Datadog API — Rules

naftiko: 1.0.0-alpha2
info:
  label: Datadog API — Rules
  description: 'Datadog API — Rules. 54 operations. Lead operation: Datadog Get All Monitor Notification Rules. Self-contained
    Naftiko capability covering one Datadog business surface.'
  tags:
  - Datadog
  - Rules
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    DATADOG_API_KEY: DATADOG_API_KEY
capability:
  consumes:
  - type: http
    namespace: datadog-rules
    baseUri: https://{subdomain}.{site}
    description: Datadog API — Rules business capability. Self-contained, no shared references.
    resources:
    - name: api-v2-monitor-notification_rule
      path: /api/v2/monitor/notification_rule
      operations:
      - name: getmonitornotificationrules
        method: GET
        description: Datadog Get All Monitor Notification Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: include
          in: query
          type: string
          description: Comma-separated list of resource paths for related resources to include in the response. Supported
            resource
      - name: createmonitornotificationrule
        method: POST
        description: Datadog Create a Monitor Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-monitor-notification_rule-rule_id
      path: /api/v2/monitor/notification_rule/{rule_id}
      operations:
      - name: deletemonitornotificationrule
        method: DELETE
        description: Datadog Delete a Monitor Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: rule_id
          in: path
          type: string
          description: ID of the monitor notification rule to delete.
          required: true
      - name: getmonitornotificationrule
        method: GET
        description: Datadog Get a Monitor Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: rule_id
          in: path
          type: string
          description: ID of the monitor notification rule to fetch.
          required: true
        - name: include
          in: query
          type: string
          description: Comma-separated list of resource paths for related resources to include in the response. Supported
            resource
      - name: updatemonitornotificationrule
        method: PATCH
        description: Datadog Update a Monitor Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: rule_id
          in: path
          type: string
          description: ID of the monitor notification rule to update.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-on-call-teams-team_id-routing-rules
      path: /api/v2/on-call/teams/{team_id}/routing-rules
      operations:
      - name: getoncallteamroutingrules
        method: GET
        description: Datadog Get On-call Team Routing Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: team_id
          in: path
          type: string
          description: The team ID
          required: true
        - name: include
          in: query
          type: string
          description: 'Comma-separated list of included relationships to be returned. Allowed values: `rules`, `rules.policy`.'
      - name: setoncallteamroutingrules
        method: PUT
        description: Datadog Set On-call Team Routing Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: team_id
          in: path
          type: string
          description: The team ID
          required: true
        - name: include
          in: query
          type: string
          description: 'Comma-separated list of included relationships to be returned. Allowed values: `rules`, `rules.policy`.'
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-remote_config-products-asm-waf-custom_rules
      path: /api/v2/remote_config/products/asm/waf/custom_rules
      operations:
      - name: listapplicationsecuritywafcustomrules
        method: GET
        description: Datadog List All Waf Custom Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createapplicationsecuritywafcustomrule
        method: POST
        description: Datadog Create a Waf Custom Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-remote_config-products-asm-waf-custom_rules-custom_rule_id
      path: /api/v2/remote_config/products/asm/waf/custom_rules/{custom_rule_id}
      operations:
      - name: deleteapplicationsecuritywafcustomrule
        method: DELETE
        description: Datadog Delete a Waf Custom Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: getapplicationsecuritywafcustomrule
        method: GET
        description: Datadog Get a Waf Custom Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateapplicationsecuritywafcustomrule
        method: PUT
        description: Datadog Update a Waf Custom Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-remote_config-products-cws-agent_rules
      path: /api/v2/remote_config/products/cws/agent_rules
      operations:
      - name: listcsmthreatsagentrules
        method: GET
        description: Datadog Get All Workload Protection Agent Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createcsmthreatsagentrule
        method: POST
        description: Datadog Create a Workload Protection Agent Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-remote_config-products-cws-agent_rules-agent_rule_id
      path: /api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}
      operations:
      - name: deletecsmthreatsagentrule
        method: DELETE
        description: Datadog Delete a Workload Protection Agent Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: getcsmthreatsagentrule
        method: GET
        description: Datadog Get a Workload Protection Agent Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatecsmthreatsagentrule
        method: PATCH
        description: Datadog Update a Workload Protection Agent Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-scorecard-outcomes
      path: /api/v2/scorecard/outcomes
      operations:
      - name: listscorecardoutcomes
        method: GET
        description: Datadog List All Rule Outcomes
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: include
          in: query
          type: string
          description: Include related rule details in the response.
