Datadog on Cloud Workload Identities

Datadog on Cloud Workload Identities

Nov 18, 2024

Datadog operates dozens of Kubernetes clusters, tens of thousands of hosts, and millions of containers across a multi-cloud environment, spanning AWS, Azure, and Google Cloud. With over 2,000 engineers, we needed to ensure that every developer and application could securely and efficiently access resources across these various cloud providers.

In this episode, we showcase the solution we developed internally at Datadog: a zero-configuration, injected sidecar container that emulates cloud provider Instance Metadata Service (IMDS) APIs. This enables applications running in Kubernetes pods to transparently access cloud provider resources, regardless of the underlying platform, without requiring additional code complexity.