Overview
Datadog Integration
Integrate Datadog with Sprinto to automate infrastructure monitoring, incident management, and access reviews for continuous compliance.
Datadog is a cloud monitoring and security platform used to track infrastructure health, incidents, and user access.
By integrating Datadog with Sprinto, you can:
- Automate infrastructure monitoring checks
- Sync and validate incident tickets
- Monitor and review user access
- Maintain continuous compliance evidence
Sprinto supports three use cases under Datadog:
- Infrastructure Monitoring
- Incident Management
- Access Review
Sprinto checks for Datadog
Below are the Sprinto checks for the following integration types:
- Infrastructure monitoring: Sprinto checks for infrastructure monitoring
| Sprinto check | Required action |
|---|---|
| Infrastucture is monitored using Datadog | How to fix: To pass the following check, ensure that your Datadog account is configured for Infrastructure monitoring on your Sprinto account. |
- Incident management: Sprinto checks for incident management
| Sprinto check | Required action |
|---|---|
| Reported incident should be closed in Datadog | The following check gets activated when you have an incident ticket in the open status on your integrated Datadog account. How to fix: To resolve this check, you need to resolve the incident and close the assigned ticket from your Datadog account, then action the incident ticket on Sprinto (Security Hub > Incident > Datadog). For detailed instructions, refer to resolving the incident ticket on Sprinto. |
- Access management: Sprinto checks for users' access monitoring
| Sprinto check | Reference procedure |
|---|---|
| Datadog access should be removed for offboarded user | How to fix |
| User should be identified | How to fix |
| User access to critical system should be valid | How to fix Note: The user access to the critical system becomes valid if the respective Org role is added to the system. |
Prerequisites
Before connecting Datadog to Sprinto, ensure that:
- You have Admin access to your Datadog account.
- You can create:
- API Keys
- Application Keys
- You know your Datadog region (for example: US1-East, US3-West, EU1-Europe, AP1-Japan, etc.).
Sprinto requires read-only access to monitors, incidents, and user access data.
Permissions Required (Infrastructure Monitoring & Incident Management)
When creating the Application Key in Datadog, ensure the following scopes are enabled:
monitors_readuser_access_readincident_read
Sprinto uses this access only to fetch data. No configuration changes are made in Datadog.
How It Works
The Datadog integration consists of two connection flows:
- Infrastructure Monitoring & Incident Management
- Access Review
Both are configured separately from the Integrations page.
Connect Datadog for Infrastructure Monitoring & Incident Management
Step 1: Navigate to Integrations
- Log in to the Sprinto dashboard.
- Go to Settings → Integrations.
- Under the All tab, search for Datadog.
- Click Connect next to Datadog.
A drawer opens showing two options:
- Datadog – Infrastructure Monitoring & Incident Management
- Datadog – Access Review
Click Connect next to Infrastructure Monitoring & Incident Management.
Step 2: Review Permissions and Data
In the drawer:
- Review the number of controls and checks automated.
- Expand Permission & Data to review:
- Permissions required
- Data used by Sprinto
Click Next.
Step 3: Review Prerequisites and Generate Keys
You will see:
- Connection type: API Key
- Prerequisites
- Instructions to generate:
- API Key
- Application Key
Create an API Key
- Log in to Datadog.
- Go to Organization Settings.
- Navigate to API Keys.
- Click New Key.
- Enter a name (for example, Sprinto Access).
- Click Create Key.
- Copy and securely store the API key.
Create an Application Key
- Go to Application Keys.
- Click New Key.
- Enter a name.
- Click Create Key.
- Click Edit next to Scopes and enable the following scopes:
monitors_readuser_access_readincident_read
- Click Save to save changes.
- Copy and securely store the Application Key.
- Click Finish.
After generating both keys, return to the Sprinto dashboard:
- Select the checkbox confirming you have the credentials.
- Click Connect Datadog.
Step 4: Enter Credentials in Sprinto
In the final drawer:
- Enter:
- API Key
- Application Key
- Select your Region from the dropdown (for example: US1-East, EU1-Europe, AP1-Japan and so on). Know more about how Datadog regions work.
