From bc152689160e87d93fce0fc6799d3c229d7a0837 Mon Sep 17 00:00:00 2001 From: Nick Lopez <20211302+nlopez@users.noreply.github.com> Date: Fri, 12 Jun 2026 15:27:09 -0400 Subject: [PATCH 1/5] Add US1 PrivateLink VPC Endpoint Service IDs reference table Co-authored-by: Pi --- content/en/agent/guide/private-link.md | 86 ++++++++++++++++++++++++-- 1 file changed, 82 insertions(+), 4 deletions(-) diff --git a/content/en/agent/guide/private-link.md b/content/en/agent/guide/private-link.md index 712ebc03bd5..96f08363fd5 100644 --- a/content/en/agent/guide/private-link.md +++ b/content/en/agent/guide/private-link.md @@ -52,7 +52,7 @@ Datadog exposes AWS PrivateLink endpoints in **{{< region-param key="aws_region" {{< img src="agent/guide/private_link/vpc_service_name.png" alt="VPC service name" style="width:70%;" >}} -{{% site-region region="us,ap1" %}} +{{% site-region region="ap1" %}} | Datadog | PrivateLink service name | Private DNS name | |---------------------------|----------------------------------------------------------------------------------------|------------------------------------------------------------------------| | Logs (Agent HTTP intake) | {{< region-param key="aws_private_link_logs_agent_service_name" code="true" >}} | {{< region-param key="agent_http_endpoint_private_link" code="true" >}} | @@ -66,6 +66,9 @@ Datadog exposes AWS PrivateLink endpoints in **{{< region-param key="aws_region" | Database Monitoring | {{< region-param key="aws_private_link_dbm_service_name" code="true" >}} | {{< region-param key="dbm_endpoint_private_link" code="true" >}} | | Remote Configuration | {{< region-param key="aws_private_link_remote_config_service_name" code="true" >}} | {{< region-param key="remote_config_endpoint_private_link" code="true" >}} | {{% /site-region %}} +{{% site-region region="us" %}} +For the complete list of US1 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). +{{% /site-region %}} {{% site-region region="ap2" %}} For the complete list of AP2 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). {{% /site-region %}} @@ -137,7 +140,7 @@ After the endpoint status is updated to {{< ui >}}Available{{< /ui >}}, you can ## PrivateLink service names -{{% site-region region="us,ap1" %}} +{{% site-region region="ap1" %}} | Datadog | PrivateLink service name | Private DNS name | |---------------------------|----------------------------------------------------------------------------------------|------------------------------------------------------------------------| | Logs (Agent HTTP intake) | {{< region-param key="aws_private_link_logs_agent_service_name" code="true" >}} | {{< region-param key="agent_http_endpoint_private_link" code="true" >}} | @@ -151,6 +154,9 @@ After the endpoint status is updated to {{< ui >}}Available{{< /ui >}}, you can | Database Monitoring | {{< region-param key="aws_private_link_dbm_service_name" code="true" >}} | {{< region-param key="dbm_endpoint_private_link" code="true" >}} | | Remote Configuration | {{< region-param key="aws_private_link_remote_config_service_name" code="true" >}} | {{< region-param key="remote_config_endpoint_private_link" code="true" >}} | {{% /site-region %}} +{{% site-region region="us" %}} +For the complete list of US1 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). +{{% /site-region %}} {{% site-region region="ap2" %}} For the complete list of AP2 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). {{% /site-region %}} @@ -171,7 +177,7 @@ For the complete list of AP2 DNS records and VPC service endpoints, see [VPC End {{< img src="agent/guide/private_link/vpc_service_name.png" alt="VPC service name" style="width:90%;" >}} -{{% site-region region="us,ap1" %}} +{{% site-region region="ap1" %}} | Datadog | PrivateLink service name | |---------------------------|----------------------------------------------------------------------------------------| | Logs (Agent HTTP intake) | {{< region-param key="aws_private_link_logs_agent_service_name" code="true" >}} | @@ -185,6 +191,9 @@ For the complete list of AP2 DNS records and VPC service endpoints, see [VPC End | Database Monitoring | {{< region-param key="aws_private_link_dbm_service_name" code="true" >}} | | Remote Configuration | {{< region-param key="aws_private_link_remote_config_service_name" code="true" >}} | {{% /site-region %}} +{{% site-region region="us" %}} +For the complete list of US1 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). +{{% /site-region %}} {{% site-region region="ap2" %}} For the complete list of AP2 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). {{% /site-region %}} @@ -215,7 +224,7 @@ For the complete list of AP2 DNS records and VPC service endpoints, see [VPC End Use the list below to map service and DNS name to different parts of Datadog: -{{% site-region region="us,ap1" %}} +{{% site-region region="ap1" %}} | Datadog | PrivateLink service name | Private DNS name | |---------------------------|----------------------------------------------------------------------------------------|------------------------------------------------------------------------| | Logs (Agent HTTP intake) | {{< region-param key="aws_private_link_logs_agent_service_name" code="true" >}} | {{< region-param