--- title: Create an AWS integration description: Datadog, the leading service for cloud-scale monitoring. breadcrumbs: Docs > API Reference > AWS Integration --- # Create an AWS integration{% #create-an-aws-integration %} {% tab title="v1" %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v1/integration/aws | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v1/integration/aws | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v1/integration/aws | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v1/integration/aws | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v1/integration/aws | | app.datadoghq.com | POST https://api.datadoghq.com/api/v1/integration/aws | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v1/integration/aws | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v1/integration/aws | ### Overview **This endpoint is deprecated - use the V2 endpoints instead.** Create a Datadog-Amazon Web Services integration. Using the `POST` method updates your integration configuration by adding your new configuration to the existing one in your Datadog organization. A unique AWS Account ID for role based authentication. This endpoint requires the `aws_configurations_manage` permission. ### Request #### Body Data (required) AWS Request Object {% tab title="Model" %} | Parent field | Field | Type | Description | | -------------------- | ------------------------------------ | -------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | access_key_id | string | Your AWS access key ID. Only required if your AWS account is a GovCloud or China account. | | | account_id | string | Your AWS Account ID without dashes. | | | account_specific_namespace_rules | object | An object (in the form `{"namespace1":true/false, "namespace2":true/false}`) containing user-supplied overrides for AWS namespace metric collection. **Important**: This field only contains namespaces explicitly configured through API calls, not the comprehensive enabled or disabled status of all namespaces. If a namespace is absent from this field, it uses Datadog's internal defaults (all namespaces enabled by default, except `AWS/SQS`, `AWS/ElasticMapReduce`, and `AWS/Usage`). For a complete view of all namespace statuses, use the V2 AWS Integration API instead. | | additionalProperties | | boolean | A list of additional properties. | | | cspm_resource_collection_enabled | boolean | Whether Datadog collects cloud security posture management resources from your AWS account. This includes additional resources not covered under the general `resource_collection`. | | | excluded_regions | [string] | An array of [AWS regions](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints) to exclude from metrics collection. | | | extended_resource_collection_enabled | boolean | Whether Datadog collects additional attributes and configuration information about the resources in your AWS account. Required for `cspm_resource_collection`. | | | filter_tags | [string] | The array of EC2 tags (in the form `key:value`) defines a filter that Datadog uses when collecting metrics from EC2. Wildcards, such as `?` (for single characters) and `*` (for multiple characters) can also be used. Only hosts that match one of the defined tags will be imported into Datadog. The rest will be ignored. Host matching a given tag can also be excluded by adding `!` before the tag. For example, `env:production,instance-type:c1.*,!region:us-east-1` | | | host_tags | [string] | Array of tags (in the form `key:value`) to add to all hosts and metrics reporting through this integration. | | | metrics_collection_enabled | boolean | Whether Datadog collects metrics for this AWS account. | | | resource_collection_enabled | boolean | **DEPRECATED**: Deprecated in favor of 'extended_resource_collection_enabled'. Whether Datadog collects a standard set of resources from your AWS account. | | | role_name | string | Your Datadog role delegation name. | | | secret_access_key | string | Your AWS secret access key. Only required if your AWS account is a GovCloud or China account. | {% /tab %} {% tab title="Example" %} ```json { "account_id": "163662907100", "account_specific_namespace_rules": { "auto_scaling": false }, "cspm_resource_collection_enabled": true, "excluded_regions": [ "us-east-1", "us-west-2" ], "extended_resource_collection_enabled": true, "filter_tags": [ "$KEY:$VALUE" ], "host_tags": [ "$KEY:$VALUE" ], "metrics_collection_enabled": false, "role_name": "DatadogAWSIntegrationRole" } ``` {% /tab %} ### Response {% tab title="200" %} OK {% tab title="Model" %} The Response returned by the AWS Create Account call. | Field | Type | Description | | ----------- | ------ | ---------------- | | external_id | string | AWS external_id. | {% /tab %} {% tab title="Example" %} ```json { "external_id": "string" } ``` {% /tab %} {% /tab %} {% tab title="400" %} Bad Request {% tab title="Model" %} Error response object. | Field | Type | Description | | ------------------------ | -------- | ------------------------------------ | | errors [*required*] | [string] | Array of errors returned by the API. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} {% tab title="403" %} Authentication Error {% tab title="Model" %} Error response object. | Field | Type | Description | | ------------------------ | -------- | ------------------------------------ | | errors [*required*] | [string] | Array of errors returned by the API. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} {% tab title="409" %} Conflict Error {% tab title="Model" %} Error response object. | Field | Type | Description | | ------------------------ | -------- | ------------------------------------ | | errors [*required*] | [string] | Array of errors returned by the API. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} {% tab title="429" %} Too many requests {% tab title="Model" %} Error response object. | Field | Type | Description | | ------------------------ | -------- | ------------------------------------ | | errors [*required*] | [string] | Array of errors returned by the API. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} ### Code Example ##### \## default # \# Curl command curl -X POST "https://api.datadoghq.com/api/v1/integration/aws" \ -H "Accept: application/json" \ -H "Content-Type: application/json" \ -H "DD-API-KEY: ${DD_API_KEY}" \ -H "DD-APPLICATION-KEY: ${DD_APP_KEY}" \ -d @- << EOF { "account_id": "123456789012", "account_specific_namespace_rules": { "auto_scaling": false, "opswork": false }, "cspm_resource_collection_enabled": true, "excluded_regions": [ "us-east-1", "us-west-2" ], "extended_resource_collection_enabled": true, "filter_tags": [ "$KEY:$VALUE" ], "host_tags": [ "$KEY:$VALUE" ], "metrics_collection_enabled": false, "role_name": "DatadogAWSIntegrationRole" } EOF ##### ```go // Create an AWS integration returns "OK" response package main import ( "context" "encoding/json" "fmt" "os" "github.com/DataDog/datadog-api-client-go/v2/api/datadog" "github.com/DataDog/datadog-api-client-go/v2/api/datadogV1" ) func main() { body := datadogV1.AWSAccount{ AccountId: datadog.PtrString("163662907100"), AccountSpecificNamespaceRules: map[string]bool{ "auto_scaling": false, }, CspmResourceCollectionEnabled: datadog.PtrBool(true), ExcludedRegions: []string{ "us-east-1", "us-west-2", }, ExtendedResourceCollectionEnabled: datadog.PtrBool(true), FilterTags: []string{ "$KEY:$VALUE", }, HostTags: []string{ "$KEY:$VALUE", }, MetricsCollectionEnabled: datadog.PtrBool(false), RoleName: datadog.PtrString("DatadogAWSIntegrationRole"), } ctx := datadog.NewDefaultContext(context.Background()) configuration := datadog.NewConfiguration() apiClient := datadog.NewAPIClient(configuration) api := datadogV1.NewAWSIntegrationApi(apiClient) resp, r, err := api.CreateAWSAccount(ctx, body) if err != nil { fmt.Fprintf(os.Stderr, "Error when calling `AWSIntegrationApi.CreateAWSAccount`: %v\n", err) fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r) } responseContent, _ := json.MarshalIndent(resp, "", " ") fmt.Fprintf(os.Stdout, "Response from `AWSIntegrationApi.CreateAWSAccount`:\n%s\n", responseContent) } ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=go) and then save the example to `main.go` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" go run "main.go" ##### ```java // Create an AWS integration returns "OK" response import com.datadog.api.client.ApiClient; import com.datadog.api.client.ApiException; import com.datadog.api.client.v1.api.AwsIntegrationApi; import com.datadog.api.client.v1.model.AWSAccount; import com.datadog.api.client.v1.model.AWSAccountCreateResponse; import java.util.Arrays; import java.util.Collections; import java.util.Map; public class Example { public static void main(String[] args) { ApiClient defaultClient = ApiClient.getDefaultApiClient(); AwsIntegrationApi apiInstance = new AwsIntegrationApi(defaultClient); AWSAccount body = new AWSAccount() .accountId("163662907100") .accountSpecificNamespaceRules(Map.ofEntries(Map.entry("auto_scaling", false))) .cspmResourceCollectionEnabled(true) .excludedRegions(Arrays.asList("us-east-1", "us-west-2")) .extendedResourceCollectionEnabled(true) .filterTags(Collections.singletonList("$KEY:$VALUE")) .hostTags(Collections.singletonList("$KEY:$VALUE")) .metricsCollectionEnabled(false) .roleName("DatadogAWSIntegrationRole"); try { AWSAccountCreateResponse result = apiInstance.createAWSAccount(body); System.out.println(result); } catch (ApiException e) { System.err.println("Exception when calling AwsIntegrationApi#createAWSAccount"); System.err.println("Status code: " + e.getCode()); System.err.println("Reason: " + e.getResponseBody()); System.err.println("Response headers: " + e.getResponseHeaders()); e.printStackTrace(); } } } ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=java) and then save the example to `Example.java` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" java "Example.java" ##### ```python from datadog import initialize, api options = { 'api_key': '', 'app_key': '' } initialize(**options) api.AwsIntegration.create( account_id="", host_tags=["tag:example"], filter_tags=["filter:example"], role_name="", account_specific_namespace_rules={'namespace1': True/False, 'namespace2': True/False}, excluded_regions=["us-east-1", "us-west-1"] ) ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=python-legacy) and then save the example to `example.py` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" python "example.py" ##### ```python """ Create an AWS integration returns "OK" response """ from datadog_api_client import ApiClient, Configuration from datadog_api_client.v1.api.aws_integration_api import AWSIntegrationApi from datadog_api_client.v1.model.aws_account import AWSAccount body = AWSAccount( account_id="163662907100", account_specific_namespace_rules=dict( auto_scaling=False, ), cspm_resource_collection_enabled=True, excluded_regions=[ "us-east-1", "us-west-2", ], extended_resource_collection_enabled=True, filter_tags=[ "$KEY:$VALUE", ], host_tags=[ "$KEY:$VALUE", ], metrics_collection_enabled=False, role_name="DatadogAWSIntegrationRole", ) configuration = Configuration() with ApiClient(configuration) as api_client: api_instance = AWSIntegrationApi(api_client) response = api_instance.create_aws_account(body=body) print(response) ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=python) and then save the example to `example.py` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" python3 "example.py" ##### ```ruby require 'rubygems' require 'dogapi' api_key = '' app_key = '' dog = Dogapi::Client.new(api_key, app_key) config = { "account_id": "", "filter_tags": [":"], "host_tags": [":"], "role_name": "DatadogAWSIntegrationRole", "account_specific_namespace_rules": {"auto_scaling": false, "opsworks": false}, "excluded_regions": ["us-east-1", "us-west-1"] } dog.aws_integration_create(config) ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=ruby-legacy) and then save the example to `example.rb` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" rb "example.rb" ##### ```ruby # Create an AWS integration returns "OK" response require "datadog_api_client" api_instance = DatadogAPIClient::V1::AWSIntegrationAPI.new body = DatadogAPIClient::V1::AWSAccount.new({ account_id: "163662907100", account_specific_namespace_rules: { auto_scaling: false, }, cspm_resource_collection_enabled: true, excluded_regions: [ "us-east-1", "us-west-2", ], extended_resource_collection_enabled: true, filter_tags: [ "$KEY:$VALUE", ], host_tags: [ "$KEY:$VALUE", ], metrics_collection_enabled: false, role_name: "DatadogAWSIntegrationRole", }) p api_instance.create_aws_account(body) ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=ruby) and then save the example to `example.rb` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" rb "example.rb" ##### ```rust // Create an AWS integration returns "OK" response use datadog_api_client::datadog; use datadog_api_client::datadogV1::api_aws_integration::AWSIntegrationAPI; use datadog_api_client::datadogV1::model::AWSAccount; use std::collections::BTreeMap; #[tokio::main] async fn main() { let body = AWSAccount::new() .account_id("163662907100".to_string()) .account_specific_namespace_rules(BTreeMap::from([("auto_scaling".to_string(), false)])) .cspm_resource_collection_enabled(true) .excluded_regions(vec!["us-east-1".to_string(), "us-west-2".to_string()]) .extended_resource_collection_enabled(true) .filter_tags(vec!["$KEY:$VALUE".to_string()]) .host_tags(vec!["$KEY:$VALUE".to_string()]) .metrics_collection_enabled(false) .role_name("DatadogAWSIntegrationRole".to_string()); let configuration = datadog::Configuration::new(); let api = AWSIntegrationAPI::with_config(configuration); let resp = api.create_aws_account(body).await; if let Ok(value) = resp { println!("{:#?}", value); } else { println!("{:#?}", resp.unwrap_err()); } } ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=rust) and then save the example to `src/main.rs` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" cargo run ##### ```typescript /** * Create an AWS integration returns "OK" response */ import { client, v1 } from "@datadog/datadog-api-client"; const configuration = client.createConfiguration(); const apiInstance = new v1.AWSIntegrationApi(configuration); const params: v1.AWSIntegrationApiCreateAWSAccountRequest = { body: { accountId: "163662907100", accountSpecificNamespaceRules: { auto_scaling: false, }, cspmResourceCollectionEnabled: true, excludedRegions: ["us-east-1", "us-west-2"], extendedResourceCollectionEnabled: true, filterTags: ["$KEY:$VALUE"], hostTags: ["$KEY:$VALUE"], metricsCollectionEnabled: false, roleName: "DatadogAWSIntegrationRole", }, }; apiInstance .createAWSAccount(params) .then((data: v1.AWSAccountCreateResponse) => { console.log( "API called successfully. Returned data: " + JSON.stringify(data) ); }) .catch((error: any) => console.error(error)); ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=typescript) and then save the example to `example.ts` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" tsc "example.ts" {% /tab %} {% tab title="v2" %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/integration/aws/accounts | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/integration/aws/accounts | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/integration/aws/accounts | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/integration/aws/accounts | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/integration/aws/accounts | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/integration/aws/accounts | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/integration/aws/accounts | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/integration/aws/accounts | ### Overview Create a new AWS Account Integration Config. This endpoint requires the `aws_configurations_manage` permission. ### Request #### Body Data (required) {% tab title="Model" %} | Parent field | Field | Type | Description | | ----------------- | -------------------------------------------- | ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | data [*required*] | object | AWS Account Create Request data. | | data | attributes [*required*] | object | The AWS Account Integration Config to be created. | | attributes | account_tags | [string] | Tags to apply to all hosts and metrics reporting for this account. Defaults to `[]`. | | attributes | auth_config [*required*] | | AWS Authentication config. | | auth_config | Option 1 | object | AWS Authentication config to integrate your account using an access key pair. | | Option 1 | access_key_id [*required*] | string | AWS Access Key ID. | | Option 1 | secret_access_key | string | AWS Secret Access Key. | | auth_config | Option 2 | object | AWS Authentication config to integrate your account using an IAM role. | | Option 2 | external_id | string | AWS IAM External ID for associated role. | | Option 2 | role_name [*required*] | string | AWS IAM Role name. | | attributes | aws_account_id [*required*] | string | AWS Account ID. | | attributes | aws_partition [*required*] | enum | AWS partition your AWS account is scoped to. Defaults to `aws`. See [Partitions](https://docs.aws.amazon.com/whitepapers/latest/aws-fault-isolation-boundaries/partitions.html) in the AWS documentation for more information. Allowed enum values: `aws,aws-cn,aws-us-gov` | | attributes | aws_regions | | AWS Regions to collect data from. Defaults to `include_all`. | | aws_regions | Option 1 | object | Include all regions. Defaults to `true`. | | Option 1 | include_all [*required*] | boolean | Include all regions. | | aws_regions | Option 2 | object | Include only these regions. | | Option 2 | include_only [*required*] | [string] | Include only these regions. | | attributes | logs_config | object | AWS Logs Collection config. | | logs_config | lambda_forwarder | object | Log Autosubscription configuration for Datadog Forwarder Lambda functions. Automatically set up triggers for existing and new logs for some services, ensuring no logs from new resources are missed and saving time spent on manual configuration. | | lambda_forwarder | lambdas | [string] | List of Datadog Lambda Log Forwarder ARNs in your AWS account. Defaults to `[]`. | | lambda_forwarder | log_source_config | object | Log source configuration. | | log_source_config | tag_filters | [object] | List of AWS log source tag filters. Defaults to `[]`. | | tag_filters | source | string | The AWS log source to which the tag filters defined in `tags` are applied. | | tag_filters | tags | [string] | The AWS resource tags to filter on for the log source specified by `source`. | | lambda_forwarder | sources | [string] | List of service IDs set to enable automatic log collection. Discover the list of available services with the [Get list of AWS log ready services](https://docs.datadoghq.com/api/latest/aws-logs-integration.md#get-list-of-aws-log-ready-services) endpoint. | | attributes | metrics_config | object | AWS Metrics Collection config. | | metrics_config | automute_enabled | boolean | Enable EC2 automute for AWS metrics. Defaults to `true`. | | metrics_config | collect_cloudwatch_alarms | boolean | Enable CloudWatch alarms collection. Defaults to `false`. | | metrics_config | collect_custom_metrics | boolean | Enable custom metrics collection. Defaults to `false`. | | metrics_config | enabled | boolean | Enable AWS metrics collection. Defaults to `true`. | | metrics_config | namespace_filters | | AWS Metrics namespace filters. Defaults to `exclude_only`. | | namespace_filters | Option 1 | object | Exclude only these namespaces from metrics collection. Defaults to `["AWS/SQS", "AWS/ElasticMapReduce", "AWS/Usage"]`. `AWS/SQS`, `AWS/ElasticMapReduce`, and `AWS/Usage` are excluded by default to reduce your AWS CloudWatch costs from `GetMetricData` API calls. | | Option 1 | exclude_only [*required*] | [string] | Exclude only these namespaces from metrics collection. Defaults to `["AWS/SQS", "AWS/ElasticMapReduce", "AWS/Usage"]`. `AWS/SQS`, `AWS/ElasticMapReduce`, and `AWS/Usage` are excluded by default to reduce your AWS CloudWatch costs from `GetMetricData` API calls. | | namespace_filters | Option 2 | object | Include only these namespaces. | | Option 2 | include_only [*required*] | [string] | Include only these namespaces. | | metrics_config | tag_filters | [object] | AWS Metrics collection tag filters list. Defaults to `[]`. | | tag_filters | namespace | string | The AWS service for which the tag filters defined in `tags` will be applied. | | tag_filters | tags | [string] | The AWS resource tags to filter on for the service specified by `namespace`. | | attributes | resources_config | object | AWS Resources Collection config. | | resources_config | cloud_security_posture_management_collection | boolean | Enable Cloud Security Management to scan AWS resources for vulnerabilities, misconfigurations, identity risks, and compliance violations. Defaults to `false`. Requires `extended_collection` to be set to `true`. | | resources_config | extended_collection | boolean | Whether Datadog collects additional attributes and configuration information about the resources in your AWS account. Defaults to `true`. Required for `cloud_security_posture_management_collection`. | | attributes | traces_config | object | AWS Traces Collection config. | | traces_config | xray_services | | AWS X-Ray services to collect traces from. Defaults to `include_only`. | | xray_services | Option 1 | object | Include all services. | | Option 1 | include_all [*required*] | boolean | Include all services. | | xray_services | Option 2 | object | Include only these services. Defaults to `[]`. | | Option 2 | include_only [*required*] | [string] | Include only these services. | | data | type [*required*] | enum | AWS Account resource type. Allowed enum values: `account` | {% /tab %} {% tab title="Example" %} ##### ```json { "data": { "attributes": { "account_tags": [ "key:value" ], "auth_config": { "role_name": "DatadogIntegrationRole" }, "aws_account_id": "123456789012", "aws_partition": "aws", "logs_config": { "lambda_forwarder": { "lambdas": [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder" ], "log_source_config": { "tag_filters": [ { "source": "s3", "tags": [ "test:test" ] } ] }, "sources": [ "s3" ] } }, "metrics_config": { "automute_enabled": true, "collect_cloudwatch_alarms": true, "collect_custom_metrics": true, "enabled": true, "tag_filters": [ { "namespace": "AWS/EC2", "tags": [ "key:value" ] } ] }, "resources_config": { "cloud_security_posture_management_collection": false, "extended_collection": false }, "traces_config": {} }, "type": "account" } } ``` ##### ```json { "data": { "attributes": { "account_tags": [ "key:value" ], "auth_config": { "access_key_id": "AKIAIOSFODNN7EXAMPLE", "secret_access_key": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY" }, "aws_account_id": "123456789012", "aws_partition": "aws", "logs_config": { "lambda_forwarder": { "lambdas": [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder" ], "log_source_config": { "tag_filters": [ { "source": "s3", "tags": [ "test:test" ] } ] }, "sources": [ "s3" ] } }, "metrics_config": { "automute_enabled": true, "collect_cloudwatch_alarms": true, "collect_custom_metrics": true, "enabled": true, "tag_filters": [ { "namespace": "AWS/EC2", "tags": [ "key:value" ] } ] }, "resources_config": { "cloud_security_posture_management_collection": false, "extended_collection": false }, "traces_config": {} }, "type": "account" } } ``` {% /tab %} ### Response {% tab title="200" %} AWS Account object {% tab