datadog-ci adds the `lambda cloudwatch` command

Introduced 2026-02-17 · score 0.95

HOW TO USE IT

When managing CloudWatch Logs for Lambda functions, run `datadog-ci lambda cloudwatch disable` to attach a deny policy or `enable` to remove it; preview changes first with `--dry-run`.

WHY THIS HELPS

Maintain a repository workflow that uses Datadog CI's Serverless commands to inspect or manage Lambda CloudWatch data.

REQUIREMENTS AND LIMITATIONS

• Version: v5.8.0
• <action> (required): Use `disable` to attach or `enable` to remove a deny policy on the function IAM role.
• --function / -f (required): Lambda ARN or function name; a name requires `--region`. May be repeated for multiple functions.
• --functions-regex (required): Regex matching Lambda function names; documented as an alternative to specifying functions with `-f`.
• --region / -r: Default AWS region when the function is specified by name; unnecessary with an ARN.
• --dry-run / --dry / -d: Preview command changes; defaults to false.
• --profile: AWS named profile credentials to use.
• --config: Path to a configuration file.
• Prerequisite: Configure valid AWS credentials with access to the Lambda and CloudWatch services.

FIRST-PARTY EVIDENCE

• https://github.com/DataDog/datadog-ci/releases/tag/v5.8.0
• https://github.com/DataDog/datadog-ci/blob/v5.8.0/packages/plugin-lambda/README.md

Check the installed version and the source before using it. Entry JSON

Report a problem with this card