template.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: AWS account observability stack

Parameters:
  AwsOrgId:
    Type: String
  AwsOrgRootId:
    Type: String
  ManagementOu:
    Type: String
  ObservabilityOu:
    Type: String
  DatadogSite:
    Type: String
  DatadogApiKey:
    Type: String
    NoEcho: 'true'
  DatadogAppKey:
    Type: String
    NoEcho: 'true'
  DataDogLogsDestinationArn:
    Type: String
    NoEcho: 'true'
  AwsOamSinkArn:
    Type: String

Resources:
  DatadogIntegrationStack:
    Type: AWS::Serverless::Application
    Properties:
      Location: "https://datadog-cloudformation-template.s3.amazonaws.com/aws/main_organizations.yaml"
      Parameters:
        DatadogApiKey: !Ref DatadogApiKey
        DatadogAppKey: !Ref DatadogAppKey
        DatadogSite: !Ref DatadogSite
        DisableMetricCollection: 'true'

  LogShippingStack:
    Type: AWS::Serverless::Application
    Properties:
      Location: "./stacksets/logging/template.yaml"
      Parameters:
        DestinationArn: !Ref DataDogLogsDestinationArn

  MetricsSinkStack:
    Type: AWS::Serverless::Application
    Properties:
      Location: "./stacksets/metrics/oam-link-template.yaml"
      Parameters:
        AwsOamSinkArn: !Ref AwsOamSinkArn

  CwCrossAccountShareStack:
    Type: AWS::Serverless::Application
    Properties:
      Location: "./stacksets/metrics/cw-cross-account-sharing-template.yaml"
      Parameters:
        ObservabilityOuPath: !Sub "${AwsOrgId}/${AwsOrgRootId}/${ManagementOu}/${ObservabilityOu}"
        Policy: View-Access-for-all-services
        MonitoringAccountId: !Select [ "4", !Split [ ":", !Ref AwsOamSinkArn ] ]