Datadog Forwarders

Alias of KMS key used to encrypt the Datadog API keys - must start with `alias/`

Policy to attach to the agent endpoint that controls access to the service. Defaults to full access

IDs of security groups to attach to agent endpoint

IDs of subnets to associate with agent endpoint

A map of tags to apply to the Datadog agent endpoint

Policy to attach to the API endpoint that controls access to the service. Defaults to full access

IDs of security groups to attach to API endpoint

IDs of subnets to associate with API endpoint

A map of tags to apply to the API endpoint

Controls if S3 bucket should have deny non-SSL transport policy attacheds

List of encryption types to block on the bucket (e.g. `["SSE-C"]`). Set to `[]` to block none. Defaults to blocking SSE-C, matching AWS's own default enforcement direction for new buckets, so the attribute doesn't drift against the provider's returned state on every plan

S3 bucket server side encryption settings

Lambda artifact S3 bucket name

Controls whether an agent endpoint should be created

Controls whether a API endpoint should be created

Controls whether an S3 artifact bucket should be created. this is used for the zip archive as well as caching tags

Controls whether log forwarder resources should be created

Controls whether an IAM role is created for the log forwarder

Controls whether an IAM role policy is created for the log forwarder

Controls whether a log forwarder endpoint should be created

Controls whether a metrics VPC endpoint should be created

Controls whether a processes endpoint should be created

Controls whether RDS enhanced monitoring forwarder resources should be created

Controls whether an IAM role is created for the RDS enhanced monitoring forwarder

Controls whether an IAM role policy is created for the RDS enhanced monitoring forwarder

Controls whether a traces endpoint should be created

Controls whether VPC flow log forwarder resources should be created

Controls whether an IAM role is created for the VPC flow log forwarder

Controls whether an IAM role policy is created for the VPC flow log forwarder

The Datadog API key, which can be found from the APIs page (/account/settings#api). It will be stored in AWS Secrets Manager securely. If DdApiKeySecretArn is also set, this value will not be used. This value must still be set, however

The ARN of the Secrets Manager secret storing the Datadog API key, if you already have it stored in Secrets Manager. You still need to set a dummy value for `dd_api_key` to satisfy the requirement, though that value won't be used

The Datadog application key associated with the user account that created it, which can be found from the APIs page

Define your Datadog Site to send data to. For the Datadog EU site, set to datadoghq.eu

Instruction set architecture for your Lambda function. Valid values are `["x86_64"]` and `["arm64"]`. Default is `["arm64"]`

S3 object key prefix to prepend to zip archive name

A map of tags to apply to the log forwarder bucket

A map of environment variables for the log forwarder lambda function

KMS key that is used to encrypt environment variables. If this configuration is not provided when environment variables are in use, AWS Lambda uses a default service key

A map of tags to apply to the log forwarder lambda function

List of Lambda Layer Version ARNs (maximum of 5) to attach to the log forwarder lambda

ARN of the agent VPC endpoint

DNS entries of the agent VPC endpoint

ID of the agent VPC endpoint

One or more network interfaces for the agent VPC endpoint

The ID of the AWS account that owns the agent VPC endpoint

The state of the agent VPC endpoint

ARN of the API VPC endpoint

DNS entries of the API VPC endpoint

ID of the API VPC endpoint

One or more network interfaces for API api VPC endpoint

The ID of the AWS account that owns the API VPC endpoint

The state of the API VPC endpoint

The ARN of the log forwarder lambda function CloudWatch log group

ARN of the log forwarder VPC endpoint

DNS entries of the log forwarder VPC endpoint

ID of the log forwarder VPC endpoint

One or more network interfaces for the log forwarder VPC endpoint

The ID of the AWS account that owns the log forwarder VPC endpoint

The state of the log forwarder VPC endpoint

The ARN of the log forwarder lambda function

(Optional) The ARN for the KMS encryption key for the log forwarder lambda function

The ARN of the log forwarder lambda function (if versioning is enabled via publish = true)

Base64-encoded representation of raw SHA-256 sum of the log forwarder zip file, provided either via filename or s3_* parameters

Latest published version of the log forwarder lambda function

The log forwarder lambda role arn

The log forwarder lambda role id

The log forwarder lambda role name

The ARN of the log forwarder lambda role policy

The ID of the log forwarder lambda role policy

The name of the log forwarder lambda role policy

The stable and unique string identifying the log forwarder lambda role

The ARN of the log forwarder bucket. Will be of format arn:aws:s3:::bucketname

The log forwarder bucket domain name. Will be of format bucketname.s3.amazonaws.com

The name of the log forwarder bucket

The log forwarder bucket region-specific domain name. The bucket domain name including the region name

The ETag generated for the log forwarder lambda zip object (an MD5 sum of the object content)

The `key` of the log forwarder lambda zip archive

A unique version ID value for the log forwarder lambda zip object, if bucket versioning is enabled

ARN of the metrics VPC endpoint

DNS entries of the metrics VPC endpoint