- Click Connect Datadog.
Once validated, the integration becomes active.
Post-Connection Configuration
After connecting:
Configure Infrastructure Monitoring
- Go to Data Library → Infrastructure → Infra Systems.
- Click Add infra system.
- Select Datadog as the monitoring provider.
- Save changes.
Sprinto will validate that monitoring is active and properly configured.
Configure Incident Management
- Navigate to Data Library → Incidents → Overview.
- Click + Add System.
- Select Datadog.
- Choose the date from which incidents should sync.
Sprinto will:
- Track open incidents
- Validate resolution timelines
- Trigger checks if SLAs are breached
Connect Datadog for Access Review
The Access Review integration uses an API key–based connection powered by Truto.
Step 1: Start the Access Review Connection
- Log in to the Sprinto dashboard.
- Go to Settings → Integrations.
- Under the All tab, search for Datadog.
- Click Connect next to Datadog.
- In the drawer, click Connect next to Datadog – Access Review.
Step 2: Review Permissions and Data
A drawer opens displaying:
- Number of controls and checks automated
- Permissions required
- Data used by Sprinto
- Access type requirement (Admin access required)
Review the information and click Next.
Step 3: Setup Datadog Integration
You will now see the Setup Datadog Integration screen.
The screen confirms:
- The integration can be performed from Settings or Access → Overview
- Admin access is required
To proceed:
- Select the checkbox:
I have admin access to my Datadog account - Click Connect to Datadog.
Step 4: Connect Using API Key
A new modal opens titled Connect using API Key.
You must provide:
- Datadog Region
- API Key
- Application Key
Select Region
Choose your Datadog region from the dropdown (for example: US1, EU1, US3, etc.).
Know more about how Datadog regions work.
You can identify your region from your Datadog URL.
Example:
https://app.datadoghq.com → US1
Generate API Key in Datadog
- Log in to Datadog.
- Go to Organization Settings.
- Navigate to API Keys.
- Click New Key.
- Name the key (for example: Sprinto Access).
- Click Create Key.
- Copy and securely store the API Key.
Generate Application Key in Datadog
- Navigate to Application Keys.
- Click New Key.
- Name the key.
- Click Create.
- Edit the key and enable the required scopes:
user_access_read
- Save the configuration.
- Copy the Application Key.
Step 5: Complete the Connection
- Enter:
- Datadog Region
- API Key
- Application Key
- Click Connect.
Once validated:
- The Access Review integration becomes active.
- Datadog can now be added as a Critical System.
Add Datadog as a Critical System
After successful connection:
- Go to Data Library → Access → Critical systems.
- Click Add critical systems.
- Search for Datadog.
- Select Datadog.
- Click Add 1 System.
Datadog will now appear under Critical Systems for access monitoring.
Configure Access Monitoring
- Open Datadog from the Critical Systems list.
- Click Configure.
- Define valid access criteria:
- Role-based access
- Approved access requests
- Allowed user groups
Sprinto monitors user access against the defined rules but does not automatically revoke access.
What Sprinto Monitors
| Use Case | Validation Performed |
|---|---|
| Infrastructure Monitoring | Ensures Datadog monitors are active |
| Incident Management | Ensures incidents are tracked and closed |
| Access Review | Ensures user access is valid and reviewed |
Sync Behaviour
- Initial sync may take up to 24 hours.
- Integration status shows as Active once connected.
- Checks begin running automatically based on configuration.
Troubleshooting
Invalid API Key
- Confirm the key is active.
- Ensure the correct region is selected.
Data Not Syncing
- Verify required scopes are enabled.
- Confirm integration status is Active.
Access Review Not Triggering
- Ensure Datadog is added as a Critical System.
- Confirm access rules are configured.
What Sprinto Validates for Access Review
Sprinto checks:
- Only authorised users have access to Datadog
- Offboarded users do not retain access
- Access reviews are completed as per policy
Please contact Sprinto Support if you have any queries related to the integration or need assistance.