merge upstream (#3)

* feat: changes dd lambda default version from v3.17.0 to v3.27.0

change the datadog lambda forwarder version from v3.17.0 to v3.27.0. There are many feature improvements in this version such as the support for SNS topic subscriptions for S3 bucket events

* fix: Add missing cloudwatch:ListMetrics access for AWS integration (scribd#27)

* chore(release): 2.0.1 [skip ci]

## [2.0.1](scribd/terraform-aws-datadog@v2.0.0...v2.0.1) (2021-01-22)

### Bug Fixes

* Add missing cloudwatch:ListMetrics access for AWS integration ([scribd#27](scribd#27)) ([f7c80c2](scribd@f7c80c2))

* chore(release): 2.1.0 [skip ci]

# [2.1.0](scribd/terraform-aws-datadog@v2.0.1...v2.1.0) (2021-03-16)

### Features

* changes dd lambda default version from v3.17.0 to v3.27.0 ([8e455a8](scribd@8e455a8))

* feat: enable support for terraform 0.14

* chore(release): 2.2.0 [skip ci]

# [2.2.0](scribd/terraform-aws-datadog@v2.1.0...v2.2.0) (2021-03-19)

### Features

* enable support for terraform 0.14 ([c65a0d0](scribd@c65a0d0))

* feat: enable support for Terraform 1.0 (scribd#32)

* chore(release): 2.3.0 [skip ci]

# [2.3.0](scribd/terraform-aws-datadog@v2.2.0...v2.3.0) (2021-07-14)

### Features

* enable support for Terraform 1.0 ([scribd#32](scribd#32)) ([5410502](scribd@5410502))

* bug: fix datadog IAM policy to prevent numerous CloudTrail errors for v2

* chore(release): 2.3.1 [skip ci]

## [2.3.1](scribd/terraform-aws-datadog@v2.3.0...v2.3.1) (2021-08-17)

### Bug Fixes

* Merge pull request [scribd#35](scribd#35) from scribd/taylorsmcclure/fix-iam-policy-v2 ([7bf7868](scribd@7bf7868))

Co-authored-by: Taylor McClure <taylor@scribd.com>
Co-authored-by: Rusty Chain <rchain@axs.com>
Co-authored-by: semantic-release-bot <semantic-release-bot@martynus.net>
Co-authored-by: Jim Park <jimp@scribd.com>
Co-authored-by: Andrew Wiggins <59580098+andrew-wiggins@users.noreply.github.com>

Author: 6 people

CHANGELOG.md

@@ -1,3 +1,38 @@
+## [2.3.1](https://github.com/scribd/terraform-aws-datadog/compare/v2.3.0...v2.3.1) (2021-08-17)
+
+
+### Bug Fixes
+
+* Merge pull request [#35](https://github.com/scribd/terraform-aws-datadog/issues/35) from scribd/taylorsmcclure/fix-iam-policy-v2 ([7bf7868](https://github.com/scribd/terraform-aws-datadog/commit/7bf78689e90293f4c6510025cce8cc48b8a4dafd))
+
+# [2.3.0](https://github.com/scribd/terraform-aws-datadog/compare/v2.2.0...v2.3.0) (2021-07-14)
+
+
+### Features
+
+* enable support for Terraform 1.0 ([#32](https://github.com/scribd/terraform-aws-datadog/issues/32)) ([5410502](https://github.com/scribd/terraform-aws-datadog/commit/5410502ac1d9cc6dfc4b3c1c0bbe49895f802570))
+
+# [2.2.0](https://github.com/scribd/terraform-aws-datadog/compare/v2.1.0...v2.2.0) (2021-03-19)
+
+
+### Features
+
+* enable support for terraform 0.14 ([c65a0d0](https://github.com/scribd/terraform-aws-datadog/commit/c65a0d04f1e7a07cf496002fc149afb9108a5c9f))
+
+# [2.1.0](https://github.com/scribd/terraform-aws-datadog/compare/v2.0.1...v2.1.0) (2021-03-16)
+
+
+### Features
+
+* changes dd lambda default version from v3.17.0 to v3.27.0 ([8e455a8](https://github.com/scribd/terraform-aws-datadog/commit/8e455a8f217ba398a79be90a9251c59f8eb4b1fe))
+
+## [2.0.1](https://github.com/scribd/terraform-aws-datadog/compare/v2.0.0...v2.0.1) (2021-01-22)
+
+
+### Bug Fixes
+
+* Add missing cloudwatch:ListMetrics access for AWS integration ([#27](https://github.com/scribd/terraform-aws-datadog/issues/27)) ([f7c80c2](https://github.com/scribd/terraform-aws-datadog/commit/f7c80c2c7a73fa5bf1ab7132c51ff24f3703d611))
+
 # [2.0.0](https://github.com/scribd/terraform-aws-datadog/compare/v1.3.5...v2.0.0) (2020-11-06)
 
 

main.tf

@@ -59,11 +59,12 @@ resource "aws_iam_policy" "datadog-core" {
         "apigateway:GET",
         "autoscaling:Describe*",
         "budgets:ViewBudget",
+        "cloudformation:DetectStack*",
         "cloudfront:GetDistributionConfig",
         "cloudfront:ListDistributions",
+        "cloudtrail:LookupEvents",
         "cloudtrail:DescribeTrails",
         "cloudtrail:GetTrailStatus",
-        "cloudtrail:LookupEvents",
         "cloudwatch:Describe*",
         "cloudwatch:Get*",
         "cloudwatch:List*",
@@ -86,6 +87,7 @@ resource "aws_iam_policy" "datadog-core" {
         "es:ListTags",
         "es:ListDomainNames",
         "es:DescribeElasticsearchDomains",
+        "fsx:DescribeFileSystems",
         "health:DescribeEvents",
         "health:DescribeEventDetails",
         "health:DescribeAffectedEntities",
@@ -102,6 +104,7 @@ resource "aws_iam_policy" "datadog-core" {
         "logs:PutSubscriptionFilter",
         "logs:DeleteSubscriptionFilter",
         "logs:DescribeSubscriptionFilters",
+        "organizations:DescribeOrganization",
         "rds:Describe*",
         "rds:List*",
         "redshift:DescribeClusters",
@@ -116,8 +119,8 @@ resource "aws_iam_policy" "datadog-core" {
         "ses:Get*",
         "sns:List*",
         "sns:Publish",
-        "sqs:ListQueues",
         "states:ListStateMachines",
+        "sqs:ListQueues",
         "support:*",
         "tag:GetResources",
         "tag:GetTagKeys",

vars.tf

@@ -66,7 +66,7 @@ variable "log_exclude_at_match" {
 variable "dd_forwarder_template_version" {
   description = "Sets Datadog Forwarder version to use"
   type        = string
-  default     = "3.17.0"
+  default     = "3.27.0"
 }
 
 variable "dd_forwarder_dd_site" {

versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = ">= 0.13, < 1.1.0"
+
+  required_providers {
+    datadog = {
+      source  = "DataDog/datadog"
+      version = ">= 2.10, < 3"
+    }
+  }
+}