key="agent_http_endpoint_private_link" code="true" >}} | @@ -229,6 +238,9 @@ Use the list below to map service and DNS name to different parts of Datadog: | Database Monitoring | {{< region-param key="aws_private_link_dbm_service_name" code="true" >}} | {{< region-param key="dbm_endpoint_private_link" code="true" >}} | | Remote Configuration | {{< region-param key="aws_private_link_remote_config_service_name" code="true" >}} | {{< region-param key="remote_config_endpoint_private_link" code="true" >}} | {{% /site-region %}} +{{% site-region region="us" %}} +For the complete list of US1 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). +{{% /site-region %}} {{% site-region region="ap2" %}} For the complete list of AP2 DNS records and VPC service endpoints, see [VPC Endpoint Service IDs](#vpc-endpoint-service-ids). {{% /site-region %}} @@ -323,6 +335,72 @@ The VPCs with Private Hosted Zone (PHZ) attached need to have a couple of settin [16]: /agent/logs/?tab=tailexistingfiles#send-logs-over-https [17]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/vpc-endpoint-overview.html +{{% site-region region="us" %}} +## VPC Endpoint Service IDs + +US1 uses a two-level DNS architecture for PrivateLink. Every customer-facing DNS record maps to a dedicated `color.intake.datadoghq.com` VPC endpoint address. Setting up a VPC endpoint for a given anchor address covers all customer-facing records that map to it. + +Use the following table to identify which VPC endpoints to set up for the Datadog features you use. More specific DNS records take precedence over wildcards—for example, `trace.agent.datadoghq.com` resolves to `lime.intake.datadoghq.com` even though `*.datadoghq.com` points to `orange.intake.datadoghq.com`. + +| Name | Anchor | VPC Endpoint Service ID | +|---|---|---| +| `l4-gcp-intake.logs.datadoghq.com` | `aqua.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-033b4c4d5469824ba` | +| `webhook-intake.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | +| `webhooks-http-intake.logs.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | +| `metrics.agent.datadoghq.com` | `beige.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0df08d4bc4daa83d4` | +| `*.process.datadoghq.com` | `bisque.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-092ee1696115128a7` | +| `process.datadoghq.com` | `bisque.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-092ee1696115128a7` | +| `*.integrations.otlp.datadoghq.com` | `brown.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-00192e92115cbcc75` | +| `opamp.datadoghq.com` | `brown.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-00192e92115cbcc75` | +| `otlp.datadoghq.com` | `brown.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-00192e92115cbcc75` | +| `mcp.datadoghq.com` | `cornsilk.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-058a75ceea85a9175` | +| `agenthealth-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `ci-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `cicodescan-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `citestcov-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `citestcycle-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `cloudplatform-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `contimage-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `contlcycle-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `cws-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `debugger-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `error-tracking-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `event-management-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `event-platform-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `feed-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `instrumentation-telemetry-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `kubeops-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `llmobs-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `ndm-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `ndmflow-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `netpath-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `ocimetrics-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `resources-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `sbom-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `sds-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `sentry-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `snmp-traps-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `softinv-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | +| `http-intake-l4.logs.datadoghq.com` | `gold.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0771479c6e0a3e78c` | +| `iam-rum-intake.datadoghq.com` | `gray.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0a3b2d86676122d8d` | +| `rum-http-intake.logs.datadoghq.com` | `gray.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0a3b2d86676122d8d` | +| `rum.browser-intake-datadoghq.com` | `gray.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0a3b2d86676122d8d` | +| `data-obs-intake.datadoghq.com` | `lime.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0ee865cd1c0a7ba32` | +| `trace.agent.datadoghq.com` | `lime.