serverless-plugin-datadog

v5.73.0

Serverless plugin to automatically instrument python and node functions with datadog tracing For more information about how to use this package see README

Latest version published 21 days ago

License: Apache-2.0

NPM

GitHub

Package Health Score

80 / 100

security
Security review needed
popularity
Popular
maintenance
Healthy
community
Active

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions

Version				Vulnerabilities	License Risk
5.73.0	\|	10/2024	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L
5.72.0	\|	10/2024		0 C 0 H 0 M 0 L	0 H 0 M 0 L
5.22.0	\|	04/2023		0 C 0 H 0 M 0 L	0 H 0 M 0 L
4.3.0	\|	04/2022		0 C 0 H 0 M 0 L	0 H 0 M 0 L
4.2.0	\|	03/2022		0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

Apache-2.0

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Popular

Weekly Downloads (118,959)

GitHub Stars: 96
Forks: 49
Contributors: 60

Direct Usage Popularity

The npm package serverless-plugin-datadog receives a total of 118,959 downloads a week. As such, we scored serverless-plugin-datadog popularity level to be Popular.

Based on project statistics from the GitHub repository for the npm package serverless-plugin-datadog, we found that it has been starred 96 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: No
Contributors: 60
Funding: No

With more than 10 contributors for the serverless-plugin-datadog repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like serverless-plugin-datadog is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Healthy

Commit Frequency

Open Issues: 7
Open PR: 0
Last Release: 21 days ago
Last Commit: 6 days ago

Further analysis of the maintenance status of serverless-plugin-datadog based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that serverless-plugin-datadog demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: not defined

Age: 5 years
Dependencies: 3 Direct
Versions: 184
Install Size: 347 kB
Dist-tags: 1
# of Files: 76
Maintainers: 1
TS Typings: No

serverless-plugin-datadog has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

build

Datadog recommends the Serverless Framework Plugin for developers using the Serverless Framework to deploy their serverless applications. The plugin automatically enables instrumentation for applications to collect metrics, traces, and logs by:

Installing the Datadog Lambda library to your Lambda functions as a Lambda layer.
Installing the Datadog Lambda Extension to your Lambda functions as a Lambda layer (addExtension) or subscribing the Datadog Forwarder to your Lambda functions' log groups (forwarderArn).
Making the required configuration changes, such as adding environment variables or additional tracing layers, to your Lambda functions.

Getting started

To quickly get started, follow the installation instructions for Python, Node.js, Ruby, Java, Go, or .NET and view your function's enhanced metrics, traces, and logs in Datadog.

After installation is complete, configure the advanced options to suit your monitoring needs.

Upgrade

Each version of the plugin is published with a specific set of versions of the Datadog Lambda layers. To pick up new features and bug fixes provided by the latest versions of Datadog Lambda layers, upgrade the serverless framework plugin. Test the new version before applying it on your production applications.

Configuration parameters

To further configure your plugin, use the following custom parameters in your serverless.yml:

Parameter	Description
`site`	Set which Datadog site to send data to, such as `datadoghq.com` (default), `datadoghq.eu`, `us3.datadoghq.com`, `us5.datadoghq.com`, `ap1.datadoghq.com`, or `ddog-gov.com`. This parameter is required when collecting telemetry using the Datadog Lambda Extension.
`apiKey`	Datadog API key. This parameter is required when collecting telemetry using the Datadog Lambda Extension. Alternatively, you can also set the `DATADOG_API_KEY` environment variable in your deployment environment.
`appKey`	Datadog app key. Only needed when the `monitors` field is defined. Alternatively, you can also set the `DATADOG_APP_KEY` environment variable in your deployment environment.
`apiKeySecretArn`	An alternative to using the `apiKey` field. The ARN of the secret that is storing the Datadog API key in AWS Secrets Manager. Remember to add the `secretsmanager:GetSecretValue` permission to the Lambda execution role.
`apiKMSKey`	An alternative to using the `apiKey` field. Datadog API key encrypted using KMS. Remember to add the `kms:Decrypt` permission to the Lambda execution role.
`env`	When set along with `addExtension`, a `DD_ENV` environment variable is added to all Lambda functions with the provided value. Otherwise, an `env` tag is added to all Lambda functions with the provided value. Defaults to the `stage` value of the serverless deployment.
`service`	When set along with `addExtension`, a `DD_SERVICE` environment variable is added to all Lambda functions with the provided value. Otherwise, a `service` tag is added to all Lambda functions with the provided value. Defaults to the `service` value of the serverless project.
`version`	When set along with `addExtension`, a `DD_VERSION` environment variable is added to all Lambda functions with the provided value. When set along with `forwarderArn`, a `version` tag is added to all Lambda functions with the provided value.
`tags`	A comma separated list of `key`:`value` pairs as a single string. When set along with `extensionLayerVersion`, a `DD_TAGS` environment variable is added to all Lambda functions with the provided value. When set along with `forwarderArn`, the plugin parses the string and sets each `key`:`value` pair as a tag on all Lambda functions.
`enableXrayTracing`	Set `true` to enable X-Ray tracing on the Lambda functions and API Gateway integrations. Defaults to `false`.
`enableDDTracing`	Enable Datadog tracing on the Lambda function. Defaults to `true`.
`enableASM`	Enable Datadog Application Security Management (ASM) on the Lambda function. Requires the Datadog extension to be present (using `addExtension` or manually added) and `enableDDTracing`. Defaults to `false`.
`enableDDLogs`	Enable Datadog log collection using the Lambda Extension. Defaults to `true`. Note: This setting has no effect on logs sent by the Datadog Forwarder.
`monitors`	When defined, the Datadog plugin configures monitors for the deployed function. Requires setting `DATADOG_API_KEY` and `DATADOG_APP_KEY` in your environment. To learn how to define monitors, see To Enable and Configure a Recommended Serverless Monitor.
`captureLambdaPayload`	Captures incoming and outgoing AWS Lambda payloads in the Datadog APM spans for Lambda invocations. Defaults to `false`.
`enableSourceCodeIntegration`	Enable Datadog Source Code Integration for the function. Defaults to `true`.
`uploadGitMetadata`	Enable Git metadata uploading for the function, as a part of source code integration. Set this to false if you have the Datadog Github Integration installed, as it renders Git metadata uploading unnecessary. Defaults to `true`.
`subscribeToAccessLogs`	Enable automatic subscription of the Datadog Forwarder to API Gateway access log groups. Requires setting `forwarderArn`. Defaults to `true`.
`subscribeToExecutionLogs`	Enable automatic subscription of the Datadog Forwarder to HTTP API and Websocket log groups. Requires setting `forwarderArn`. Defaults to `true`.
`forwarderArn`	The ARN of the Datadog Forwarder to be subscribed to the Lambda or API Gateway log groups.
`addLayers`	Whether to install the Datadog Lambda library as a layer. Defaults to `true`. Set to `false` when you plan to package the Datadog Lambda library to your function's deployment package on your own so that you can install a specific version of the Datadog Lambda library (Python or Node.js).
`addExtension`	Whether to install the Datadog Lambda Extension as a layer. Defaults to `true`. When enabled, it's required to set the `apiKey` and `site`.
`exclude`	When set, this plugin ignores all specified functions. Use this parameter if you have any functions that should not include Datadog functionality. Defaults to `[]`.
`enabled`	When set to `false`, the Datadog plugin stays inactive. Defaults to `true`. You can control this option using an environment variable. For example, use `enabled: ${strToBool(${env:DD_PLUGIN_ENABLED, true})}` to activate/deactivate the plugin during deployment. Alternatively, you can also use the value passed in through `--stage` to control this option—see example.
`customHandler`	When set, the specified handler is set as the handler for all the functions.
`failOnError`	When set, this plugin throws an error if any custom Datadog monitors fail to create or update. This occurs after deploy, but will cause the result of `serverless deploy` to return a nonzero exit code (to fail user CI). Defaults to `false`.
`logLevel`	The log level for Datadog's lambda extension and tracing libraries. Set to `DEBUG` for extended logging. It does not affect which user logs are forwarded to Datadog.
`skipCloudformationOutputs`	Set to `true` if you want to skip adding Datadog Cloudformation Outputs for your stack. This is useful if you are running into the 200 output limit which can cause the stack creation to fail.
`enableColdStartTracing`	Set to `false` to disable Cold Start Tracing. Used in NodeJS and Python. Defaults to `true`.
`coldStartTraceMinDuration`	Sets the minimum duration (in milliseconds) for a module load event to be traced via Cold Start Tracing. Number. Defaults to `3`.
`coldStartTraceSkipLibs`	optionally skip creating Cold Start Spans for a comma-separated list of libraries. Useful to limit depth or skip known libraries. Default depends on runtime.
`subdomain`	Set an optional subdomain to use for app URLs which are printed to output. Defaults to `app`.
`enableProfiling`	Enable the Datadog Continuous Profiler with `true`. Supported in Beta for NodeJS and Python. Defaults to `false`.
`encodeAuthorizerContext`	When set to `true` for Lambda authorizers, the tracing context will be encoded into the response for propagation. Supported for NodeJS and Python. Defaults to `true`.
`decodeAuthorizerContext`	When set to `true` for Lambdas that are authorized via Lambda authorizers, it will parse and use the encoded tracing context (if found). Supported for NodeJS and Python. Defaults to `true`.
`apmFlushDeadline`	Used to determine when to submit spans before a timeout occurs, in milliseconds. When the remaining time in an AWS Lambda invocation is less than the value set, the tracer attempts to submit the current active spans and all finished spans. Supported for NodeJS and Python. Defaults to `100` milliseconds.
`enableStepFunctionsTracing`	Enable automatic subscription of the Datadog Forwarder to Step Function log groups and Step Functions tracing. If no Step Function log groups are configured, then they are automatically created. Requires setting `forwarderArn`. Defaults to `false`.
`propagateUpstreamTrace`	When set to `true`, downstream Stepfunction invocation traces merge with upstream Stepfunction invocations. Defaults to `false`.
`redirectHandlers`	Optionally disable handler redirection if set to `false`. This should only be set to `false` when APM is fully disabled. Defaults to `true`.
To use any of these parameters, add a `custom` > `datadog` section to your `serverless.yml` similar to this example:

custom:
  datadog:
    apiKeySecretArn: "{Datadog_API_Key_Secret_ARN}"
    enableXrayTracing: false
    enableDDTracing: true
    enableDDLogs: true
    subscribeToAccessLogs: true
    forwarderArn: arn:aws:lambda:us-east-1:000000000000:function:datadog-forwarder
    exclude:
      - dd-excluded-function

Webpack

If you are using a bundler, such as webpack, see Serverless Tracing and Webpack.

TypeScript

You may encounter the error of missing type definitions. To resolve the error, add datadog-lambda-js and dd-trace to the devDependencies list of your project's package.json.

If you are using serverless-typescript, make sure that serverless-datadog is above the serverless-typescript entry in your serverless.yml. The plugin will automatically detect .ts files.

plugins:
  - serverless-plugin-datadog
  - serverless-typescript

Disable Plugin for Particular Environment

If you'd like to turn off the plugin based on the environment (passed via --stage), you can use something similar to the example below.

provider:
  stage: ${self:opt.stage, 'dev'}

custom:
  staged: ${self:custom.stageVars.${self:provider.stage}, {}}

  stageVars:
    dev:
      dd_enabled: false

  datadog:
    enabled: ${self:custom.staged.dd_enabled, true}

Serverless Monitors

There are seven recommended monitors with default values pre-configured.

Monitor	Metrics	Threshold	Serverless Monitor ID
High Error Rate	`aws.lambda.errors`/`aws.lambda.invocations`	>= 10%	`high_error_rate`
Timeout	`aws.lambda.duration.max`/`aws.lambda.timeout`	>= 1	`timeout`
Out of Memory	`aws.lambda.enhanced.out_of_memory`	> 0	`out_of_memory`
High Iterator Age	`aws.lambda.iterator_age.maximum`	>= 24 hrs	`high_iterator_age`
High Cold Start Rate	`aws.lambda.enhanced.invocations(cold_start:true)`/ `aws.lambda.enhanced.invocations`	>= 20%	`high_cold_start_rate`
High Throttles	`aws.lambda.throttles`/`aws.lambda.invocations`	>= 20%	`high_throttles`
Increased Cost	`aws.lambda.enhanced.estimated_cost`	↑20%	`increased_cost`

To Enable and Configure a Recommended Serverless Monitor

To create a recommended monitor, you must use its respective serverless monitor ID. Note that you must also set the DATADOG_API_KEY and DATADOG_APP_KEY in your environment.

If you’d like to further configure the parameters for a recommended monitor, you can directly define the parameter values below the serverless monitor ID. Parameters not specified under a recommended monitor will use the default recommended value. The query parameter for recommended monitors cannot be directly modified and will default to using the query valued as defined above; however, you may change the threshold value in query by re-defining it within the options parameter. To delete a monitor, remove the monitor from the serverless.yml template. For further documentation on how to define monitor parameters, see the Datadog Monitors API.

Monitor creation occurs after the function is deployed. In the event that a monitor is unsuccessfully created, the function will still be successfully deployed.