title="Model" %} AWS Account response body. | Parent field | Field | Type | Description | | ----------------- | -------------------------------------------- | ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | data [*required*] | object | AWS Account response data. | | data | attributes | object | AWS Account response attributes. | | attributes | account_tags | [string] | Tags to apply to all hosts and metrics reporting for this account. Defaults to `[]`. | | attributes | auth_config | | AWS Authentication config. | | auth_config | Option 1 | object | AWS Authentication config to integrate your account using an access key pair. | | Option 1 | access_key_id [*required*] | string | AWS Access Key ID. | | Option 1 | secret_access_key | string | AWS Secret Access Key. | | auth_config | Option 2 | object | AWS Authentication config to integrate your account using an IAM role. | | Option 2 | external_id | string | AWS IAM External ID for associated role. | | Option 2 | role_name [*required*] | string | AWS IAM Role name. | | attributes | aws_account_id [*required*] | string | AWS Account ID. | | attributes | aws_partition | enum | AWS partition your AWS account is scoped to. Defaults to `aws`. See [Partitions](https://docs.aws.amazon.com/whitepapers/latest/aws-fault-isolation-boundaries/partitions.html) in the AWS documentation for more information. Allowed enum values: `aws,aws-cn,aws-us-gov` | | attributes | aws_regions | | AWS Regions to collect data from. Defaults to `include_all`. | | aws_regions | Option 1 | object | Include all regions. Defaults to `true`. | | Option 1 | include_all [*required*] | boolean | Include all regions. | | aws_regions | Option 2 | object | Include only these regions. | | Option 2 | include_only [*required*] | [string] | Include only these regions. | | attributes | created_at | date-time | Timestamp of when the account integration was created. | | attributes | logs_config | object | AWS Logs Collection config. | | logs_config | lambda_forwarder | object | Log Autosubscription configuration for Datadog Forwarder Lambda functions. Automatically set up triggers for existing and new logs for some services, ensuring no logs from new resources are missed and saving time spent on manual configuration. | | lambda_forwarder | lambdas | [string] | List of Datadog Lambda Log Forwarder ARNs in your AWS account. Defaults to `[]`. | | lambda_forwarder | log_source_config | object | Log source configuration. | | log_source_config | tag_filters | [object] | List of AWS log source tag filters. Defaults to `[]`. | | tag_filters | source | string | The AWS log source to which the tag filters defined in `tags` are applied. | | tag_filters | tags | [string] | The AWS resource tags to filter on for the log source specified by `source`. | | lambda_forwarder | sources | [string] | List of service IDs set to enable automatic log collection. Discover the list of available services with the [Get list of AWS log ready services](https://docs.datadoghq.com/api/latest/aws-logs-integration.md#get-list-of-aws-log-ready-services) endpoint. | | attributes | metrics_config | object | AWS Metrics Collection config. | | metrics_config | automute_enabled | boolean | Enable EC2 automute for AWS metrics. Defaults to `true`. | | metrics_config | collect_cloudwatch_alarms | boolean | Enable CloudWatch alarms collection. Defaults to `false`. | | metrics_config | collect_custom_metrics | boolean | Enable custom metrics collection. Defaults to `false`. | | metrics_config | enabled | boolean | Enable AWS metrics collection. Defaults to `true`. | | metrics_config | namespace_filters | | AWS Metrics namespace filters. Defaults to `exclude_only`. | | namespace_filters | Option 1 | object | Exclude only these namespaces from metrics collection. Defaults to `["AWS/SQS", "AWS/ElasticMapReduce", "AWS/Usage"]`. `AWS/SQS`, `AWS/ElasticMapReduce`, and `AWS/Usage` are excluded by default to reduce your AWS CloudWatch costs from `GetMetricData` API calls. | | Option 1 | exclude_only [*required*] | [string] | Exclude only these namespaces from metrics collection. Defaults to `["AWS/SQS", "AWS/ElasticMapReduce", "AWS/Usage"]`. `AWS/SQS`, `AWS/ElasticMapReduce`, and `AWS/Usage` are excluded by default to reduce your AWS CloudWatch costs from `GetMetricData` API calls. | | namespace_filters | Option 2 | object | Include only these namespaces. | | Option 2 | include_only [*required*] | [string] | Include only these namespaces. | | metrics_config | tag_filters | [object] | AWS Metrics collection tag filters list. Defaults to `[]`. | | tag_filters | namespace | string | The AWS service for which the tag filters defined in `tags` will be applied. | | tag_filters | tags | [string] | The AWS resource tags to filter on for the service specified by `namespace`. | | attributes | modified_at | date-time | Timestamp of when the account integration was updated. | | attributes | resources_config | object | AWS Resources Collection config. | | resources_config | cloud_security_posture_management_collection | boolean | Enable Cloud Security Management to scan AWS resources for vulnerabilities, misconfigurations, identity risks, and compliance violations. Defaults to `false`. Requires `extended_collection` to be set to `true`. | | resources_config | extended_collection | boolean | Whether Datadog collects additional attributes and configuration information about the resources in your AWS account. Defaults to `true`. Required for `cloud_security_posture_management_collection`. | | attributes | traces_config | object | AWS Traces Collection config. | | traces_config | xray_services | | AWS X-Ray services to collect traces from. Defaults to `include_only`. | | xray_services | Option 1 | object | Include all services. | | Option 1 | include_all [*required*] | boolean | Include all services. | | xray_services | Option 2 | object | Include only these services. Defaults to `[]`. | | Option 2 | include_only [*required*] | [string] | Include only these services. | | data | id [*required*] | string | Unique Datadog ID of the AWS Account Integration Config. To get the config ID for an account, use the [List all AWS integrations](https://docs.datadoghq.com/api/latest/aws-integration.md#list-all-aws-integrations) endpoint and query by AWS Account ID. | | data | type [*required*] | enum | AWS Account resource type. Allowed enum values: `account` | {% /tab %} {% tab title="Example" %} ```json { "data": { "attributes": { "account_tags": [ "env:prod" ], "auth_config": { "access_key_id": "AKIAIOSFODNN7EXAMPLE", "secret_access_key": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY" }, "aws_account_id": "123456789012", "aws_partition": "aws", "aws_regions": { "include_all": true }, "created_at": "2019-09-19T10:00:00.000Z", "logs_config": { "lambda_forwarder": { "lambdas": [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder" ], "log_source_config": { "tag_filters": [ { "source": "s3", "tags": [ "env:prod" ] } ] }, "sources": [ "s3" ] } }, "metrics_config": { "automute_enabled": true, "collect_cloudwatch_alarms": false, "collect_custom_metrics": false, "enabled": true, "namespace_filters": { "exclude_only": [ "AWS/SQS", "AWS/ElasticMapReduce", "AWS/Usage" ] }, "tag_filters": [ { "namespace": "AWS/EC2", "tags": [ "datadog:true" ] } ] }, "modified_at": "2019-09-19T10:00:00.000Z", "resources_config": { "cloud_security_posture_management_collection": false, "extended_collection": true }, "traces_config": { "xray_services": { "include_all": false } } }, "id": "00000000-abcd-0001-0000-000000000000", "type": "account" } } ``` {% /tab %} {% /tab %} {% tab title="400" %} Bad Request {% tab title="Model" %} API error response. | Field | Type | Description | | ------------------------ | -------- | ----------------- | | errors [*required*] | [string] | A list of errors. