What changed
Callers using the withdrawn credentials are rejected. Callers already on a remaining option are unaffected.
Affects POST /api/v2/events. Still accepted: apiKeyAuth + appKeyAuth. Check which credentials your integration sends before treating this as yours.
AuthZ no longer accepted; apiKeyAuth + appKeyAuth still is
Who is affected
Code that calls POST /api/v2/events.
Before and after
| Where | Before | After |
|---|---|---|
| POST /api/v2/events | AuthZ | apiKeyAuth + appKeyAuth |
Based on Datadog’s published API specification. How severity is decided.