Skip to content

v0.17.0

Compare
Choose a tag to compare
@cloudpossebot cloudpossebot released this 29 Jun 19:43
5d79e77
Add `*_collection_enabled` attributes @bendrucker (#42)

What

  • The Datadog AWS integration supports toggling metrics, resource, and CSPM (Cloud Security Posture Management) collection for each account. This enables setting those attributes.
  • When CSPM collection is enabled, this automatically attaches the required SecurityAudit policy to the role.

Why

  • Allows CSPM to be declaratively enabled for AWS accounts.
  • Allows metrics to be disabled for accounts.
  • Retains backward compatibility by preserving var.security_audit_policy_enabled. In a breaking release, this could be removed in favor of just var.cspm_resource_collection_enabled.

References