Dynamic Instrumentation and
Live Debugger share the same enablement state per service and environment. Enabling or disabling one also enables or disables the other for that service and environment, although the two products have separate permissions and Settings pages.
Warning: The captured data may contain sensitive information, including personal data, passwords, and secrets such as AWS keys.
To ensure this information is properly redacted:
-- Datadog Dynamic Instrumentation employs several techniques to redact sensitive information. To learn more about the default mechanisms or how to extend the it to meet your needs, read Sensitive Data Scrubbing.
-- Turn off the {{< ui >}}Capture method parameters and local variables{{< /ui >}} option and explicitly select the variables you want to include in the log message template. Doing so ensures that log probes contain only data related to the variables that you specifically identify, thus reducing the risk of unintentional sensitive data leaks.
-- If you are the Administrator of your Datadog account and would like to prevent other users from being able to use the {{< ui >}}Capture method parameters and local variables{{< /ui >}} option, you can revoke their Dynamic Instrumentation Capture Variables (
debugger_capture_variables) permission.
Alternatively, if you need to log this data but want to mitigate the risk associated with it being accessible in the Datadog product, you can limit which users in your organization can view the captured data by setting up a Restriction query on source:dd_debugger.