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} {% tab title="403" %} Forbidden {% tab title="Model" %} API error response. | Field | Type | Description | | ------------------------ | -------- | ----------------- | | errors [*required*] | [string] | A list of errors. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} {% tab title="409" %} Conflict {% tab title="Model" %} API error response. | Field | Type | Description | | ------------------------ | -------- | ----------------- | | errors [*required*] | [string] | A list of errors. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} {% tab title="429" %} Too many requests {% tab title="Model" %} API error response. | Field | Type | Description | | ------------------------ | -------- | ----------------- | | errors [*required*] | [string] | A list of errors. | {% /tab %} {% tab title="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tab %} ### Code Example ##### \## default # \# Curl command curl -X POST "https://api.datadoghq.com/api/v2/integration/aws/accounts" \ -H "Accept: application/json" \ -H "Content-Type: application/json" \ -H "DD-API-KEY: ${DD_API_KEY}" \ -H "DD-APPLICATION-KEY: ${DD_APP_KEY}" \ -d @- << EOF { "data": { "attributes": { "account_tags": [ "env:prod" ], "auth_config": { "access_key_id": "ACCESS_KEY_ID", "secret_access_key": "SECRET_ACCESS_KEY" }, "aws_account_id": "123456789012", "aws_partition": "aws", "aws_regions": { "include_all": true }, "logs_config": { "lambda_forwarder": { "lambdas": [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder" ], "sources": [ "s3" ] } }, "metrics_config": { "automute_enabled": true, "collect_cloudwatch_alarms": false, "collect_custom_metrics": false, "enabled": true, "tag_filters": [ { "namespace": "AWS/EC2" } ] }, "resources_config": { "cloud_security_posture_management_collection": false, "extended_collection": true } }, "type": "account" } } EOF ##### \## default # \# Curl command curl -X POST "https://api.datadoghq.com/api/v2/integration/aws/accounts" \ -H "Accept: application/json" \ -H "Content-Type: application/json" \ -H "DD-API-KEY: ${DD_API_KEY}" \ -H "DD-APPLICATION-KEY: ${DD_APP_KEY}" \ -d @- << EOF { "data": { "attributes": { "account_tags": [ "env:prod" ], "auth_config": { "access_key_id": "ACCESS_KEY_ID", "secret_access_key": "SECRET_ACCESS_KEY" }, "aws_account_id": "123456789012", "aws_partition": "aws", "aws_regions": { "include_all": true }, "logs_config": { "lambda_forwarder": { "lambdas": [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder" ], "sources": [ "s3" ] } }, "metrics_config": { "automute_enabled": true, "collect_cloudwatch_alarms": false, "collect_custom_metrics": false, "enabled": true, "tag_filters": [ { "namespace": "AWS/EC2" } ] }, "resources_config": { "cloud_security_posture_management_collection": false, "extended_collection": true } }, "type": "account" } } EOF ##### ```go // Create an AWS account returns "AWS Account object" response package main import ( "context" "encoding/json" "fmt" "os" "github.com/DataDog/datadog-api-client-go/v2/api/datadog" "github.com/DataDog/datadog-api-client-go/v2/api/datadogV2" ) func main() { body := datadogV2.AWSAccountCreateRequest{ Data: datadogV2.AWSAccountCreateRequestData{ Attributes: datadogV2.AWSAccountCreateRequestAttributes{ AccountTags: *datadog.NewNullableList(&[]string{ "key:value", }), AuthConfig: datadogV2.AWSAuthConfig{ AWSAuthConfigRole: &datadogV2.AWSAuthConfigRole{ RoleName: "DatadogIntegrationRole", }}, AwsAccountId: "123456789012", AwsPartition: datadogV2.AWSACCOUNTPARTITION_AWS, LogsConfig: &datadogV2.AWSLogsConfig{ LambdaForwarder: &datadogV2.AWSLambdaForwarderConfig{ Lambdas: []string{ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", }, LogSourceConfig: &datadogV2.AWSLambdaForwarderConfigLogSourceConfig{ TagFilters: []datadogV2.AWSLogSourceTagFilter{ { Source: datadog.PtrString("s3"), Tags: *datadog.NewNullableList(&[]string{ "test:test", }), }, }, }, Sources: []string{ "s3", }, }, }, MetricsConfig: &datadogV2.AWSMetricsConfig{ AutomuteEnabled: datadog.PtrBool(true), CollectCloudwatchAlarms: datadog.PtrBool(true), CollectCustomMetrics: datadog.PtrBool(true), Enabled: datadog.PtrBool(true), TagFilters: []datadogV2.AWSNamespaceTagFilter{ { Namespace: datadog.PtrString("AWS/EC2"), Tags: *datadog.NewNullableList(&[]string{ "key:value", }), }, }, }, ResourcesConfig: &datadogV2.AWSResourcesConfig{ CloudSecurityPostureManagementCollection: datadog.PtrBool(false), ExtendedCollection: datadog.PtrBool(false), }, TracesConfig: &datadogV2.AWSTracesConfig{}, }, Type: datadogV2.AWSACCOUNTTYPE_ACCOUNT, }, } ctx := datadog.NewDefaultContext(context.Background()) configuration := datadog.NewConfiguration() apiClient := datadog.NewAPIClient(configuration) api := datadogV2.NewAWSIntegrationApi(apiClient) resp, r, err := api.CreateAWSAccount(ctx, body) if err != nil { fmt.Fprintf(os.Stderr, "Error when calling `AWSIntegrationApi.CreateAWSAccount`: %v\n", err) fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r) } responseContent, _ := json.MarshalIndent(resp, "", " ") fmt.Fprintf(os.Stdout, "Response from `AWSIntegrationApi.CreateAWSAccount`:\n%s\n", responseContent) } ``` ##### ```go // Create an AWS integration returns "AWS Account object" response package main import ( "context" "encoding/json" "fmt" "os" "github.com/DataDog/datadog-api-client-go/v2/api/datadog" "github.com/DataDog/datadog-api-client-go/v2/api/datadogV2" ) func main() { body := datadogV2.AWSAccountCreateRequest{ Data: datadogV2.AWSAccountCreateRequestData{ Attributes: datadogV2.AWSAccountCreateRequestAttributes{ AccountTags: *datadog.NewNullableList(&[]string{ "key:value", }), AuthConfig: datadogV2.AWSAuthConfig{ AWSAuthConfigKeys: &datadogV2.AWSAuthConfigKeys{ AccessKeyId: "AKIAIOSFODNN7EXAMPLE", SecretAccessKey: datadog.PtrString("wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"), }}, AwsAccountId: "123456789012", AwsPartition: datadogV2.AWSACCOUNTPARTITION_AWS, LogsConfig: &datadogV2.AWSLogsConfig{ LambdaForwarder: &datadogV2.AWSLambdaForwarderConfig{ Lambdas: []string{ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", }, LogSourceConfig: &datadogV2.AWSLambdaForwarderConfigLogSourceConfig{ TagFilters: []datadogV2.AWSLogSourceTagFilter{ { Source: datadog.PtrString("s3"), Tags: *datadog.NewNullableList(&[]string{ "test:test", }), }, }, }, Sources: []string{ "s3", }, }, }, MetricsConfig: &datadogV2.AWSMetricsConfig{ AutomuteEnabled: datadog.PtrBool(true), CollectCloudwatchAlarms: datadog.PtrBool(true), CollectCustomMetrics: datadog.PtrBool(true), Enabled: datadog.PtrBool(true), TagFilters: []datadogV2.AWSNamespaceTagFilter{ { Namespace: datadog.PtrString("AWS/EC2"), Tags: *datadog.NewNullableList(&[]string{ "key:value", }), }, }, }, ResourcesConfig: &datadogV2.AWSResourcesConfig{ CloudSecurityPostureManagementCollection: datadog.PtrBool(false), ExtendedCollection: datadog.PtrBool(false), }, TracesConfig: &datadogV2.AWSTracesConfig{}, }, Type: datadogV2.AWSACCOUNTTYPE_ACCOUNT, }, } ctx := datadog.NewDefaultContext(context.Background()) configuration := datadog.NewConfiguration() apiClient := datadog.NewAPIClient(configuration) api := datadogV2.NewAWSIntegrationApi(apiClient) resp, r, err := api.CreateAWSAccount(ctx, body) if err != nil { fmt.Fprintf(os.Stderr, "Error when calling `AWSIntegrationApi.CreateAWSAccount`: %v\n", err) fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r) } responseContent, _ := json.MarshalIndent(resp, "", " ") fmt.Fprintf(os.Stdout, "Response from `AWSIntegrationApi.CreateAWSAccount`:\n%s\n", responseContent) } ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=go) and then save the example to `main.go` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" go run "main.go" ##### ```java // Create an AWS account returns "AWS Account object" response import com.datadog.api.client.ApiClient; import com.datadog.api.client.ApiException; import