Datadog API Keys: Lack of Automatic Expiration – Unresolved Least‑Privilege Rotation Decision
Symptom Datadog API keys are created without an expiration date and remain valid until explicitly revoked or deleted. This behavior persists across all tiers and custom RBAC roles, leaving long‑lived credentials that can be used beyond their intended lifecycle. Goal Determine whether Datadog plans to introduce an automated expiration or rotation workflow tha
datadog