        - name: fields[outcome]
          in: query
          type: string
          description: Return only specified values in the outcome attributes.
        - name: fields[rule]
          in: query
          type: string
          description: Return only specified values in the included rule details.
        - name: filter[outcome][service_name]
          in: query
          type: string
          description: Filter the outcomes on a specific service name.
        - name: filter[outcome][state]
          in: query
          type: string
          description: Filter the outcomes by a specific state.
        - name: filter[rule][enabled]
          in: query
          type: boolean
          description: Filter outcomes on whether a rule is enabled/disabled.
        - name: filter[rule][id]
          in: query
          type: string
          description: Filter outcomes based on rule ID.
        - name: filter[rule][name]
          in: query
          type: string
          description: Filter outcomes based on rule name.
    - name: api-v2-scorecard-rules
      path: /api/v2/scorecard/rules
      operations:
      - name: listscorecardrules
        method: GET
        description: Datadog List All Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: include
          in: query
          type: string
          description: Include related scorecard details in the response.
        - name: filter[rule][id]
          in: query
          type: string
          description: Filter the rules on a rule ID.
        - name: filter[rule][enabled]
          in: query
          type: boolean
          description: Filter for enabled rules only.
        - name: filter[rule][custom]
          in: query
          type: boolean
          description: Filter for custom rules only.
        - name: filter[rule][name]
          in: query
          type: string
          description: Filter rules on the rule name.
        - name: filter[rule][description]
          in: query
          type: string
          description: Filter rules on the rule description.
        - name: fields[rule]
          in: query
          type: string
          description: Return only specific fields in the response for rule attributes.
        - name: fields[scorecard]
          in: query
          type: string
          description: Return only specific fields in the included response for scorecard attributes.
      - name: createscorecardrule
        method: POST
        description: Datadog Create a New Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-scorecard-rules-rule_id
      path: /api/v2/scorecard/rules/{rule_id}
      operations:
      - name: deletescorecardrule
        method: DELETE
        description: Datadog Delete a Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatescorecardrule
        method: PUT
        description: Datadog Update an Existing Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security-signals-notification_rules
      path: /api/v2/security/signals/notification_rules
      operations:
      - name: getsignalnotificationrules
        method: GET
        description: Datadog Get the List of Signal-based Notification Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createsignalnotificationrule
        method: POST
        description: Datadog Create a New Signal-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security-signals-notification_rules-id
      path: /api/v2/security/signals/notification_rules/{id}
      operations:
      - name: deletesignalnotificationrule
        method: DELETE
        description: Datadog Delete a Signal-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
      - name: getsignalnotificationrule
        method: GET
        description: Datadog Get Details of a Signal-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
      - name: patchsignalnotificationrule
        method: PATCH
        description: Datadog Patch a Signal-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security-vulnerabilities-notification_rules
      path: /api/v2/security/vulnerabilities/notification_rules
      operations:
      - name: getvulnerabilitynotificationrules
        method: GET
        description: Datadog Get the List of Vulnerability Notification Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createvulnerabilitynotificationrule
        method: POST
        description: Datadog Create a New Vulnerability-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security-vulnerabilities-notification_rules-id
      path: /api/v2/security/vulnerabilities/notification_rules/{id}
      operations:
      - name: deletevulnerabilitynotificationrule
        method: DELETE
        description: Datadog Delete a Vulnerability-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
      - name: getvulnerabilitynotificationrule
        method: GET
        description: Datadog Get Details of a Vulnerability Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
      - name: patchvulnerabilitynotificationrule
        method: PATCH
        description: Datadog Patch a Vulnerability-based Notification Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: string
          description: ID of the notification rule.
