- Home
- Cloud Infrastructure Entitlement Management Software
- Datadog Cloud Security Identity Risks
Datadog Cloud Security Identity Risks
Datadog says it is headquartered in New York City.
What it is
Datadog Cloud Security Identity Risks is a cloud infrastructure entitlement management product that scans AWS, Azure and GCP for identity and permission risks. It identifies lingering administrative privileges, privilege escalation, permission gaps, broad blast radii and cross-account access across users, roles, groups, policies, EC2 instances and Lambda functions. Access Insights shows which resources an entity can reach and which principals can reach them directly or indirectly. Remediation options include narrower policy suggestions, Datadog Workflows and links to cloud consoles. Teams can also use Terraform-generated GitHub pull requests or Jira issues. AWS IAM Access Analyzer can supply unused-access findings for policy recommendations and permission-gap detections. The usual detection window is 90 days, while Access Analyzer can be configured for 180 or 360 days. Scanning is agentless, and snapshots are not sent outside the customer environment. Cloud Security Management Pro is listed at $10 a month per CSM host.
For and against
For
- Covers AWS, Azure and GCP environments
- Detects privilege and permission risks across cloud entities
- Access Insights maps direct and indirect access
- Remediation can use Workflows, Jira or GitHub
- Agentless scans keep snapshots in the customer environment
Against
- No free plan is offered
- AWS IAM Access Analyzer adds an AWS cost
- Usual permissions-gap detections cover 90 days
The verdict
Identity Risks focuses on finding excessive or exposed cloud permissions and connecting findings to remediation workflows. Its multi-cloud coverage and agentless approach are paired with paid Cloud Security Management plans and a 14-day trial.
Who it suits
This suits teams securing identity access across AWS, Azure and GCP environments. It is relevant to organizations wanting agentless scanning and automated or workflow-based remediation.
Plans and prices
Cloud Security Management (CSM) Pro
Listed prices: $10, $12, or $12 per host per month
Read 30 Sep 2026 · datadoghq.com
Cloud Security Management (CSM) Enterprise
Listed prices: $25, $30, or $30 per host per month
Read 30 Sep 2026 · datadoghq.com
On the record
- Access visibility
- Access Insights shows which entities a resource can access and which principals can access it directly or indirectly.docs.datadoghq.com · read 30 Sep 2026
- Additional AWS cost
- AWS IAM Access Analyzer has an additional AWS cost when enabled for the first time, and its insights can take up to two hours to appear in Datadog.docs.datadoghq.com · read 30 Sep 2026
- Agentless scanning
- Datadog Cloud Security can scan cloud infrastructure for identity risks without deploying an agent, and the product page says snapshots are not sent outside the customer environment.datadoghq.com · read 30 Sep 2026
- AWS integration
- Datadog CIEM integrates with AWS IAM Access Analyzer to use unused-access findings to recommend downsized policies and enrich permissions-gap detections.docs.datadoghq.com · read 30 Sep 2026
- Cloud coverage
- Identity Risks is available for AWS, Azure, and GCP.docs.datadoghq.com · read 30 Sep 2026
- Detection scope
- Detections include users, roles, groups, policies, EC2 instances, and Lambda functions.docs.datadoghq.com · read 30 Sep 2026
- Permissions-gap window
- Datadog’s usual permissions-gap detections cover 90 days; AWS IAM Access Analyzer can be configured for longer periods such as 180 or 360 days.docs.datadoghq.com · read 30 Sep 2026
- Purpose
- Cloud Security Identity Risks is a Cloud Infrastructure Entitlement Management product that continually scans cloud infrastructure for entitlement risks and helps mitigate IAM-based attacks.docs.datadoghq.com · read 30 Sep 2026
- Remediation
- The product suggests downsized policies, Datadog Workflows based remediations, and links to cloud consoles.docs.datadoghq.com · read 30 Sep 2026
- Risk types
- It identifies lingering administrative privileges, privilege escalations, permission gaps, large blast radii, and cross-account access.docs.datadoghq.com · read 30 Sep 2026
- Trial
- Datadog advertises a 14-day free trial of its entire product suite.datadoghq.com · read 30 Sep 2026
- Workflow integrations
- Identity risks can be remediated through Terraform-generated GitHub pull requests, Jira issues, or automated Datadog Workflows.docs.datadoghq.com · read 30 Sep 2026
