diff --git a/aws_quickstart/CHANGELOG.md b/aws_quickstart/CHANGELOG.md index 5f334faa..96cdb959 100644 --- a/aws_quickstart/CHANGELOG.md +++ b/aws_quickstart/CHANGELOG.md @@ -1,3 +1,7 @@ +# 4.1.6 (October 31, 2025) + +[Agentless] Send scanner instance policy ARN to backend to reduce first scan latency + # 4.1.5 (October 27, 2025) Add permissions to support AWS Batch integration: diff --git a/aws_quickstart/datadog_agentless_api_call.py b/aws_quickstart/datadog_agentless_api_call.py index 40356628..5e2ef9e9 100644 --- a/aws_quickstart/datadog_agentless_api_call.py +++ b/aws_quickstart/datadog_agentless_api_call.py @@ -25,6 +25,7 @@ def call_datadog_agentless_api(event, method): delegate_role_arn = event["ResourceProperties"].get("DelegateRoleArn") instance_role_arn = event["ResourceProperties"].get("InstanceRoleArn") instance_profile_arn = event["ResourceProperties"].get("InstanceProfileArn") + scanner_policy_arn = event["ResourceProperties"].get("ScannerPolicyArn") orchestrator_policy_arn = event["ResourceProperties"].get("OrchestratorPolicyArn") worker_policy_arn = event["ResourceProperties"].get("WorkerPolicyArn") worker_dspm_policy_arn = event["ResourceProperties"].get("WorkerDSPMPolicyArn") @@ -64,6 +65,7 @@ def call_datadog_agentless_api(event, method): "delegate_role_arn": delegate_role_arn, "instance_role_arn": instance_role_arn, "instance_profile_arn": instance_profile_arn, + "scanner_policy_arn": scanner_policy_arn, "orchestrator_policy_arn": orchestrator_policy_arn, "worker_policy_arn": worker_policy_arn, "worker_dspm_policy_arn": worker_dspm_policy_arn, diff --git a/aws_quickstart/datadog_agentless_scanning.yaml b/aws_quickstart/datadog_agentless_scanning.yaml index c167d2d5..fa5b653d 100644 --- a/aws_quickstart/datadog_agentless_scanning.yaml +++ b/aws_quickstart/datadog_agentless_scanning.yaml @@ -1062,6 +1062,7 @@ Resources: DelegateRoleArn: !GetAtt "ScannerDelegateRole.Arn" InstanceRoleArn: !GetAtt "ScannerInstanceRole.Arn" InstanceProfileArn: !GetAtt "ScannerAgentInstanceProfile.Arn" + ScannerPolicyArn: !Ref "ScannerAgentPolicy" OrchestratorPolicyArn: !Ref "ScannerDelegateRoleOrchestratorPolicy" WorkerPolicyArn: !Ref "ScannerDelegateRoleWorkerPolicy" WorkerDSPMPolicyArn: !If [DSPMEnabled, !Ref "ScannerDelegateRoleWorkerDSPMPolicy", !Ref "AWS::NoValue"] diff --git a/aws_quickstart/version.txt b/aws_quickstart/version.txt index fdc089d4..f65ba33c 100644 --- a/aws_quickstart/version.txt +++ b/aws_quickstart/version.txt @@ -1 +1 @@ -v4.1.5 +v4.1.6