoringRuleUpdatePayload to: SecurityMonitoringReferenceTable type: has_many via: referenceTables - from: SecurityMonitoringStandardRuleTestPayload to: SecurityMonitoringRuleCaseCreate type: has_many via: cases - from: SecurityMonitoringStandardRuleTestPayload to: SecurityMonitoringFilter type: has_many via: filters - from: SecurityMonitoringStandardRuleTestPayload to: SecurityMonitoringRuleOptions type: has_one via: options - from: SecurityMonitoringStandardRuleTestPayload to: SecurityMonitoringStandardRuleQuery type: has_many via: queries - from: SecurityMonitoringStandardRuleTestPayload to: SecurityMonitoringReferenceTable type: has_many via: referenceTables - from: SecurityMonitoringStandardRuleTestPayload to: SecurityMonitoringThirdPartyRuleCaseCreate type: has_many via: thirdPartyCases - from: IncidentUpdateData to: IncidentUpdateRelationships type: has_one via: relationships - from: UpdateRuleResponseData to: RuleAttributes type: has_one via: attributes - from: UpdateRuleResponseData to: RelationshipToRule type: has_one via: relationships - from: IncidentUpdateRelationships to: NullableRelationshipToUser type: has_one via: commander_user - from: IncidentUpdateRelationships to: RelationshipToIncidentIntegrationMetadatas type: has_one via: integrations - from: IncidentServiceUpdateData to: IncidentServiceRelationships type: has_one via: relationships - from: WorkflowDataUpdate to: WorkflowDataRelationships type: has_one via: relationships - from: ApplicationSecurityWafExclusionFilterUpdateAttributes to: ApplicationSecurityWafExclusionFilterRulesTarget type: has_many via: rules_target - from: ApplicationSecurityWafExclusionFilterUpdateAttributes to: ApplicationSecurityWafExclusionFilterScope type: has_many via: scope - from: ApplicationSecurityWafExclusionFilterUpdateData to: ApplicationSecurityWafExclusionFilterUpdateAttributes type: has_one via: attributes - from: UserTeamsResponse to: UserTeam type: has_many via: data - from: UserTeamsResponse to: TeamsResponseMeta type: has_one via: meta - from: HistoricalJobOptions to: SecurityMonitoringRuleThirdPartyOptions type: has_one via: thirdPartyRuleOptions - from: SpansListResponse to: Span type: has_many via: data - from: SpansListResponse to: SpansListResponseMetadata type: has_one via: meta - from: TimeRestrictions to: TimeRestriction type: has_many via: restrictions - from: LogsListResponse to: LogsResponseMetadata type: has_one via: meta - from: SecurityMonitoringSignalsListResponse to: SecurityMonitoringSignal type: has_many via: data - from: JobDefinition to: SecurityMonitoringRuleCaseCreate type: has_many via: cases - from: JobDefinition to: HistoricalJobOptions type: has_one via: options - from: JobDefinition to: SecurityMonitoringReferenceTable type: has_many via: referenceTables - from: JobDefinition to: SecurityMonitoringThirdPartyRuleCaseCreate type: has_many via: thirdPartyCases - from: SensitiveDataScannerGroupUpdate to: SensitiveDataScannerGroupAttributes type: has_one via: attributes - from: SensitiveDataScannerGroupUpdate to: SensitiveDataScannerGroupRelationships type: has_one via: relationships - from: RunHistoricalJobRequestAttributes to: JobDefinition type: has_one via: jobDefinition - from: AWSAccountUpdateRequestAttributes to: AWSLogsConfig type: has_one via: logs_config - from: AWSAccountUpdateRequestAttributes to: AWSMetricsConfig type: has_one via: metrics_config - from: AWSAccountUpdateRequestAttributes to: AWSResourcesConfig type: has_one via: resources_config - from: AWSAccountUpdateRequestAttributes to: AWSTracesConfig type: has_one via: traces_config - from: AWSAccountUpdateRequestData to: AWSAccountUpdateRequestAttributes type: has_one via: attributes - from: Remediation to: Advisory type: has_many via: avoided_advisories - from: Remediation to: Advisory type: has_many via: fixed_advisories - from: Remediation to: Advisory type: has_many via: new_advisories - from: Remediation to: Advisory type: has_many via: remaining_advisories - from: VulnerabilityDependencyLocations to: DependencyLocation type: has_one via: block - from: VulnerabilityDependencyLocations to: DependencyLocation type: has_one via: name - from: VulnerabilityDependencyLocations to: DependencyLocation type: has_one via: version - from: VulnerabilityAttributes to: Advisory type: belongs_to via: advisory_id - from: VulnerabilityAttributes to: VulnerabilityCvss type: has_one via: cvss - from: VulnerabilityAttributes to: VulnerabilityDependencyLocations type: has_one via: dependency_locations - from: VulnerabilityAttributes to: Remediation type: has_many via: remediations - from: ListVulnerabilitiesResponse to: Vulnerability type: has_many via: data - from: Vulnerability to: VulnerabilityAttributes type: has_one via: attributes - from: Monitor to: MonitorOptions type: has_one via: options - from: RoleUpdateData to: RoleRelationships type: has_one via: relationships - from: RoleUpdateResponseData to: RoleResponseRelationships type: has_one via: relationships - from: SensitiveDataScannerRuleUpdate to: SensitiveDataScannerRuleAttributes type: has_one via: attributes - from: SensitiveDataScannerRuleUpdate to: SensitiveDataScannerRuleRelationships type: has_one via: relationships - from: ScheduleUpdateRequestDataAttributesLayersItems to: LayerAttributesInterval type: has_one via: interval - from: ScheduleUpdateRequestDataAttributesLayersItems to: ScheduleRequestDataAttributesLayersItemsMembersItems type: has_many via: members - from: ScheduleUpdateRequestDataAttributesLayersItems to: TimeRestriction type: has_many via: restrictions - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseUserFacetData type: has_many via: commander - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseUserFacetData type: has_many via: created_by - from: IncidentSearchResponseFacetsData to: IncidentSearchResponsePropertyFieldFacetData type: has_many via: fields - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseFieldFacetData type: has_many via: impact - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseUserFacetData type: has_many via: last_modified_by - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseFieldFacetData type: has_many via: postmortem - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseUserFacetData type: has_many via: responder - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseFieldFacetData type: has_many via: severity - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseFieldFacetData type: has_many via: state - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseNumericFacetData type: has_many via: time_to_repair - from: IncidentSearchResponseFacetsData to: IncidentSearchResponseNumericFacetData type: has_many via: time_to_resolve - from: IncidentSearchResponseAttributes to: IncidentSearchResponseFacetsData type: has_one via: facets - from: IncidentSearchResponsePropertyFieldFacetData to: IncidentSearchResponseFieldFacetData type: has_many via: facets