From 1a44149e9f7c2eb09387d44aca18f45866995114 Mon Sep 17 00:00:00 2001 From: Nabil Dakkoune Date: Mon, 23 Mar 2026 11:00:52 +0100 Subject: [PATCH] docs(forwarder): add key retrieval strategies --- aws/logs_monitoring/README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/aws/logs_monitoring/README.md b/aws/logs_monitoring/README.md index f39936818..364201851 100644 --- a/aws/logs_monitoring/README.md +++ b/aws/logs_monitoring/README.md @@ -483,6 +483,9 @@ The Datadog Forwarder is signed by Datadog. To verify the integrity of the Forwa `DdApiKeySecretArn` : The ARN of the secret storing the Datadog API key, if you already have it stored in Secrets Manager. You must store the secret as a plaintext, rather than a key-value pair. +`DdApiKeySsmParameterName` +: The name of the SSM parameter containing the Datadog API key. If set, both `DdApiKey` and `DdApiKeySecretArn` are ignored. + `DdSite` : The [Datadog site][13] that your metrics and logs will be sent to. Your Datadog site is {{< region-param key="dd_site" code="true" >}}. @@ -664,6 +667,12 @@ If you are installing the Forwarder manually, convert the parameter names from P `DD_API_KEY_SECRET_ARN` : The ARN of the secret storing the Datadog API key, if you already have it stored in Secrets Manager. You must store the secret as a plaintext, rather than a key-value pair. +`DD_API_KEY_SSM_NAME` +: The name of the parameter in AWS Systems Manager (SSM) Parameter Store containing the Datadog API key. Takes precedence over `DD_KMS_API_KEY` and `DD_API_KEY`. + +`DD_KMS_API_KEY` +: The Datadog API key encrypted with AWS KMS. Takes precedence over `DD_API_KEY`. + `DD_SITE` : The [Datadog site][13] that your metrics and logs will be sent to. Your Datadog site is {{< region-param key="dd_site" code="true" >}}.