AWS Key Management Service (KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data.
Enable this integration to see in Datadog all your KMS metrics.
If you haven’t already, set up the Amazon Web Services integration first.
In the AWS integration page, ensure that KMS is enabled under the Metric Collection tab.
Install the Datadog - AWS KMS integration.
Configure Amazon KMS to send logs either to a S3 bucket or to CloudWatch.
Note: If you log to a S3 bucket, make sure that amazon_kms is set as Target prefix.
If you haven’t already, set up the Datadog Forwarder Lambda function.
Once the Lambda function is installed, manually add a trigger on the S3 bucket or CloudWatch log group that contains your Amazon KMS logs in the AWS console:
| aws.kms.seconds_until_key_material_expiration (gauge) | This metric tracks the number of seconds remaining until imported key material expires. Shown as second |
Each of the metrics retrieved from AWS are assigned the same tags that appear in the AWS console, including but not limited to host name, security-groups, and more.
The AWS KMS integration does not include any events.
The AWS KMS integration does not include any service checks.
Need help? Contact Datadog support.
