Datadog forwarder DdApiKeySecretArn not optional?

[chr4ss12]

am I crazy or is this just broken?

My DdApiKey is filled, both DdApiKeySecretArn is empty with DdApiKeySsmParameterName, yet DdApiKeySecretArn is not an optional parameter even though it is implied in the placeholder texts that it should be. So should it be optional or not? I can't proceed:

ValidationError
Parameter 'DdApiKeySecretArn' must match pattern arn:.:secretsmanager:.

[perzycharles]

Are you using https://datadog-cloudformation-template.s3.amazonaws.com/aws/forwarder/latest.yaml? I didn't have the same issue in test.

[ge0Aja]

Hello @chr4ss12 I think if you remove the default value it will trigger this validation exception. See the default value here
The ARN is always optional as we check the passed value against the default value here and create a secret if it was the default one.