Datadog Connection

Learn how to configure a Datadog Connection for Infisical.

Infisical supports the use of a Datadog API Key paired with a Service Account Application Key to authenticate with Datadog.

We recommend issuing the Application Key on a dedicated Service Account so the credentials Infisical uses can be rotated and revoked independently of any individual user.

Create Datadog Credentials

1. Open Organization Settings

   From your Datadog dashboard, hover the bottom left where it says Integrations. This will open a window with Organization Settings

   
2. Navigate to API Keys

   In the left sidebar, select API Keys.

   
3. Create a New API Key

   Click the New Key button in the top-right corner.

   
4. Name the API Key

   Provide a descriptive name for the API Key (e.g. infisical-connection) and click Create Key.

   
5. Copy the API Key Value

   Copy the generated API Key value and store it somewhere safe. You will need it when creating the Infisical connection.

   
6. Navigate to Service Accounts

   Back in Organization Settings, open the Service Accounts section from the left sidebar.

   
7. View Service Accounts

   On the Service Accounts page, click New Service Account.

   
8. Create the Service Account

   Provide a name, email, and select a role for the Service Account, then click Create Service Account.

   The Service Account’s role determines which resources Infisical can access. Make sure it has access to the resources you want Infisical to manage. For secret rotation, it is required to have the Datadog Admin Role as a base so the Application Key can be scoped

   
9. Open the New Service Account

   Once created, click on created the Service Account from the list to manage its Application Keys.

   
10. Create an Application Key

    Under the Application Keys section of the Service Account, click New Key.

    
11. Define a name for the Application Key

    Define a name for the application key

    
12. Configure Application Key Scopes

    Assign the scopes required for your use case. On Scope click on Edit, so you can define the scopes you want. If this is left empty, the scope of this key will be the same as the service account.

    At minimum, the Application Key needs scopes to read users and manage Service Account Application Keys if you plan to use Datadog Application Key Secret Rotation. For this use case, you need to set user_app_keys under API and Application Keys and service_account_write, user_access_manage and user_access_read under Access Management

    
13. Copy the Application Key Value

    Copy the Application Key value and store it somewhere safe. You will need it when creating the Infisical connection.

    

Create Datadog Connection in Infisical

Infisical UI

1. Navigate to App Connections

   In your Infisical dashboard, navigate to the Integrations tab in the desired project, then select App Connections.

   
2. Select Datadog Connection

   Click the ** Add Connection** button and select Datadog from the list of available connections.

   
3. Fill out the Datadog Connection Modal

   Complete the Datadog Connection form by entering:

   • A descriptive name for the connection

   • An optional description for future reference

   • The Datadog URL for your region (e.g. https://api.datadoghq.com, https://api.us5.datadoghq.com, or https://api.ddog-gov.com)

   • The API Key from earlier steps

   • The Service Account Application Key from earlier steps

     
4. Connection Created

   After clicking Create, your Datadog Connection is established and ready to use with your Infisical project.

   

API

To create a Datadog Connection, make an API request to the Create Datadog Connection API endpoint.

Sample request

Request

curl    --request POST \
        --url https://app.infisical.com/api/v1/app-connections/datadog \
        --header 'Content-Type: application/json' \
        --data '{
            "name": "my-datadog-connection",
            "method": "api-key",
            "projectId": "7ffbb072-2575-495a-b5b0-127f88caef78",
            "credentials": {
                "url": "https://api.datadoghq.com",
                "apiKey": "<YOUR-API-KEY>",
                "applicationKey": "<YOUR-APPLICATION-KEY>"
            }
        }'

Sample response

Response

{
  "appConnection": {
      "id": "e5d18aca-86f7-4026-a95e-efb8aeb0d8e6",
      "name": "my-datadog-connection",
      "projectId": "7ffbb072-2575-495a-b5b0-127f88caef78",
      "description": null,
      "version": 1,
      "orgId": "6f03caa1-a5de-43ce-b127-95a145d3464c",
      "createdAt": "2025-04-23T19:46:34.831Z",
      "updatedAt": "2025-04-23T19:46:34.831Z",
      "isPlatformManagedCredentials": false,
      "credentialsHash": "7c2d371dec195f82a6a0d5b41c970a229cfcaf88e894a5b6395e2dbd0280661f",
      "app": "datadog",
      "method": "api-key",
      "credentials": {
          "url": "https://api.datadoghq.com"
      }
  }
}