docs(governance console): generate the available controls list

[bi1yeu]

AGV-1614

What

Generates the "All available controls" section of the Governance Console controls page from the control definitions, instead of maintaining it by hand.

Why

The hand-maintained list had drifted from the source of truth:

• Missing entirely: Dashboards with Low Quality Scores, Empty Log Indexes, Inactive Log Pipelines, Unscoped Application Keys
• Wrong name: "Inactive Metric Tag" should be "Inactive Metrics Tags"
• Should not be public: "Monitors Without Team Tags" is release_status: dev

Once this lands, shipping a control to prod publishes its docs entry automatically.

How

A new shortcode reads data/governance_controls.json, published by the governance_controls invocation in ddoghq/websites-sources. It is called once per usage concern, so each section keeps its own intro prose and collapse-content wrapper — only the control entries are generated. The markup mirrors what a markdown definition list compiles to, so the entries render as they did before.

The generator publishes only controls with release_status: prod, and only mitigations that are not feature-flagged, so everything rendered is available to every org. An unrecognised usage_concern fails the build with the list of valid groups rather than silently rendering an empty section.

⚠️ Merge order

Do not merge before ddoghq/websites-sources publishes data/governance_controls.json. The shortcode calls errorf when the data is absent, so the site build will fail. That is deliberate — a missing data file should break the build rather than silently empty the page.

There is also a dd-source change (control description copy) that should deploy before this merges, otherwise the entries render without the default-parameter sentences ("The default threshold is 30 days of inactivity…"). The page is correct either way; it is just less complete until that ships.

Copy change for review

Enforcement lines now read "Enforcement: Automatically identifies and revokes…" rather than "Enforcement automatically identifies and revokes…". The colon lets the template use mitigations[].description verbatim instead of lowercasing its first character in Hugo. Happy to restore the original wording if preferred.

Verification

Built against live API data (GET /api/v2/governance/control, HTTP 200, 26 controls / 16 prod) and asserted on the rendered HTML:

• 16 controls render, exactly the expected set
• "Monitors Without Team Tags" absent
• "Inactive Metrics Tags" present, "Inactive Metric Tag" gone
• security / cost-optimization / data-hygiene section ids preserved

🤖 Generated with Claude Code

[github-actions]

Preview links (active after the build_preview check completes)

Modified Files

• https://docs-staging.datadoghq.com/matthew.bilyeu/governance-controls-generated/account_management/governance_console/controls

[bi1yeu]

Remove this comment; it's an implementation detail unnecessary for the public-facing docs

[datadog-prod-us1-5]

⚠️ Warnings

🚦 1 Pipeline job failed

DataDog/documentation | build_preview     

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 4928bcc | Docs | Datadog PR Page | Give us feedback!}