[DOCS-15057] Move App and API Protection from unsupported to Preview on US1-FED

config/_default/params.yaml

@@ -306,6 +306,7 @@ unsupported_sites:
   apm_processing_pipelines: [gov,gov2]
   apm_recommendations: [gov,gov2]
   application_security: [gov,gov2]
+  application_security_override: [gov2] # docs (content/en/security/application_security and content/en/getting_started/security/application_security.md cascades) — AAP is in Preview on gov
   autocomplete_search: [gov,gov2]
   azure-automated-log-forwarding: [gov,gov2]
   azure-private-link: [us,us5,eu,gov,gov2,ap1,ap2,uk1]

content/en/getting_started/security/application_security.md

@@ -20,9 +20,16 @@ further_reading:
 - link: "https://learn.datadoghq.com/courses/app-protection-block-attacks"
   tag: "Learning Center"
   text: "Block Application Attacks with Application & API Protection"
+site_support_id: application_security_override
 
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 ## Overview
 
 Datadog App and API Protection (AAP) helps secure your web applications and APIs in production.

content/en/security/application_security/_index.md

@@ -39,8 +39,17 @@ further_reading:
   text: "Block Application Attacks with Application & API Protection"
 algolia:
   tags: ["asm", "App and API Protection"]
+site_support_id: application_security_override
+cascade:
+    site_support_id: application_security_override
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 {{% site-region region="us,us3,us5,eu,ap1,ap2,uk1" %}}
 
 <div class="alert alert-info">

content/en/security/application_security/api_posture/_index.md

@@ -7,6 +7,12 @@ further_reading:
   text: "From discovery to defense: Securing APIs with Datadog App and API Protection"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Use API Posture in [App and API Protection][1] (AAP) to discover your APIs, assess the risks they expose, and track your security posture.
 
 To get started, [set up AAP][2] on your services to discover endpoints from your live traffic. Other data sources, such as Amazon API Gateway and source code, require additional setup; see [API Endpoints][3] for details.

content/en/security/application_security/api_posture/api_findings.md

@@ -3,6 +3,12 @@ title: API Findings
 description: Triage detected API risks across definitions, gateways, and live traffic.
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 The [API Findings][1] explorer provides a central triage view of the API risks detected across your definitions, gateways, and live traffic. Default rules detect common vulnerabilities and misconfigurations. You can also add [custom rules][2] for specific use cases.
 
 **API Findings** columns:

content/en/security/application_security/api_posture/api_inventory/_index.md

@@ -9,6 +9,12 @@ further_reading:
   text: "Mitigate the primary API security risks"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 [API Inventory][1] is a continuously updated catalog of the API endpoints and services API Posture discovers across your environment. It shows security context for each endpoint, such as authentication status, public exposure, sensitive data flows, and associated findings.
 
 Inventory consists of two explorers:

content/en/security/application_security/api_posture/api_inventory/api_endpoints.md

@@ -3,6 +3,12 @@ title: API Endpoints
 description: Monitor API traffic to assess endpoint risk, authentication, sensitive data flows, and exposure.
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 The [API Endpoints][1] explorer monitors your API traffic to provide visibility into the security posture of your APIs, including:
 
 - **Authentication**: Whether the API enforces authentication.

content/en/security/application_security/api_posture/api_inventory/services.md

@@ -3,6 +3,12 @@ title: Services
 description: View where API findings, vulnerabilities, and runtime signals converge by service.
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 The [Services][1] explorer aggregates findings, vulnerabilities, and runtime signals by service, so you can assess each service's risk and security coverage.
 