com.datadog.api.client.v2.api.AwsIntegrationApi; import com.datadog.api.client.v2.model.AWSAccountCreateRequest; import com.datadog.api.client.v2.model.AWSAccountCreateRequestAttributes; import com.datadog.api.client.v2.model.AWSAccountCreateRequestData; import com.datadog.api.client.v2.model.AWSAccountPartition; import com.datadog.api.client.v2.model.AWSAccountResponse; import com.datadog.api.client.v2.model.AWSAccountType; import com.datadog.api.client.v2.model.AWSAuthConfig; import com.datadog.api.client.v2.model.AWSAuthConfigRole; import com.datadog.api.client.v2.model.AWSLambdaForwarderConfig; import com.datadog.api.client.v2.model.AWSLambdaForwarderConfigLogSourceConfig; import com.datadog.api.client.v2.model.AWSLogSourceTagFilter; import com.datadog.api.client.v2.model.AWSLogsConfig; import com.datadog.api.client.v2.model.AWSMetricsConfig; import com.datadog.api.client.v2.model.AWSNamespaceTagFilter; import com.datadog.api.client.v2.model.AWSResourcesConfig; import com.datadog.api.client.v2.model.AWSTracesConfig; import java.util.Collections; public class Example { public static void main(String[] args) { ApiClient defaultClient = ApiClient.getDefaultApiClient(); AwsIntegrationApi apiInstance = new AwsIntegrationApi(defaultClient); AWSAccountCreateRequest body = new AWSAccountCreateRequest() .data( new AWSAccountCreateRequestData() .attributes( new AWSAccountCreateRequestAttributes() .accountTags(Collections.singletonList("key:value")) .authConfig( new AWSAuthConfig( new AWSAuthConfigRole().roleName("DatadogIntegrationRole"))) .awsAccountId("123456789012") .awsPartition(AWSAccountPartition.AWS) .logsConfig( new AWSLogsConfig() .lambdaForwarder( new AWSLambdaForwarderConfig() .lambdas( Collections.singletonList( "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder")) .logSourceConfig( new AWSLambdaForwarderConfigLogSourceConfig() .tagFilters( Collections.singletonList( new AWSLogSourceTagFilter() .source("s3") .tags( Collections.singletonList( "test:test"))))) .sources(Collections.singletonList("s3")))) .metricsConfig( new AWSMetricsConfig() .automuteEnabled(true) .collectCloudwatchAlarms(true) .collectCustomMetrics(true) .enabled(true) .tagFilters( Collections.singletonList( new AWSNamespaceTagFilter() .namespace("AWS/EC2") .tags(Collections.singletonList("key:value"))))) .resourcesConfig( new AWSResourcesConfig() .cloudSecurityPostureManagementCollection(false) .extendedCollection(false)) .tracesConfig(new AWSTracesConfig())) .type(AWSAccountType.ACCOUNT)); try { AWSAccountResponse result = apiInstance.createAWSAccount(body); System.out.println(result); } catch (ApiException e) { System.err.println("Exception when calling AwsIntegrationApi#createAWSAccount"); System.err.println("Status code: " + e.getCode()); System.err.println("Reason: " + e.getResponseBody()); System.err.println("Response headers: " + e.getResponseHeaders()); e.printStackTrace(); } } } ``` ##### ```java // Create an AWS integration returns "AWS Account object" response import com.datadog.api.client.ApiClient; import com.datadog.api.client.ApiException; import com.datadog.api.client.v2.api.AwsIntegrationApi; import com.datadog.api.client.v2.model.AWSAccountCreateRequest; import com.datadog.api.client.v2.model.AWSAccountCreateRequestAttributes; import com.datadog.api.client.v2.model.AWSAccountCreateRequestData; import com.datadog.api.client.v2.model.AWSAccountPartition; import com.datadog.api.client.v2.model.AWSAccountResponse; import com.datadog.api.client.v2.model.AWSAccountType; import com.datadog.api.client.v2.model.AWSAuthConfig; import com.datadog.api.client.v2.model.AWSAuthConfigKeys; import com.datadog.api.client.v2.model.AWSLambdaForwarderConfig; import com.datadog.api.client.v2.model.AWSLambdaForwarderConfigLogSourceConfig; import com.datadog.api.client.v2.model.AWSLogSourceTagFilter; import com.datadog.api.client.v2.model.AWSLogsConfig; import com.datadog.api.client.v2.model.AWSMetricsConfig; import com.datadog.api.client.v2.model.AWSNamespaceTagFilter; import com.datadog.api.client.v2.model.AWSResourcesConfig; import com.datadog.api.client.v2.model.AWSTracesConfig; import java.util.Collections; public class Example { public static void main(String[] args) { ApiClient defaultClient = ApiClient.getDefaultApiClient(); AwsIntegrationApi apiInstance = new AwsIntegrationApi(defaultClient); AWSAccountCreateRequest body = new AWSAccountCreateRequest() .data( new AWSAccountCreateRequestData() .attributes( new AWSAccountCreateRequestAttributes() .accountTags(Collections.singletonList("key:value")) .authConfig( new AWSAuthConfig( new AWSAuthConfigKeys() .accessKeyId("AKIAIOSFODNN7EXAMPLE") .secretAccessKey( "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"))) .awsAccountId("123456789012") .awsPartition(AWSAccountPartition.AWS) .logsConfig( new AWSLogsConfig() .lambdaForwarder( new AWSLambdaForwarderConfig() .lambdas( Collections.singletonList( "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder")) .logSourceConfig( new AWSLambdaForwarderConfigLogSourceConfig() .tagFilters( Collections.singletonList( new AWSLogSourceTagFilter() .source("s3") .tags( Collections.singletonList( "test:test"))))) .sources(Collections.singletonList("s3")))) .metricsConfig( new AWSMetricsConfig() .automuteEnabled(true) .collectCloudwatchAlarms(true) .collectCustomMetrics(true) .enabled(true) .tagFilters( Collections.singletonList( new AWSNamespaceTagFilter() .namespace("AWS/EC2") .tags(Collections.singletonList("key:value"))))) .resourcesConfig( new AWSResourcesConfig() .cloudSecurityPostureManagementCollection(false) .extendedCollection(false)) .tracesConfig(new AWSTracesConfig())) .type(AWSAccountType.ACCOUNT)); try { AWSAccountResponse result = apiInstance.createAWSAccount(body); System.out.println(result); } catch (ApiException e) { System.err.println("Exception when calling AwsIntegrationApi#createAWSAccount"); System.err.println("Status code: " + e.getCode()); System.err.println("Reason: " + e.getResponseBody()); System.err.println("Response headers: " + e.getResponseHeaders()); e.printStackTrace(); } } } ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=java) and then save the example to `Example.java` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" java "Example.java" ##### ```python """ Create an AWS account returns "AWS Account object" response """ from datadog_api_client import ApiClient, Configuration from datadog_api_client.v2.api.aws_integration_api import AWSIntegrationApi from datadog_api_client.v2.model.aws_account_create_request import AWSAccountCreateRequest from datadog_api_client.v2.model.aws_account_create_request_attributes import AWSAccountCreateRequestAttributes from datadog_api_client.v2.model.aws_account_create_request_data import AWSAccountCreateRequestData from datadog_api_client.v2.model.aws_account_partition import AWSAccountPartition from datadog_api_client.v2.model.aws_account_type import AWSAccountType from datadog_api_client.v2.model.aws_auth_config_role import AWSAuthConfigRole from datadog_api_client.v2.model.aws_lambda_forwarder_config import AWSLambdaForwarderConfig from datadog_api_client.v2.model.aws_lambda_forwarder_config_log_source_config import ( AWSLambdaForwarderConfigLogSourceConfig, ) from datadog_api_client.v2.model.aws_log_source_tag_filter import AWSLogSourceTagFilter from datadog_api_client.v2.model.aws_logs_config import AWSLogsConfig from datadog_api_client.v2.model.aws_metrics_config import AWSMetricsConfig from datadog_api_client.v2.model.aws_namespace_tag_filter import AWSNamespaceTagFilter from datadog_api_client.v2.model.aws_resources_config import AWSResourcesConfig from datadog_api_client.v2.model.aws_traces_config import AWSTracesConfig body = AWSAccountCreateRequest( data=AWSAccountCreateRequestData( attributes=AWSAccountCreateRequestAttributes( account_tags=[ "key:value", ], auth_config=AWSAuthConfigRole( role_name="DatadogIntegrationRole", ), aws_account_id="123456789012", aws_partition=AWSAccountPartition.AWS, logs_config=AWSLogsConfig( lambda_forwarder=AWSLambdaForwarderConfig( lambdas=[ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", ], log_source_config=AWSLambdaForwarderConfigLogSourceConfig( tag_filters=[ AWSLogSourceTagFilter( source="s3", tags=[ "test:test", ], ), ], ), sources=[ "s3", ], ), ), metrics_config=AWSMetricsConfig( automute_enabled=True, collect_cloudwatch_alarms=True, collect_custom_metrics=True, enabled=True, tag_filters=[ AWSNamespaceTagFilter( namespace="AWS/EC2", tags=[ "key:value", ], ), ], ), resources_config=AWSResourcesConfig( cloud_security_posture_management_collection=False, extended_collection=False, ), traces_config=AWSTracesConfig(), ), type=AWSAccountType.ACCOUNT, ), ) configuration = Configuration() with ApiClient(configuration) as api_client: api_instance = AWSIntegrationApi(api_client) response = api_instance.create_aws_account(body=body) print(response) ``` ##### ```python """ Create an AWS integration returns "AWS Account object" response """ from datadog_api_client import ApiClient, Configuration from datadog_api_client.v2.api.aws_integration_api import AWSIntegrationApi from datadog_api_client.v2.model.aws_account_create_request import AWSAccountCreateRequest from datadog_api_client.v2.model.aws_account_create_request_attributes import AWSAccountCreateRequestAttributes from datadog_api_client.v2.model.aws_account_create_request_data import AWSAccountCreateRequestData from datadog_api_client.v2.model.aws_account_partition import AWSAccountPartition from datadog_api_client.v2.model.aws_account_type import AWSAccountType from datadog_api_client.v2.model.aws_auth_config_keys import AWSAuthConfigKeys from datadog_api_client.v2.model.aws_lambda_forwarder_config import AWSLambdaForwarderConfig from datadog_api_client.v2.model.aws_lambda_forwarder_config_log_source_config import ( AWSLambdaForwarderConfigLogSourceConfig, ) from datadog_api_client.v2.model.aws_log_source_tag_filter import AWSLogSourceTagFilter from datadog_api_client.v2.model.aws_logs_config import AWSLogsConfig from datadog_api_client.v2.model.aws_metrics_config import AWSMetricsConfig from datadog_api_client.v2.model.aws_namespace_tag_filter import AWSNamespaceTagFilter from datadog_api_client.v2.model.aws_resources_config import AWSResourcesConfig from datadog_api_client.v2.model.aws_traces_config import AWSTracesConfig body = AWSAccountCreateRequest( data=AWSAccountCreateRequestData( attributes=AWSAccountCreateRequestAttributes( account_tags=[ "key:value", ], auth_config=AWSAuthConfigKeys( access_key_id="AKIAIOSFODNN7EXAMPLE", secret_access_key="wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY", ), aws_account_id="123456789012", aws_partition=AWSAccountPartition.AWS, logs_config=AWSLogsConfig( lambda_forwarder=AWSLambdaForwarderConfig( lambdas=[ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", ], log_source_config=AWSLambdaForwarderConfigLogSourceConfig( tag_filters=[ AWSLogSourceTagFilter( source="s3", tags=[ "test:test", ], ), ], ), sources=[ "s3", ], ), ), metrics_config=AWSMetricsConfig( automute_enabled=True, collect_cloudwatch_alarms=True, collect_custom_metrics=True, enabled=True, tag_filters=[ AWSNamespaceTagFilter( namespace="AWS/EC2", tags=[ "key:value", ], ), ], ), resources_config=AWSResourcesConfig( cloud_security_posture_management_collection=False, extended_collection=False, ), traces_config=AWSTracesConfig(), ), type=AWSAccountType.ACCOUNT, ), ) configuration = Configuration() with ApiClient(configuration) as api_client: api_instance = AWSIntegrationApi(api_client) response = api_instance.create_aws_account(body=body) print(response) ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=python) and then save the example to `example.py` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" python3 "example.py" ##### ```ruby # Create an AWS account returns "AWS Account object" response require "datadog_api_client" api_instance = DatadogAPIClient::V2::AWSIntegrationAPI.new body = DatadogAPIClient::V2::AWSAccountCreateRequest.new({ data: DatadogAPIClient::V2::AWSAccountCreateRequestData.new({ attributes: DatadogAPIClient::V2::AWSAccountCreateRequestAttributes.new({ account_tags: [ "key:value", ], auth_config: DatadogAPIClient::V2::AWSAuthConfigRole.new({ role_name: "DatadogIntegrationRole", }), aws_account_id: "123456789012", aws_partition: DatadogAPIClient::V2::AWSAccountPartition::AWS, logs_config: DatadogAPIClient::V2::AWSLogsConfig.new({ lambda_forwarder: DatadogAPIClient::V2::AWSLambdaForwarderConfig.new({ lambdas: [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", ], log_source_config: DatadogAPIClient::V2::AWSLambdaForwarderConfigLogSourceConfig.new({ tag_filters: [ DatadogAPIClient::V2::AWSLogSourceTagFilter.new({ source: "s3", tags: [ "test:test", ], }), ], }), sources: [ "s3", ], }), }), metrics_config: DatadogAPIClient::V2::AWSMetricsConfig.new({ automute_enabled: true, collect_cloudwatch_alarms: true, collect_custom_metrics: true, enabled: true, tag_filters: [ DatadogAPIClient::V2::AWSNamespaceTagFilter.new({ namespace: "AWS/EC2", tags: [ "key:value", ], }), ], }), resources_config: DatadogAPIClient::V2::AWSResourcesConfig.new({ cloud_security_posture_management_collection: false, extended_collection: false, }), traces_config: DatadogAPIClient::V2::AWSTracesConfig.new({}), }), type: DatadogAPIClient::V2::AWSAccountType::ACCOUNT, }), }) p api_instance.create_aws_account(body) ``` ##### ```ruby # Create an AWS integration returns "AWS Account object" response require "datadog_api_client" api_instance = DatadogAPIClient::V2::AWSIntegrationAPI.new body = DatadogAPIClient::V2::AWSAccountCreateRequest.new({ data: DatadogAPIClient::V2::AWSAccountCreateRequestData.new({ attributes: DatadogAPIClient::V2::AWSAccountCreateRequestAttributes.new({ account_tags: [ "key:value", ], auth_config: DatadogAPIClient::V2::AWSAuthConfigKeys.new({ access_key_id: "AKIAIOSFODNN7EXAMPLE", secret_access_key: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY", }), aws_account_id: "123456789012", aws_partition: DatadogAPIClient::V2::AWSAccountPartition::AWS, logs_config: DatadogAPIClient::V2::AWSLogsConfig.new({ lambda_forwarder: DatadogAPIClient::V2::AWSLambdaForwarderConfig.new({ lambdas: [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", ], log_source_config: DatadogAPIClient::V2::AWSLambdaForwarderConfigLogSourceConfig.new({ tag_filters: [ DatadogAPIClient::V2::AWSLogSourceTagFilter.new({ source: "s3", tags: [ "test:test", ], }), ], }), sources: [ "s3", ], }), }), metrics_config: DatadogAPIClient::V2::AWSMetricsConfig.new({ automute_enabled: true, collect_cloudwatch_alarms: true, collect_custom_metrics: true, enabled: true, tag_filters: [ DatadogAPIClient::V2::AWSNamespaceTagFilter.new({ namespace: "AWS/EC2", tags: [ "key:value", ], }), ], }), resources_config: DatadogAPIClient::V2::AWSResourcesConfig.new({ cloud_security_posture_management_collection: false, extended_collection: false, }), traces_config: DatadogAPIClient::V2::AWSTracesConfig.new({}), }), type: DatadogAPIClient::V2::AWSAccountType::ACCOUNT, }), }) p api_instance.create_aws_account(body) ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=ruby) and then save the example to `example.rb` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" rb "example.rb" ##### ```rust // Create an AWS account returns "AWS Account object" response use datadog_api_client::datadog; use datadog_api_client::datadogV2::api_aws_integration::AWSIntegrationAPI; use datadog_api_client::datadogV2::model::AWSAccountCreateRequest; use datadog_api_client::datadogV2::model::AWSAccountCreateRequestAttributes; use datadog_api_client::datadogV2::model::AWSAccountCreateRequestData; use datadog_api_client::datadogV2::model::AWSAccountPartition; use datadog_api_client::datadogV2::model::AWSAccountType; use datadog_api_client::datadogV2::model::AWSAuthConfig; use datadog_api_client::datadogV2::model::AWSAuthConfigRole; use datadog_api_client::datadogV2::model::AWSLambdaForwarderConfig; use datadog_api_client::datadogV2::model::AWSLambdaForwarderConfigLogSourceConfig; use datadog_api_client::datadogV2::model::AWSLogSourceTagFilter; use datadog_api_client::datadogV2::model::AWSLogsConfig; use datadog_api_client::datadogV2::model::AWSMetricsConfig; use datadog_api_client::datadogV2::model::AWSNamespaceTagFilter; use datadog_api_client::datadogV2::model::AWSResourcesConfig; use datadog_api_client::datadogV2::model::AWSTracesConfig; #[tokio::main] async fn main() { let body = AWSAccountCreateRequest::new(AWSAccountCreateRequestData::new( AWSAccountCreateRequestAttributes::new( AWSAuthConfig::AWSAuthConfigRole(Box::new(AWSAuthConfigRole::new( "DatadogIntegrationRole".to_string(), ))), "123456789012".to_string(), AWSAccountPartition::AWS, ) .account_tags(Some(vec!