---
isPrivate: true
title: Setting up IaC Remediation for Cloud Security
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > Cloud Security > Setting up Cloud Security > Setting
  up IaC Remediation for Cloud Security
---

# Setting up IaC Remediation for Cloud Security

Use the following instructions to enable Infrastructure as Code (IaC) remediation for Cloud Security. IaC remediation is available for [Cloud Security Misconfigurations](https://docs.datadoghq.com/security/cloud_security_management/misconfigurations.md) and [Cloud Security Identity Risks](https://docs.datadoghq.com/security/cloud_security_management/identity_risks.md).

{% alert level="info" %}
Static IaC remediation supports GitHub for version control and Terraform for infrastructure as code.
{% /alert %}

## Set up the GitHub integration{% #set-up-the-github-integration %}

Follow [the instructions](https://docs.datadoghq.com/integrations/github.md#link-a-repository-in-your-organization-or-personal-account) for creating a GitHub app for your organization.

{% alert level="info" %}
To use IaC remediation, you must give the Github App `Read & Write` permissions for `Contents` and `Pull Requests`. These permissions can be applied to all or select repositories.
{% /alert %}

## Enable IaC remediation for your repositories{% #enable-iac-remediation-for-your-repositories %}

After you set up the GitHub integration, enable IaC remediation for the repositories in your GitHub account.

1. On the [Cloud Security Setup page](https://app.datadoghq.com/security/configuration/csm/setup), expand the **Source Code Integrations** section.
1. Click **Configure** for the GitHub account you want to configure.
1. To enable IaC:
   - All repositories: Toggle **Enable Infrastructure as Code (IaC) Remediation** to the on position.
   - Single repository: Toggle the **IAC Remediation** option for the specific repository to the on position.

## Further reading{% #further-reading %}

- [Setting up Cloud Security](https://docs.datadoghq.com/security/cloud_security_management/setup.md)
- [Cloud Security Misconfigurations](https://docs.datadoghq.com/security/cloud_security_management/misconfigurations.md)
- [Cloud Security Identity Risks](https://docs.datadoghq.com/security/cloud_security_management/identity_risks.md)