 Review your services for the following:

content/en/security/application_security/api_posture/compliance.md

@@ -10,6 +10,12 @@ further_reading:
   text: "OWASP API Security Top 10 2023"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 ## Overview
 
 API Posture Compliance lets you continuously evaluate your API security posture against industry-standard frameworks. It maps Datadog's built-in API security detection rules to compliance framework controls and provides a real-time posture score showing which controls are passing or failing across your services.

content/en/security/application_security/api_posture/endpoint_scanning.md

@@ -3,6 +3,12 @@ title: Endpoint Scanning
 description: Verify whether discovered API endpoints are publicly accessible and require authentication.
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 <div class="alert alert-warning">Endpoint Scanning is in Preview and is subject to change.</div>
 
 Endpoint Scanning probes your API endpoints from outside your environment and records their HTTP responses, rather than inferring behavior from observed traffic. The results enrich the [API Inventory][2] with verified authentication and visibility data.

content/en/security/application_security/api_posture/overview.md

@@ -10,6 +10,12 @@ further_reading:
   text: "Attack Summary"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 The **API Posture** overview page gives you a security-focused view of your API estate. It surfaces how well your endpoints are covered, the open findings affecting them, the endpoints most exposed to risk, and the policies that protect them. The following sections describe each area of the page.
 
 {{< img src="security/application_security/overview/api_posture.png" alt="API Posture overview page" >}}

content/en/security/application_security/api_posture/sensitive_data.md

@@ -3,6 +3,12 @@ title: Sensitive Data
 description: Detect and classify sensitive data processed by your API endpoints.
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 [App and API Protection][1] matches known patterns for sensitive data in API requests and responses. If it finds a match, the endpoint is tagged with the category and type of sensitive data processed and displayed in [API Endpoints][2].
 
 The matching occurs within your application, and none of the sensitive data is sent to Datadog.

content/en/security/application_security/attack_summary.md

@@ -13,6 +13,12 @@ further_reading:
   text: "Threat Protection Overview"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 <!-- {{< img src="security/application_security/threats/appsec-threat-overview-page-top.png" alt="Screenshot of the AAP Attack Summary page"  >}} -->
 
 The App and API Protection (AAP) [Attack Summary][2] provides a quick view of your application and API posture. It highlights trends, service exposure, attack traffic, and the impact on business logic. You can pivot from widgets to their related traces.

content/en/security/application_security/guide/_index.md

@@ -4,6 +4,12 @@ private: true
 disable_toc: true
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 {{< whatsnext desc="Getting Started" >}}
     {{< nextlink href="/getting_started/security/application_security/" >}}First steps with App and API Protection{{< /nextlink >}}
 {{< /whatsnext >}}

content/en/security/application_security/guide/manage_account_theft_appsec.md

@@ -3,6 +3,12 @@ title: Managing Account Theft with AAP
 disable_toc: false
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Users are trusted entities in your systems with access to sensitive information and the ability to perform sensitive actions. Malicious actors have identified users as an opportunity to target websites and steal valuable data and resources.
 
 Datadog App and API Protection (AAP) provides [built-in][1] detection and protection capabilities to help you manage this threat. 

content/en/security/application_security/guide/standalone_application_security.md

@@ -3,6 +3,12 @@ title: Set Up App and API Protection Without APM or Infrastructure Monitoring
 disable_toc: false
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Datadog App and API Protection (AAP) is built on top of [APM][3] and runs alongside [Infrastructure Monitoring][7] by default. While Datadog recommends using AAP together with APM and Infrastructure Monitoring to adopt DevSecOps practices, you can also run AAP on its own. This configuration is referred to as Standalone App and API Protection.
 
 Running standalone allows to be billed primarily for App and API Protection. Some APM intake is still present to support AAP features (for example, security traces), and is expected to appear on your bill.

content/en/security/application_security/how-it-works/_index.md

@@ -7,6 +7,12 @@ aliases:
   - /security/guide/how-appsec-works/
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 ## Overview
 
 Datadog App and API Protection (AAP) provides observability into application and API-level attacks that aim to exploit vulnerabilities and abuse app business logic, and observability into any bad actors targeting your systems. AAP performs actions such as the following:

content/en/security/application_security/how-it-works/add-user-info.md

@@ -6,6 +6,12 @@ aliases:
   - /security/application_security/threats/add-user-info/
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 ## Overview
 
 Instrument your services and track user activity to detect and block bad actors.

content/en/security/application_security/how-it-works/threat-intelligence.md

@@ -10,6 +10,12 @@ further_reading:
 
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 ## Overview
 
 This topic describes [threat intelligence][1] for App and API Protection (AAP).

content/en/security/application_security/how-it-works/trace_qualification.md

@@ -4,6 +4,12 @@ aliases:
   - /security/application_security/threats/trace_qualification
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 ## Overview
 
 App and API Protection (AAP) provides observability into application-level attacks, and evaluates the conditions in which each trace was generated. AAP trace qualification then labels each attack as harmful or safe to help you take action on the most impactful attacks.

content/en/security/application_security/setup/_index.md

@@ -11,6 +11,12 @@ disable_toc: false
 disable_sidebar: true
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Learn how to enable App and API Protection on all the following supported platforms and environments.
 
