Datadog Cloud Security Identity Risks

What Datadog Cloud Security Identity Risks is

Datadog Cloud Security Identity Risks is a cloud entitlement management product that scans infrastructure for identity and permission risks and helps mitigate IAM-based attacks. It identifies issues such as lingering administrator privileges, privilege escalation, permission gaps, broad blast radii, and cross-account access across AWS, Azure, and GCP. Detection covers users, roles, groups, policies, EC2 instances, and Lambda functions. Access Insights shows what resources an entity can reach and which principals can reach them directly or indirectly. For remediation, the product can suggest narrower policies and offers Datadog Workflows, cloud-console links, Terraform-generated GitHub pull requests, and Jira issues. AWS IAM Access Analyzer can provide unused-access findings that inform recommendations and enrich permission-gap detections. Datadog says identity-risk scans do not require an agent and snapshots stay within the customer environment. The usual permission-gap detection window is 90 days; AWS IAM Access Analyzer can be configured for 180 or 360 days. CSM Pro is listed at $10 a month per CSM host, and CSM Enterprise at $25 a month per CSM host. A 14-day trial of the product suite is advertised.