For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/cloud_security_management/setup/supported_deployment_types.md. A documentation index is available at /llms.txt.
This product is not supported for your selected Datadog site. ().
Collecting events using Cloud Security affects your billing. For more information, see Datadog Pricing.

The following table summarizes the Cloud Security features available relative to each deployment type.

Deployment typeAgent Required (7.46+)MisconfigurationsVulnerabilitiesIdentity RisksAgentless Scanning
AWS Account
Azure Subscription
GCP Project
OCI Tenancy
Terraform
Docker
Kubernetes
Linux
Amazon ECS/EKS
Windows
AWS Fargate ECS/EKSECS Fargate only

The following table summarizes the scope of coverage available relative to each Cloud Security feature.

Resources monitoredMisconfigurationsVulnerabilitiesIdentity RisksAgentless scanning
AWS Resources/IAM
Azure Resources/IAM
GCP Resources/IAM
OCI Resources/IAM
Kubernetes Cluster
Docker Host
Linux Host
Windows Host
Docker Container
Container Image

Note: Cloud Security Misconfigurations additionally monitors common resources used in your cloud accounts that are running Windows and AWS Fargate, such as EC2 instances, RDS, S3, and ELB.