---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# gcp_securitycentermanagement_security_health_analytics_custom_module{% #gcp_securitycentermanagement_security_health_analytics_custom_module %}

## `ancestor_module`{% #ancestor_module %}

**Type**: `STRING`**Provider name**: `ancestorModule`**Description**: Output only. If empty, indicates that the custom module was created in the organization, folder, or project in which you are viewing the custom module. Otherwise, `ancestor_module` specifies the organization or folder from which the custom module is inherited.

## `ancestors`{% #ancestors %}

**Type**: `UNORDERED_LIST_STRING`

## `cloud_provider`{% #cloud_provider %}

**Type**: `STRING`**Provider name**: `cloudProvider`**Description**: The cloud provider of the custom module.**Possible values**:

- `CLOUD_PROVIDER_UNSPECIFIED` - Unspecified cloud provider.
- `GOOGLE_CLOUD_PLATFORM` - Google Cloud.
- `AMAZON_WEB_SERVICES` - Amazon Web Services (AWS).
- `MICROSOFT_AZURE` - Microsoft Azure.

## `custom_config`{% #custom_config %}

**Type**: `STRUCT`**Provider name**: `customConfig`**Description**: The user specified custom configuration for the module.

- `custom_output`**Type**: `STRUCT`**Provider name**: `customOutput`**Description**: Custom output properties.
  - `properties`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `properties`**Description**: A list of custom output properties to add to the finding.
    - `name`**Type**: `STRING`**Provider name**: `name`**Description**: Name of the property for the custom output.
    - `value_expression`**Type**: `STRUCT`**Provider name**: `valueExpression`**Description**: The CEL expression for the custom output. A resource property can be specified to return the value of the property or a text string enclosed in quotation marks.
      - `description`**Type**: `STRING`**Provider name**: `description`**Description**: Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
      - `expression`**Type**: `STRING`**Provider name**: `expression`**Description**: Textual representation of an expression in Common Expression Language syntax.
      - `location`**Type**: `STRING`**Provider name**: `location`**Description**: Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
      - `title`**Type**: `STRING`**Provider name**: `title`**Description**: Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- `description`**Type**: `STRING`**Provider name**: `description`**Description**: Text that describes the vulnerability or misconfiguration that the custom module detects. This explanation is returned with each finding instance to help investigators understand the detected issue. The text must be enclosed in quotation marks.
- `predicate`**Type**: `STRUCT`**Provider name**: `predicate`**Description**: The CEL expression to evaluate to produce findings. When the expression evaluates to true against a resource, a finding is generated.
  - `description`**Type**: `STRING`**Provider name**: `description`**Description**: Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
  - `expression`**Type**: `STRING`**Provider name**: `expression`**Description**: Textual representation of an expression in Common Expression Language syntax.
  - `location`**Type**: `STRING`**Provider name**: `location`**Description**: Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
  - `title`**Type**: `STRING`**Provider name**: `title`**Description**: Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- `recommendation`**Type**: `STRING`**Provider name**: `recommendation`**Description**: An explanation of the recommended steps that security teams can take to resolve the detected issue. This explanation is returned with each finding generated by this module in the `nextSteps` property of the finding JSON.
- `resource_selector`**Type**: `STRUCT`**Provider name**: `resourceSelector`**Description**: The resource types that the custom module operates on. Each custom module can specify up to 5 resource types.
  - `resource_types`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `resourceTypes`**Description**: The resource types to run the detector on.
- `severity`**Type**: `STRING`**Provider name**: `severity`**Description**: The severity to assign to findings generated by the module.**Possible values**:
  - `SEVERITY_UNSPECIFIED` - Unspecified severity.
  - `CRITICAL` - Critical severity.
  - `HIGH` - High severity.
  - `MEDIUM` - Medium severity.
  - `LOW` - Low severity.

## `enablement_state`{% #enablement_state %}

**Type**: `STRING`**Provider name**: `enablementState`**Description**: The enablement state of the custom module.**Possible values**:

- `ENABLEMENT_STATE_UNSPECIFIED` - Unspecified enablement state.
- `ENABLED` - The module is enabled at the given CRM resource.
- `DISABLED` - The module is disabled at the given CRM resource.
- `INHERITED` - State is inherited from an ancestor module. The module will either be effectively ENABLED or DISABLED based on its closest non-inherited ancestor module in the CRM hierarchy.

## `gcp_display_name`{% #gcp_display_name %}

**Type**: `STRING`**Provider name**: `displayName`**Description**: The display name of the Security Health Analytics custom module. This display name becomes the finding category for all findings that are returned by this custom module. The display name must be between 1 and 128 characters, start with a lowercase letter, and contain alphanumeric characters or underscores only.

## `labels`{% #labels %}

**Type**: `UNORDERED_LIST_STRING`

## `last_editor`{% #last_editor %}

**Type**: `STRING`**Provider name**: `lastEditor`**Description**: Output only. The editor that last updated the custom module.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: Immutable. The resource name of the custom module. Its format is "organizations/{organization}/securityHealthAnalyticsSettings/customModules/{customModule}", or "folders/{folder}/securityHealthAnalyticsSettings/customModules/{customModule}", or "projects/{project}/securityHealthAnalyticsSettings/customModules/{customModule}" The id {customModule} is server-generated and is not user settable. It will be a numeric id containing 1-20 digits.

## `organization_id`{% #organization_id %}

**Type**: `STRING`

## `parent`{% #parent %}

**Type**: `STRING`

## `project_id`{% #project_id %}

**Type**: `STRING`

## `project_number`{% #project_number %}

**Type**: `STRING`

## `region_id`{% #region_id %}

**Type**: `STRING`

## `resource_name`{% #resource_name %}

**Type**: `STRING`

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `update_time`{% #update_time %}

**Type**: `TIMESTAMP`**Provider name**: `updateTime`**Description**: Output only. The time at which the custom module was last updated.

## `zone_id`{% #zone_id %}

**Type**: `STRING`