["key:value".to_string()])) .logs_config( AWSLogsConfig::new().lambda_forwarder( AWSLambdaForwarderConfig::new() .lambdas(vec![ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder" .to_string(), ]) .log_source_config(AWSLambdaForwarderConfigLogSourceConfig::new().tag_filters( vec![ AWSLogSourceTagFilter::new() .source("s3".to_string()) .tags(Some(vec!["test:test".to_string()])) ], )) .sources(vec!["s3".to_string()]), ), ) .metrics_config( AWSMetricsConfig::new() .automute_enabled(true) .collect_cloudwatch_alarms(true) .collect_custom_metrics(true) .enabled(true) .tag_filters(vec![AWSNamespaceTagFilter::new() .namespace("AWS/EC2".to_string()) .tags(Some(vec!["key:value".to_string()]))]), ) .resources_config( AWSResourcesConfig::new() .cloud_security_posture_management_collection(false) .extended_collection(false), ) .traces_config(AWSTracesConfig::new()), AWSAccountType::ACCOUNT, )); let configuration = datadog::Configuration::new(); let api = AWSIntegrationAPI::with_config(configuration); let resp = api.create_aws_account(body).await; if let Ok(value) = resp { println!("{:#?}", value); } else { println!("{:#?}", resp.unwrap_err()); } } ``` ##### ```rust // Create an AWS integration returns "AWS Account object" response use datadog_api_client::datadog; use datadog_api_client::datadogV2::api_aws_integration::AWSIntegrationAPI; use datadog_api_client::datadogV2::model::AWSAccountCreateRequest; use datadog_api_client::datadogV2::model::AWSAccountCreateRequestAttributes; use datadog_api_client::datadogV2::model::AWSAccountCreateRequestData; use datadog_api_client::datadogV2::model::AWSAccountPartition; use datadog_api_client::datadogV2::model::AWSAccountType; use datadog_api_client::datadogV2::model::AWSAuthConfig; use datadog_api_client::datadogV2::model::AWSAuthConfigKeys; use datadog_api_client::datadogV2::model::AWSLambdaForwarderConfig; use datadog_api_client::datadogV2::model::AWSLambdaForwarderConfigLogSourceConfig; use datadog_api_client::datadogV2::model::AWSLogSourceTagFilter; use datadog_api_client::datadogV2::model::AWSLogsConfig; use datadog_api_client::datadogV2::model::AWSMetricsConfig; use datadog_api_client::datadogV2::model::AWSNamespaceTagFilter; use datadog_api_client::datadogV2::model::AWSResourcesConfig; use datadog_api_client::datadogV2::model::AWSTracesConfig; #[tokio::main] async fn main() { let body = AWSAccountCreateRequest::new(AWSAccountCreateRequestData::new( AWSAccountCreateRequestAttributes::new( AWSAuthConfig::AWSAuthConfigKeys(Box::new( AWSAuthConfigKeys::new("AKIAIOSFODNN7EXAMPLE".to_string()) .secret_access_key("wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY".to_string()), )), "123456789012".to_string(), AWSAccountPartition::AWS, ) .account_tags(Some(vec!["key:value".to_string()])) .logs_config( AWSLogsConfig::new().lambda_forwarder( AWSLambdaForwarderConfig::new() .lambdas(vec![ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder" .to_string(), ]) .log_source_config(AWSLambdaForwarderConfigLogSourceConfig::new().tag_filters( vec![ AWSLogSourceTagFilter::new() .source("s3".to_string()) .tags(Some(vec!["test:test".to_string()])) ], )) .sources(vec!["s3".to_string()]), ), ) .metrics_config( AWSMetricsConfig::new() .automute_enabled(true) .collect_cloudwatch_alarms(true) .collect_custom_metrics(true) .enabled(true) .tag_filters(vec![AWSNamespaceTagFilter::new() .namespace("AWS/EC2".to_string()) .tags(Some(vec!["key:value".to_string()]))]), ) .resources_config( AWSResourcesConfig::new() .cloud_security_posture_management_collection(false) .extended_collection(false), ) .traces_config(AWSTracesConfig::new()), AWSAccountType::ACCOUNT, )); let configuration = datadog::Configuration::new(); let api = AWSIntegrationAPI::with_config(configuration); let resp = api.create_aws_account(body).await; if let Ok(value) = resp { println!("{:#?}", value); } else { println!("{:#?}", resp.unwrap_err()); } } ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=rust) and then save the example to `src/main.rs` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" cargo run ##### ```typescript /** * Create an AWS account returns "AWS Account object" response */ import { client, v2 } from "@datadog/datadog-api-client"; const configuration = client.createConfiguration(); const apiInstance = new v2.AWSIntegrationApi(configuration); const params: v2.AWSIntegrationApiCreateAWSAccountRequest = { body: { data: { attributes: { accountTags: ["key:value"], authConfig: { roleName: "DatadogIntegrationRole", }, awsAccountId: "123456789012", awsPartition: "aws", logsConfig: { lambdaForwarder: { lambdas: [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", ], logSourceConfig: { tagFilters: [ { source: "s3", tags: ["test:test"], }, ], }, sources: ["s3"], }, }, metricsConfig: { automuteEnabled: true, collectCloudwatchAlarms: true, collectCustomMetrics: true, enabled: true, tagFilters: [ { namespace: "AWS/EC2", tags: ["key:value"], }, ], }, resourcesConfig: { cloudSecurityPostureManagementCollection: false, extendedCollection: false, }, tracesConfig: {}, }, type: "account", }, }, }; apiInstance .createAWSAccount(params) .then((data: v2.AWSAccountResponse) => { console.log( "API called successfully. Returned data: " + JSON.stringify(data) ); }) .catch((error: any) => console.error(error)); ``` ##### ```typescript /** * Create an AWS integration returns "AWS Account object" response */ import { client, v2 } from "@datadog/datadog-api-client"; const configuration = client.createConfiguration(); const apiInstance = new v2.AWSIntegrationApi(configuration); const params: v2.AWSIntegrationApiCreateAWSAccountRequest = { body: { data: { attributes: { accountTags: ["key:value"], authConfig: { accessKeyId: "AKIAIOSFODNN7EXAMPLE", secretAccessKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY", }, awsAccountId: "123456789012", awsPartition: "aws", logsConfig: { lambdaForwarder: { lambdas: [ "arn:aws:lambda:us-east-1:123456789012:function:DatadogLambdaLogForwarder", ], logSourceConfig: { tagFilters: [ { source: "s3", tags: ["test:test"], }, ], }, sources: ["s3"], }, }, metricsConfig: { automuteEnabled: true, collectCloudwatchAlarms: true, collectCustomMetrics: true, enabled: true, tagFilters: [ { namespace: "AWS/EC2", tags: ["key:value"], }, ], }, resourcesConfig: { cloudSecurityPostureManagementCollection: false, extendedCollection: false, }, tracesConfig: {}, }, type: "account", }, }, }; apiInstance .createAWSAccount(params) .then((data: v2.AWSAccountResponse) => { console.log( "API called successfully. Returned data: " + JSON.stringify(data) ); }) .catch((error: any) => console.error(error)); ``` #### Instructions First [install the library and its dependencies](https://docs.datadoghq.com/api/latest.md?code-lang=typescript) and then save the example to `example.ts` and run following commands: DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" tsc "example.ts" {% /tab %}