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-cloud_workload_security-agent_rules
      path: /api/v2/security_monitoring/cloud_workload_security/agent_rules
      operations:
      - name: listcloudworkloadsecurityagentrules
        method: GET
        description: Datadog Get All Workload Protection Agent Rules (us1-fed)
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createcloudworkloadsecurityagentrule
        method: POST
        description: Datadog Create a Workload Protection Agent Rule (us1-fed)
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-cloud_workload_security-agent_rules-agent_rule_id
      path: /api/v2/security_monitoring/cloud_workload_security/agent_rules/{agent_rule_id}
      operations:
      - name: deletecloudworkloadsecurityagentrule
        method: DELETE
        description: Datadog Delete a Workload Protection Agent Rule (us1-fed)
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: getcloudworkloadsecurityagentrule
        method: GET
        description: Datadog Get a Workload Protection Agent Rule (us1-fed)
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatecloudworkloadsecurityagentrule
        method: PATCH
        description: Datadog Update a Workload Protection Agent Rule (us1-fed)
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-configuration-suppressions
      path: /api/v2/security_monitoring/configuration/suppressions
      operations:
      - name: listsecuritymonitoringsuppressions
        method: GET
        description: Datadog Get All Suppression Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createsecuritymonitoringsuppression
        method: POST
        description: Datadog Create a Suppression Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-configuration-suppressions-suppression_id
      path: /api/v2/security_monitoring/configuration/suppressions/{suppression_id}
      operations:
      - name: deletesecuritymonitoringsuppression
        method: DELETE
        description: Datadog Delete a Suppression Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: getsecuritymonitoringsuppression
        method: GET
        description: Datadog Get a Suppression Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatesecuritymonitoringsuppression
        method: PATCH
        description: Datadog Update a Suppression Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-rules
      path: /api/v2/security_monitoring/rules
      operations:
      - name: listsecuritymonitoringrules
        method: GET
        description: Datadog List Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createsecuritymonitoringrule
        method: POST
        description: Datadog Create a Detection Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-rules-convert
      path: /api/v2/security_monitoring/rules/convert
      operations:
      - name: convertsecuritymonitoringrulefromjsontoterraform
        method: POST
        description: Datadog Convert a Rule from Json to Terraform
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-rules-test
      path: /api/v2/security_monitoring/rules/test
      operations:
      - name: testsecuritymonitoringrule
        method: POST
        description: Datadog Test a Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-rules-validation
      path: /api/v2/security_monitoring/rules/validation
      operations:
      - name: validatesecuritymonitoringrule
        method: POST
        description: Datadog Validate a Detection Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-rules-rule_id
      path: /api/v2/security_monitoring/rules/{rule_id}
      operations:
      - name: deletesecuritymonitoringrule
        method: DELETE
        description: Datadog Delete an Existing Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatesecuritymonitoringrule
        method: PUT
        description: Datadog Update an Existing Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-security_monitoring-rules-rule_id-convert
      path: /api/v2/security_monitoring/rules/{rule_id}/convert
      operations:
      - name: convertexistingsecuritymonitoringrule
        method: GET
        description: Datadog Convert an Existing Rule from Json to Terraform
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-v2-security_monitoring-rules-rule_id-test
      path: /api/v2/security_monitoring/rules/{rule_id}/test
      operations:
      - name: testexistingsecuritymonitoringrule
        method: POST
        description: Datadog Test an Existing Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-sensitive-data-scanner-config-rules
      path: /api/v2/sensitive-data-scanner/config/rules
      operations:
      - name: createscanningrule
        method: POST
        description: Datadog Create Scanning Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v2-sensitive-data-scanner-config-rules-rule_id
      path: /api/v2/sensitive-data-scanner/config/rules/{rule_id}
      operations:
      - name: deletescanningrule
        method: DELETE
        description: Datadog Delete Scanning Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: updatescanningrule
        method: PATCH
        description: Datadog Update Scanning Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: bearer
      token: '{{env.DATADOG_API_KEY}}'
  exposes:
  - type: rest
    namespace: datadog-rules-rest
    port: 8080
    description: REST adapter for Datadog API — Rules. One Spectral-compliant resource per consumed operation, prefixed with
      /v1.