To create a recommended monitor with the default values

Define the appropriate serverless monitor ID without specifying any parameter values

custom:
  datadog:
    addLayers: true
    monitors:
      - high_error_rate:

To configure a recommended monitor

custom:
  datadog:
    addLayers: true
    monitors:
      - high_error_rate:
          name: "High Error Rate with Modified Warning Threshold"
          message: "More than 10% of the function’s invocations were errors in the selected time range. Notify @data.dog@datadoghq.com @slack-serverless-monitors"
          tags: ["modified_error_rate", "serverless", "error_rate"]
          require_full_window: true
          priority: 2
          options:
            include_tags: true
            notify_audit: true
            thresholds:
              warning: 0.05
              critical: 0.1

To delete a monitor

Removing the serverless monitor ID and its parameters will delete the monitor.

To Enable and Configure a Custom Monitor

To define a custom monitor, you must define a unique serverless monitor ID string in addition to passing in the API key and Application key, DATADOG_API_KEY and DATADOG_APP_KEY, in your environment. The query parameter is required but every other parameter is optional. Define a unique serverless monitor ID string and specify the necessary parameters below. For further documentation on monitor parameters, see the Datadog Monitors API.

custom:
  datadog:
    addLayers: true
    monitors:
      - custom_monitor_id:
          name: "Custom Monitor"
          query: "max(next_1w):forecast(avg:system.load.1{*}, 'linear', 1, interval='60m', history='1w', model='default') &gt;= 3"
          message: "Custom message for custom monitor. Notify @data.dog@datadoghq.com @slack-serverless-monitors"
          tags: ["custom_monitor", "serverless"]
          priority: 3
          options:
            enable_logs_sample: true
            require_full_window: true
            include_tags: false
            notify_audit: true
            notify_no_data: false
            thresholds:
              warning: 2
              critical: 3

Breaking Changes

v5.0.0

When used in conjunction with the Datadog Extension, this plugin sets service and env tags through environment variables instead of Lambda resource tags.
The enableTags parameter was replaced by the new service, env parameters.

v4.0.0

The Datadog Lambda Extension is now the default mechanism for transmitting telemetry to Datadog.

Working with serverless-plugin-warmup

This library is compatible at best effort with serverless-plugin-warmup. If you want to exclude the warmer function from Datadog, use the exclude feature of this library.

To properly package your application, this plugin must be listed after serverless-plugin-warmup in your serverless.yml file:

plugins:
  - serverless-plugin-warmup
  - serverless-plugin-datadog

Opening Issues

If you encounter a bug with this package, let us know by filing an issue! Before opening a new issue, please search the existing issues to avoid duplicates.

When opening an issue, include your Serverless Framework version, Python/Node.js version, and stack trace if available. Also, please include the steps to reproduce when appropriate.

You can also open an issue for a feature request.

Contributing

If you find an issue with this package and have a fix, open a pull request following the procedures.

Community

For product feedback and questions, join the #serverless channel in the Datadog community on Slack.

License

Unless explicitly stated otherwise, all files in this repository are licensed under the Apache License Version 2.0.

serverless-plugin-datadog dependencies

@datadog/datadog-ci node-fetch simple-git

serverless-plugin-datadog development dependencies

@types/jest @types/mock-fs @types/node-fetch @types/serverless jest jest-environment-node mock-fs prettier serverless-step-functions ts-jest tslint typescript

FAQs

What is serverless-plugin-datadog?

Serverless plugin to automatically instrument python and node functions with datadog tracing. Visit Snyk Advisor to see a full health score report for serverless-plugin-datadog, including popularity, security, maintenance & community analysis.

Is serverless-plugin-datadog popular?

The npm package serverless-plugin-datadog receives a total of 118,959 weekly downloads. As such, serverless-plugin-datadog popularity was classified as a popular. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is serverless-plugin-datadog well maintained?

We found that serverless-plugin-datadog demonstrated a healthy version release cadence and project activity. It has a community of 60 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is serverless-plugin-datadog safe to use?

While scanning the latest version of serverless-plugin-datadog, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 18 November-2024, at 03:33 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (118,959)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Readme

Getting started

Upgrade

Configuration parameters

Webpack

TypeScript

Disable Plugin for Particular Environment

Serverless Monitors

To Enable and Configure a Recommended Serverless Monitor

To create a recommended monitor with the default values

To configure a recommended monitor

To delete a monitor

To Enable and Configure a Custom Monitor

Breaking Changes

Working with serverless-plugin-warmup

Opening Issues

Contributing

Community

License

serverless-plugin-datadog dependencies

serverless-plugin-datadog development dependencies

FAQs

What is serverless-plugin-datadog?

Is serverless-plugin-datadog popular?

Is serverless-plugin-datadog well maintained?

Is serverless-plugin-datadog safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues