Set up Cloud Security with your cloud provider

In addition to setting up Cloud Security with or without an Agent, you can also set it up without Infrastructure Monitoring. Doing so disables metric data submission (including Custom Metrics) so that hosts stop showing up in Datadog.

AWS

1. Navigate to the AWS Integration configuration page in Datadog.
2. On the Configuration tab, select the account you want to enable Cloud Security on.
   If you don’t see the required account, add it by clicking Add AWS Account(s) and following the onscreen prompts.
3. To turn off infrastructure monitoring on the selected account, under the account number, navigate to the Metric Collection tab, then click the disable metric collection link. Then, click Disable Metric Collection to confirm.
4. On the Resource Collection tab, click Enable next to Cloud Security. You are redirected to the Cloud Security Setup page, and a setup dialog automatically opens for the selected account.
5. On the setup dialog, switch the Enable Resource Scanning toggle to the on position.
6. Click Done to complete the setup.

Note: In your Cloud Security settings, set up resource evaluation filters to limit the number of hosts you need security on.

Azure

1. Navigate to the Azure Integration configuration page in Datadog.
2. Select the client ID or subscription you want to enable Cloud Security on.
   If you don’t see the required client ID, add it by clicking Add New App Registration and following the onscreen prompts.
3. To turn off infrastructure monitoring on the selected account, under the client ID, navigate to the Metric Collection tab, then turn off the Enable Metric Collection toggle.
4. On the Resource Collection tab, click Enable next to Cloud Security. You are redirected to the Cloud Security Setup page, which automatically scrolls to the selected Azure subscription in the Cloud Integrations section.
5. Switch the Resource Scanning toggle to the on position.
6. Click Done to complete the setup.

Note: In your Cloud Security settings, set up resource evaluation filters to limit the number of hosts you need security on.

Google Cloud Platform

1. Navigate to the Google Cloud Platform configuration page in Datadog.
2. Select the service account you want to enable Cloud Security on.
   If you don’t see the required account, add it by clicking Add GCP Account and following the onscreen prompts.
3. To turn off infrastructure monitoring on the selected account, under the account name, navigate to the Metric Collection tab. Then, above the Metric Collection table, click Disable All.
4. On the Resource Collection tab, click Enable next to Cloud Security. You are redirected to the Cloud Security Setup page, which automatically scrolls to the selected Google Cloud Platform project in the Cloud Integrations section.
5. Switch the Resource Scanning toggle to the on position.
6. Click Done to complete the setup.

Note: In your Cloud Security settings, set up resource evaluation filters to limit the number of hosts you need security on.

Set up the Datadog Agent

If you’re using the Datadog Agent, you must run Agent v6.4+.

-e DD_ENABLE_PAYLOADS_EVENTS=false \
-e DD_ENABLE_PAYLOADS_SERIES=false \
-e DD_ENABLE_PAYLOADS_SERVICE_CHECKS=false \
-e DD_ENABLE_PAYLOADS_SKETCHES=false \

clusterAgent:
  enabled: false
datadog:
[...]
  processAgent:
    enabled: false
    containerCollection: false
[...]
  env:
    - name: DD_ENABLE_PAYLOADS_EVENTS
      value: "false"
    - name: DD_ENABLE_PAYLOADS_SERIES
      value: "false"
    - name: DD_ENABLE_PAYLOADS_SERVICE_CHECKS
      value: "false"
    - name: DD_ENABLE_PAYLOADS_SKETCHES
      value: "false"