Datadog AWS Integration Permissions

Overview

This CloudFormation template manages IAM permissions for the Datadog AWS integration. It fetches all required permissions for the integration from the Datadog API and creates customer managed IAM policies which are attached to your Datadog integration role.

Installation

1. Ensure you have already set up the Datadog AWS Integration.
2. Deploy this CloudFormation stack in the same AWS account as your Datadog integration.
3. Provide the following parameters:
   • DatadogIntegrationRole: The name of your existing Datadog integration IAM role
   • AccountId: Your AWS account ID

AWS Resources

This template creates the following AWS resources:

• Customer managed IAM policies:
  • Policies are named in the format datadog-aws-integration-iam-permissions-{hash}-part{n}.
  • A unique hash is created based on your role name and account ID to ensure policy names are consistent across updates.
  • Each policy contains up to 150 permissions to stay within IAM policy character limits.