Cloud Authentication

Create an AWS cloud authentication intake mapping

Create an AWS cloud authentication intake mapping to authorize an AWS ARN pattern for Agent authentication. The AWS account must already be integrated with Datadog, and managed API key rotation must be enabled for the organization. Patterns that conflict with existing intake or persona mappings are rejected.

post/api/v2/wif/aws/intake_mapping

Request

Request body

Example request

{
  "data": {
    "attributes": {
      "arn_pattern": "arn:aws:sts::123456789012:assumed-role/DatadogAgentRole/*"
    },
    "type": "aws_cloud_auth_intake_mapping"
  }
}

Response

Created

Example response

{
  "data": {
    "attributes": {
      "arn_pattern": "arn:aws:sts::123456789012:assumed-role/DatadogAgentRole/*",
      "par_enrollment_enabled": true
    },
    "id": "c5c758c6-18c2-4484-ae3f-46b84128404a",
    "type": "aws_cloud_auth_intake_mapping"
  }
}

Changes

Changes to this operation have not been checked yet.