Datadog API Credentials

Description

General

• Documentation: https://docs.datadoghq.com/account_management/api-app-keys/#api-keys
• Summary: Datadog is a monitoring service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform. The service is also available via an API. All requests to Datadog's API must be authenticated. An API key is required for a local Datadog agent to push data to the corresponding Datadog dashboard and requests that read data require full access and also require an application key This detector aims at catching these keys.

Revoke the secret

Credentials can be revoked from the Integration/API tab in the application. See the docs for more information.

Details for Datadog Key

• Family: credentials

• Category: monitoring

• Company: Datadog

• High recall: False

• Validity check available: True

• Analyzer available: True

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Occurrences found for one million commits: 1.26

• Prefixed: False

Details for Datadog Keys

• Family: credentials

• Category: monitoring

• Company: Datadog

• High recall: False

• Validity check available: True

• Analyzer available: True

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Occurrences found for one million commits: 0.82

• Prefixed: False

Details for Datadog Keys

• Family: credentials

• Category: monitoring

• Company: Datadog

• High recall: False

• Validity check available: True

• Analyzer available: True

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 0.01

• Prefixed: False

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: False
• Total network call count: 51
• Total call count may vary: True

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• GET: /api/v1/dashboard/lists/manual
• GET: /api/v1/hosts/totals
• GET: /api/v1/monitor
• GET: /api/v1/org
• GET: /api/v1/slo/correction
• GET: /api/v1/synthetics/locations
• GET: /api/v1/synthetics/tests
• GET: /api/v1/synthetics/variables
• GET: /api/v1/validate
• GET: /api/v2/api_keys
• GET: /api/v2/apicatalog/api
• GET: /api/v2/apm/services
• GET: /api/v2/cases/*
• GET: /api/v2/current_user
• GET: /api/v2/current_user/application_keys
• GET: /api/v2/events
• GET: /api/v2/metrics
• GET: /api/v2/org_connections
• GET: /api/v2/permissions
• GET: /api/v2/services/definitions
• GET: /api/v2/team
• GET: /api/v2/workflows/*/instances
• PATCH: /api/v2/test/flaky-test-management/tests
• POST: /api/v1/downtime
• POST: /api/v1/integration/webhooks/configuration/webhooks
• POST: /api/v1/monitor
• POST: /api/v1/slo
• POST: /api/v1/slo/correction
• POST: /api/v1/synthetics/private-locations
• POST: /api/v1/synthetics/tests/api
• POST: /api/v1/synthetics/variables
• POST: /api/v2/agentless_scanning/accounts/aws
• POST: /api/v2/apicatalog/openapi
• POST: /api/v2/cases
• POST: /api/v2/catalog/entity
• POST: /api/v2/code-coverage/branch/summary
• POST: /api/v2/error-tracking/issues/search
• POST: /api/v2/org_connections
• POST: /api/v2/powerpacks
• POST: /api/v2/query/timeseries
• POST: /api/v2/roles
• POST: /api/v2/team
• POST: /api/v2/test/flaky-test-management/tests
• POST: /api/v2/workflows/*/instances

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.