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0ee865cd1c0a7ba32` | +| `orchestrator.datadoghq.com` | `linen.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0fdf3a096bf56cc3c` | +| `network-devices.datadoghq.com` | `olive.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-05e3bfec4501e714d` | +| `*.datadoghq.com` | `orange.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b67fd56f90bd3c41` | +| `app.datadoghq.com` | `orange.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b67fd56f90bd3c41` | +| `*.api.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | +| `*.synthetics.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | +| `api.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | +| `intake.synthetics.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | +| `synthetics.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | +| `sourcemap-intake.datadoghq.com` | `plum.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-064ac68ae9d8cd604` | +| `config.datadoghq.com` | `violet.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07e4b660e69dd78e3` | +| `dbm-metrics-intake.datadoghq.com` | `white.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0453781fcd06eb283` | +{{% /site-region %}} + {{% site-region region="ap2" %}} ## VPC Endpoint Service IDs From 847407d92d3b52e7cdb716935e927d719a34a1db Mon Sep 17 00:00:00 2001 From: Nick Lopez <20211302+nlopez@users.noreply.github.com> Date: Fri, 12 Jun 2026 15:29:16 -0400 Subject: [PATCH 2/5] Remove internal l4-gcp-intake.logs.datadoghq.com from US1 table Co-authored-by: Pi --- content/en/agent/guide/private-link.md | 1 - 1 file changed, 1 deletion(-) diff --git a/content/en/agent/guide/private-link.md b/content/en/agent/guide/private-link.md index 96f08363fd5..aca29757c5a 100644 --- a/content/en/agent/guide/private-link.md +++ b/content/en/agent/guide/private-link.md @@ -344,7 +344,6 @@ Use the following table to identify which VPC endpoints to set up for the Datado | Name | Anchor | VPC Endpoint Service ID | |---|---|---| -| `l4-gcp-intake.logs.datadoghq.com` | `aqua.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-033b4c4d5469824ba` | | `webhook-intake.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | | `webhooks-http-intake.logs.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | | `metrics.agent.datadoghq.com` | `beige.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0df08d4bc4daa83d4` | From 0043266b908e7a8ca71d2740f00cab7ce445c74a Mon Sep 17 00:00:00 2001 From: Nick Lopez <20211302+nlopez@users.noreply.github.com> Date: Fri, 12 Jun 2026 15:29:34 -0400 Subject: [PATCH 3/5] Remove internal orange entries from US1 table Co-authored-by: Pi --- content/en/agent/guide/private-link.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/content/en/agent/guide/private-link.md b/content/en/agent/guide/private-link.md index aca29757c5a..53eac541776 100644 --- a/content/en/agent/guide/private-link.md +++ b/content/en/agent/guide/private-link.md @@ -340,7 +340,7 @@ The VPCs with Private Hosted Zone (PHZ) attached need to have a couple of settin US1 uses a two-level DNS architecture for PrivateLink. Every customer-facing DNS record maps to a dedicated `color.intake.datadoghq.com` VPC endpoint address. Setting up a VPC endpoint for a given anchor address covers all customer-facing records that map to it. -Use the following table to identify which VPC endpoints to set up for the Datadog features you use. More specific DNS records take precedence over wildcards—for example, `trace.agent.datadoghq.com` resolves to `lime.intake.datadoghq.com` even though `*.datadoghq.com` points to `orange.intake.datadoghq.com`. +Use the following table to identify which VPC endpoints to set up for the Datadog features you use. More specific DNS records take precedence over wildcards—for example, `trace.agent.datadoghq.com` resolves to `lime.intake.datadoghq.com` even though `*.process.datadoghq.com` points to `bisque.intake.datadoghq.com`. | Name | Anchor | VPC Endpoint Service ID | |---|---|---| @@ -388,8 +388,6 @@ Use the following table to identify which VPC endpoints to set up for the Datado | `trace.agent.datadoghq.com` | `lime.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0ee865cd1c0a7ba32` | | `orchestrator.datadoghq.com` | `linen.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0fdf3a096bf56cc3c` | | `network-devices.datadoghq.com` | `olive.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-05e3bfec4501e714d` | -| `*.datadoghq.com` | `orange.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b67fd56f90bd3c41` | -| `app.datadoghq.com` | `orange.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b67fd56f90bd3c41` | | `*.api.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | | `*.synthetics.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | | `api.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | From fee19f34cb54fa0044c16bf49fa85bd38a029492 Mon Sep 17 00:00:00 2001 From: Nick Lopez <20211302+nlopez@users.noreply.github.com> Date: Fri, 12 Jun 2026 15:49:53 -0400 Subject: [PATCH 4/5] Remove internal beige entry from US1 table Co-authored-by: Pi --- content/en/agent/guide/private-link.md | 1 - 1 file changed, 1 deletion(-) diff --git a/content/en/agent/guide/private-link.md b/content/en/agent/guide/private-link.md index 53eac541776..795930761a5 100644 --- a/content/en/agent/guide/private-link.md +++ b/content/en/agent/guide/private-link.md @@ -346,7 +346,6 @@ Use the following table to identify which VPC endpoints to set up for the Datado |---|---|---| | `webhook-intake.