remove logging of api and app keys

DataDog / cloudformation-template

Easily set up the Datadog AWS integration using CloudFormation

Apache License 2.0

34 stars 42 forks source link

remove logging of api and app keys #63

Open sk-ez opened 1 year ago

sk-ez commented 1 year ago

What does this PR do?

closes #64 by removing the lambda code where API and APP keys are logged to the AWS CloudWatch Logs, thereby fixing the vulnerability in the Datadog AWS integration CloudFormation templates

Motivation

Would like to avoid situations where unauthorized parties can gain admin access to organizations' datadog platform due to this exposure

sk-ez commented 1 year ago

Are there outstanding concerns preventing the merging of the fix?