    resources:
    - path: /v1/api/v2/monitor/notification-rule
      name: api-v2-monitor-notification-rule
      description: REST surface for api-v2-monitor-notification_rule.
      operations:
      - method: GET
        name: getmonitornotificationrules
        description: Datadog Get All Monitor Notification Rules
        call: datadog-rules.getmonitornotificationrules
        with:
          include: rest.include
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createmonitornotificationrule
        description: Datadog Create a Monitor Notification Rule
        call: datadog-rules.createmonitornotificationrule
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/monitor/notification-rule/{rule-id}
      name: api-v2-monitor-notification-rule-rule-id
      description: REST surface for api-v2-monitor-notification_rule-rule_id.
      operations:
      - method: DELETE
        name: deletemonitornotificationrule
        description: Datadog Delete a Monitor Notification Rule
        call: datadog-rules.deletemonitornotificationrule
        with:
          rule_id: rest.rule_id
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: getmonitornotificationrule
        description: Datadog Get a Monitor Notification Rule
        call: datadog-rules.getmonitornotificationrule
        with:
          rule_id: rest.rule_id
          include: rest.include
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: updatemonitornotificationrule
        description: Datadog Update a Monitor Notification Rule
        call: datadog-rules.updatemonitornotificationrule
        with:
          rule_id: rest.rule_id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/on-call/teams/{team-id}/routing-rules
      name: api-v2-on-call-teams-team-id-routing-rules
      description: REST surface for api-v2-on-call-teams-team_id-routing-rules.
      operations:
      - method: GET
        name: getoncallteamroutingrules
        description: Datadog Get On-call Team Routing Rules
        call: datadog-rules.getoncallteamroutingrules
        with:
          team_id: rest.team_id
          include: rest.include
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setoncallteamroutingrules
        description: Datadog Set On-call Team Routing Rules
        call: datadog-rules.setoncallteamroutingrules
        with:
          team_id: rest.team_id
          include: rest.include
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/remote-config/products/asm/waf/custom-rules
      name: api-v2-remote-config-products-asm-waf-custom-rules
      description: REST surface for api-v2-remote_config-products-asm-waf-custom_rules.
      operations:
      - method: GET
        name: listapplicationsecuritywafcustomrules
        description: Datadog List All Waf Custom Rules
        call: datadog-rules.listapplicationsecuritywafcustomrules
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createapplicationsecuritywafcustomrule
        description: Datadog Create a Waf Custom Rule
        call: datadog-rules.createapplicationsecuritywafcustomrule
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/remote-config/products/asm/waf/custom-rules/{custom-rule-id}
      name: api-v2-remote-config-products-asm-waf-custom-rules-custom-rule-id
      description: REST surface for api-v2-remote_config-products-asm-waf-custom_rules-custom_rule_id.
      operations:
      - method: DELETE
        name: deleteapplicationsecuritywafcustomrule
        description: Datadog Delete a Waf Custom Rule
        call: datadog-rules.deleteapplicationsecuritywafcustomrule
        outputParameters:
        - type: object
          mapping: $.
      - method: GET
        name: getapplicationsecuritywafcustomrule
        description: Datadog Get a Waf Custom Rule
        call: datadog-rules.getapplicationsecuritywafcustomrule
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateapplicationsecuritywafcustomrule
        description: Datadog Update a Waf Custom Rule
        call: datadog-rules.updateapplicationsecuritywafcustomrule
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/remote-config/products/cws/agent-rules
      name: api-v2-remote-config-products-cws-agent-rules
      description: REST surface for api-v2-remote_config-products-cws-agent_rules.
      operations:
      - method: GET
        name: listcsmthreatsagentrules
        description: Datadog Get All Workload Protection Agent Rules
        call: datadog-rules.listcsmthreatsagentrules
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createcsmthreatsagentrule
        description: Datadog Create a Workload Protection Agent Rule
        call: datadog-rules.createcsmthreatsagentrule
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v2/remote-config/products/cws/agent-rules/{agent-rule-id}
      name: api-v2-remote

# --- truncated at 32 KB (67 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/datadog/refs/heads/main/capabilities/datadog-rules.yaml