Skip to main content

Datadog API Credentials

Description#

General#

  • Documentation: https://docs.datadoghq.com/account_management/api-app-keys/#api-keys
  • Summary: Datadog is a monitoring service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform. The service is also available via an API. All requests to Datadog's API must be authenticated. An API key is required for a local Datadog agent to push data to the corresponding Datadog dashboard and requests that read data require full access and also require an application key This detector aims at catching these keys.
  • IPs allowlist: This feature is not mentioned in the documentation.
  • Scopes: This key allows users to push data to the corresponding Datadog dashboard. All API keys have the same write-only access rights.

Revoke the secret#

Credentials can be revoked from the Integration/API tab in the application. See the docs for more information.

Check for suspicious activity#

This feature is not mentioned in the documentation.

Details for Datadog api key#

  • Family: Api

  • Category: Monitoring

  • Company: Datadog

  • High recall: False

  • Validity check available: True

  • On-premise instances exist: False

  • Only valid secrets raise an alert: True

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 1.72

  • Prefixed: False

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions:  - ^lock$  - ^storyboard(c|er)?~?$  - ^xib$  banlist_filenames: []  check_binaries: false  include_default_banlist_extensions: false  ban_markup: false- type: ContentWhitelistPreValidator  patterns:  - datadog  - dogapi  - dd[_-]?api[_-]?key

Examples#

- text: dogapi token = "dd52c29224affe29d163c6bf99e5c34f";  apikey: dd52c29224affe29d163c6bf99e5c34f- text: datadog token = "3c0c3965368a6b10f7640dbda46abfdc";  apikey: 3c0c3965368a6b10f7640dbda46abfdc

Details for Datadog api keys#

  • Family: Api

  • Category: Monitoring

  • Company: Datadog

  • High recall: False

  • Validity check available: True

  • On-premise instances exist: False

  • Only valid secrets raise an alert: True

  • Minimum number of matches: 2

  • Occurrences found for one million commits: 0.71

  • Prefixed: False

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions: []  banlist_filenames: []  check_binaries: false  include_default_banlist_extensions: true  ban_markup: false- type: ContentWhitelistPreValidator  patterns:  - datadog  - dd([_-]client)?[_-]ap[pi][_-]key

Examples#

- text: >    datadog    key = 3c0c3965368a6b10f7640dbda46abfd2    secret= 3c0c3965368a6b10f7640dbda46abfdca981c2d3  client_id: 3c0c3965368a6b10f7640dbda46abfd2  client_secret: 3c0c3965368a6b10f7640dbda46abfdca981c2d3- text: datadog key = 3c0c3965368a6b10f7640dbda46abfd2 secret= 3c0c3965368a6b10f7640dbda46abfdca981c2d3
  client_id: 3c0c3965368a6b10f7640dbda46abfd2  client_secret: 3c0c3965368a6b10f7640dbda46abfdca981c2d3  filename: some_file.md