---
title: Security Automation
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Security Automation
---

# Security Automation

Security Automation in Azure Security Center lets you create automated workflows that respond to security alerts and recommendations. It can trigger actions such as sending notifications, creating tickets, or running logic apps whenever defined conditions are met. This helps streamline incident response and reduce manual effort.

```
azure.security_automation
```

## Fields

| Title             | ID   | Type       | Data Type                                                                                                                                                                                                              | Description |
| ----------------- | ---- | ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key              | core | string     |
| actions           | core | json       | A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.                                                                                       |
| description       | core | string     | The security automation description.                                                                                                                                                                                   |
| etag              | core | string     | Entity tag is used for comparing two or more entities from the same requested resource.                                                                                                                                |
| id                | core | string     | Resource Id                                                                                                                                                                                                            |
| is_enabled        | core | bool       | Indicates whether the security automation is enabled.                                                                                                                                                                  |
| kind              | core | string     | Kind of the resource                                                                                                                                                                                                   |
| location          | core | string     | Location where the resource is stored                                                                                                                                                                                  |
| name              | core | string     | Resource name                                                                                                                                                                                                          |
| resource_group    | core | string     |
| scopes            | core | json       | A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes. |
| sources           | core | json       | A collection of the source event types which evaluate the security automation set of rules.                                                                                                                            |
| subscription_id   | core | string     |
| subscription_name | core | string     |
| tags              | core | hstore_csv |
| type              | core | string     | Resource type                                                                                                                                                                                                          |