DataDog / cloudformation-template

Easily set up the Datadog AWS integration using CloudFormation
Apache License 2.0
34 stars 42 forks source link

Sensitive api and app keys exposed in logs #64

Open sk-ez opened 1 year ago

sk-ez commented 1 year ago

Expected Behavior

API/APP keys should not be exposed in logs

Actual Behavior

API/APP keys are logged to cloudwatch via DatadogAPICall lambda function

Steps to Reproduce the Problem

Deploy Datadog AWS integration cloudformation template in AWS account Check cloudwatch logs of DatadogAPICall function deployed as part of the above deployment - api and app keys are logged

Specifications

https://github.com/DataDog/cloudformation-template/blob/master/aws_quickstart/datadog_integration_api_call_v2.yaml https://github.com/DataDog/cloudformation-template/blob/53d9b7f5dccbf3b0049cbbb21ec6ea024fbb7327/aws_organizations/main_organizations.yaml