{
  "slug": "datadog-ci-adds-the-lambda-cloudwatch-command-7f014c6e15c1",
  "title": "datadog-ci adds the `lambda cloudwatch` command",
  "tools": [
    "datadog-ci"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-02-17T19:48:05.000Z",
  "announced_at": "2026-02-17T19:48:05.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When managing CloudWatch Logs for Lambda functions, run `datadog-ci lambda cloudwatch disable` to attach a deny policy or `enable` to remove it; preview changes first with `--dry-run`.",
    "examples": [
      "datadog-ci lambda cloudwatch disable -f <function-name> -r <aws-region> --dry-run",
      "datadog-ci lambda cloudwatch disable -f <function-name> -r <aws-region>",
      "datadog-ci lambda cloudwatch enable -f <lambda-arn>"
    ],
    "gotchas": [
      "Version: v5.8.0",
      "<action> (required): Use `disable` to attach or `enable` to remove a deny policy on the function IAM role.",
      "--function / -f (required): Lambda ARN or function name; a name requires `--region`. May be repeated for multiple functions.",
      "--functions-regex (required): Regex matching Lambda function names; documented as an alternative to specifying functions with `-f`.",
      "--region / -r: Default AWS region when the function is specified by name; unnecessary with an ARN.",
      "--dry-run / --dry / -d: Preview command changes; defaults to false.",
      "--profile: AWS named profile credentials to use.",
      "--config: Path to a configuration file.",
      "Prerequisite: Configure valid AWS credentials with access to the Lambda and CloudWatch services."
    ]
  },
  "why_it_matters": "Maintain a repository workflow that uses Datadog CI's Serverless commands to inspect or manage Lambda CloudWatch data.",
  "sources": [
    "https://github.com/DataDog/datadog-ci/releases/tag/v5.8.0",
    "https://github.com/DataDog/datadog-ci/blob/v5.8.0/packages/plugin-lambda/README.md"
  ],
  "rank": 0.95019,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3-rejudge+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave2a-20261017",
    "verdict_id": "wave2a-20261017:wave2a-20261017-1c8d2bb9a4e283c5-2:rescue",
    "evidence_hash": "3fa3ae2ed97631c360cc4182f08002b962ae2b442d559d56d44e5d77cb8833b1"
  },
  "review": {
    "draft_hash": "57d4eab0ec099ce229e3651cdaceca0f77566c2eafb46dd948f14bd54d63ecf0",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave2a-20261017:rescue",
    "reason": "Rescue path: first rejected only because the extracted card lacked usage; judged again on the enriched card, 3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.95 >= 0.9; 2 needed) and Jev gave 0.68 (>= 0.6 needed)."
  }
}