 <div class="alert alert-info">

content/en/security/application_security/setup/aws/fargate/_index.md

@@ -19,6 +19,12 @@ further_reading:
   text: "How Application & API Protection Works in Datadog"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Learn how to set up App and API Protection (AAP) on your AWS Fargate tasks by selecting your task's programming language.
 
 <div class="alert alert-info">

content/en/security/application_security/setup/aws/lambda/_index.md

@@ -22,6 +22,12 @@ further_reading:
       text: "Datadog Security extends compliance and threat protection capabilities for Google Cloud"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Learn how to setup App and API Protection on your AWS Lambda functions by selecting the programming language your function is written with.
 
 <div class="alert alert-info">

content/en/security/application_security/setup/aws/lambda/dotnet.md

@@ -18,6 +18,12 @@ further_reading:
       text: "Datadog Security extends compliance and threat protection capabilities for Google Cloud"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Configuring App and API Protection for AWS Lambda involves:
 
 1. Identifying functions that are vulnerable or are under attack and would most benefit from App and API Protection. Find them on [the Security tab of your Catalog][1].

content/en/security/application_security/setup/aws/lambda/go.md

@@ -18,6 +18,12 @@ further_reading:
       text: "Datadog Security extends compliance and threat protection capabilities for Google Cloud"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Configuring App and API Protection for AWS Lambda involves:
 
 1. Identifying functions that are vulnerable or are under attack, which would most benefit from App and API Protection. Find them on [the Security tab of your Catalog][1].

content/en/security/application_security/setup/aws/lambda/java.md

@@ -18,6 +18,12 @@ further_reading:
       text: "Datadog Security extends compliance and threat protection capabilities for Google Cloud"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Configuring App and API Protection for AWS Lambda involves:
 
 1. Identifying functions that are vulnerable or are under attack, which would most benefit from App and API Protection. Find them on [the Security tab of your Catalog][1].

content/en/security/application_security/setup/aws/lambda/nodejs.md

@@ -18,6 +18,12 @@ further_reading:
       text: "Datadog Security extends compliance and threat protection capabilities for Google Cloud"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Configuring App and API Protection for AWS Lambda involves:
 
 1. Identifying functions that are vulnerable or are under attack, which would most benefit from App and API Protection. Find them on [the Security tab of your Catalog][1].

content/en/security/application_security/setup/aws/lambda/python.md

@@ -18,6 +18,12 @@ further_reading:
       text: "Datadog Security extends compliance and threat protection capabilities for Google Cloud"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Configuring App and API Protection for AWS Lambda involves:
 
 1. Identifying functions that are vulnerable or are under attack, which would most benefit from App and API Protection. Find them on [the Security tab of your Catalog][1].

content/en/security/application_security/setup/aws/lambda/ruby.md

@@ -18,6 +18,12 @@ further_reading:
       text: "Datadog Security extends compliance and threat protection capabilities for Google Cloud"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 Configuring App and API Protection for AWS Lambda involves:
 
 1. Identifying functions that are vulnerable or are under attack, which would most benefit from App and API Protection. Find them on [the Security tab of your Catalog][1].

content/en/security/application_security/setup/aws/waf/_index.md

@@ -18,6 +18,12 @@ further_reading:
       text: "Monitor AWS WAF activity with Datadog"
 ---
 
+{{< site-region region="gov" >}}
+<div class="alert alert-info">
+App and API Protection is in Preview on Datadog Government site US1-FED.
+</div>
+{{< /site-region >}}
+
 App and API Protection integrates with AWS Web Application Firewall (WAF) by:
 
 1. Converting logs to traces to gain visibility into monitored and blocked requests