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | | `webhooks-http-intake.logs.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | -| `metrics.agent.datadoghq.com` | `beige.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0df08d4bc4daa83d4` | | `*.process.datadoghq.com` | `bisque.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-092ee1696115128a7` | | `process.datadoghq.com` | `bisque.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-092ee1696115128a7` | | `*.integrations.otlp.datadoghq.com` | `brown.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-00192e92115cbcc75` | From 1b427adcb252b1706a8de04e0633510f8147a342 Mon Sep 17 00:00:00 2001 From: Nick Lopez <20211302+nlopez@users.noreply.github.com> Date: Fri, 12 Jun 2026 15:52:14 -0400 Subject: [PATCH 5/5] Remove 12 US1 entries that don't resolve to color anchors in public DNS Co-authored-by: Pi --- content/en/agent/guide/private-link.md | 14 +------------- 1 file changed, 1 insertion(+), 13 deletions(-) diff --git a/content/en/agent/guide/private-link.md b/content/en/agent/guide/private-link.md index 795930761a5..ab6aaa2eda6 100644 --- a/content/en/agent/guide/private-link.md +++ b/content/en/agent/guide/private-link.md @@ -340,14 +340,12 @@ The VPCs with Private Hosted Zone (PHZ) attached need to have a couple of settin US1 uses a two-level DNS architecture for PrivateLink. Every customer-facing DNS record maps to a dedicated `color.intake.datadoghq.com` VPC endpoint address. Setting up a VPC endpoint for a given anchor address covers all customer-facing records that map to it. -Use the following table to identify which VPC endpoints to set up for the Datadog features you use. More specific DNS records take precedence over wildcards—for example, `trace.agent.datadoghq.com` resolves to `lime.intake.datadoghq.com` even though `*.process.datadoghq.com` points to `bisque.intake.datadoghq.com`. +Use the following table to identify which VPC endpoints to set up for the Datadog features you use. Wildcard entries match any subdomain not otherwise listed. | Name | Anchor | VPC Endpoint Service ID | |---|---|---| | `webhook-intake.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | | `webhooks-http-intake.logs.datadoghq.com` | `azure.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-02bee2072b5c3c226` | -| `*.process.datadoghq.com` | `bisque.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-092ee1696115128a7` | -| `process.datadoghq.com` | `bisque.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-092ee1696115128a7` | | `*.integrations.otlp.datadoghq.com` | `brown.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-00192e92115cbcc75` | | `opamp.datadoghq.com` | `brown.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-00192e92115cbcc75` | | `otlp.datadoghq.com` | `brown.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-00192e92115cbcc75` | @@ -379,22 +377,12 @@ Use the following table to identify which VPC endpoints to set up for the Datado | `sentry-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | | `snmp-traps-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | | `softinv-intake.datadoghq.com` | `cyan.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0b3292e3efce2a445` | -| `http-intake-l4.logs.datadoghq.com` | `gold.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0771479c6e0a3e78c` | | `iam-rum-intake.datadoghq.com` | `gray.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0a3b2d86676122d8d` | | `rum-http-intake.logs.datadoghq.com` | `gray.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0a3b2d86676122d8d` | | `rum.browser-intake-datadoghq.com` | `gray.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0a3b2d86676122d8d` | -| `data-obs-intake.datadoghq.com` | `lime.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0ee865cd1c0a7ba32` | -| `trace.agent.datadoghq.com` | `lime.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0ee865cd1c0a7ba32` | -| `orchestrator.datadoghq.com` | `linen.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0fdf3a096bf56cc3c` | | `network-devices.datadoghq.com` | `olive.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-05e3bfec4501e714d` | -| `*.api.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | | `*.synthetics.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | | `api.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | -| `intake.synthetics.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | -| `synthetics.datadoghq.com` | `orchid.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07895350fd0109264` | -| `sourcemap-intake.datadoghq.com` | `plum.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-064ac68ae9d8cd604` | -| `config.datadoghq.com` | `violet.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-07e4b660e69dd78e3` | -| `dbm-metrics-intake.datadoghq.com` | `white.intake.datadoghq.com` | `com.amazonaws.vpce.us-east-1.vpce-svc-0453781fcd06eb283` | {{% /site-region %}} {{% site-region region="ap2" %}}