Table: datadog_integration_aws - Query Datadog AWS Integrations using SQL

Datadog AWS Integration is a feature of Datadog that allows you to monitor your AWS infrastructure in real-time. It provides comprehensive, multi-dimensional views of your AWS environment, helping you to understand performance, troubleshoot issues, and optimize costs. The integration enables you to collect and visualize all your AWS metrics, traces, and logs in one platform.

Table Usage Guide

The datadog_integration_aws table provides insights into AWS integrations within the Datadog platform. As a DevOps engineer, explore integration-specific details through this table, including integrated AWS accounts, role names, and filter tags. Utilize it to uncover information about your integrations, such as which AWS accounts are integrated, the roles used for integration, and the tags applied to filter the data.

Examples

Basic info

Explore which roles have access to your AWS account and determine if metrics and resource collection are enabled. This can help identify potential security risks and assess the efficiency of data collection practices.

select
  account_id,
  role_name,
  access_key_id,
  excluded_regions,
  metrics_collection_enabled,
  resource_collection_enabled,
  account_specific_namespace_rules
from
  datadog_integration_aws;

select
  account_id,
  role_name,
  access_key_id,
  excluded_regions,
  metrics_collection_enabled,
  resource_collection_enabled,
  account_specific_namespace_rules
from
  datadog_integration_aws;

List AWS integrations with "env:production" filter tags

Discover the AWS integrations that have been tagged specifically for a production environment. This can be useful for managing and monitoring resources used in your production workflows.

select
  account_id,
  excluded_regions,
  jsonb_pretty(filter_tags) as filter_tags
from
  datadog_integration_aws
where
  filter_tags @> '["env:production"]' :: jsonb;

Error: The corresponding SQLite query is unavailable.

List namespaces with metric collection enabled for a specific AWS account

This example helps to identify the namespaces within a specific AWS account that have metric collection enabled. This is beneficial for monitoring and analyzing the performance of different services within the account.

select
  item.namespace
from
  datadog_integration_aws
  join lateral jsonb_each_text(account_specific_namespace_rules) item(namespace, enabled) on true
where
  item.enabled :: boolean
  and account_id = '123456789012';

Error: The corresponding SQLite query is unavailable.

List namespaces with metric collection enabled for a specific AWS account

select
  item.namespace
from
  datadog_integration_aws
  join lateral jsonb_each_text(account_specific_namespace_rules) item(namespace, enabled) on true
where
  item.enabled :: boolean
  and account_id = '123456789012';

Schema for datadog_integration_aws

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form, e.g. connection_name.
access_key_id	text	=	Your AWS access key ID. Only required if your AWS account is a GovCloud or China account.
account_id	text	=	Your AWS Account ID without dashes.
account_specific_namespace_rules	jsonb		An object, that enables or disables metric collection for specific AWS namespaces for this AWS account only.
cspm_resource_collection_enabled	boolean		Whether Datadog collects cloud security posture management resources from your AWS account. This includes additional resources not covered under the general `resource_collection`.
excluded_regions	jsonb		An array of AWS regions to exclude from metrics collection.
filter_tags	jsonb		List of tags (in the form 'key:value') that define a filter which is used when collecting EC2 or Lambda resources. These key:value pairs can be used to both whitelist and blacklist tags.
host_tags	jsonb		Array of tags (in the form `key:value`) to add to all hosts and metrics reporting through this integration.
metrics_collection_enabled	boolean		Whether Datadog collects metrics for this AWS account.
resource_collection_enabled	boolean		Whether Datadog collects a standard set of resources from your AWS account.
role_name	text	=	Your Datadog role delegation name.
secret_access_key	text		Your AWS secret access key. Only required if your AWS account is a GovCloud or China account.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- datadog

You can pass the configuration to the command with the --config argument:

steampipe_export_datadog --config '<your_config>' datadog_integration_aws