skills.rest
lauhon
lauhonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

gcp-integration

Configure and manage Datadog GCP integrations for metrics, CSPM, and resource collection.

5|2|Updated Mar 9, 2026
Search Tags:#integration#gcp#metrics#datadog#cloud monitoring#workload identity#cspm
One-click install
npx skills add https://github.com/lauhon/pi --skill gcp-integration-lauhon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gcp-integration
Source: https://github.com/lauhon/pi/tree/main/skills/gcp-integration
Command: npx skills add https://github.com/lauhon/pi --skill gcp-integration-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Setting up and maintaining Datadog monitoring for Google Cloud projects involves complex authentication, IAM permissions, and metric configuration. This Skill guides you through creating, updating, and managing GCP integrations using the Datadog API via the pup CLI, eliminating guesswork around Workload Identity, CSPM, and metric filtering. ## Core Features & Use Cases - GCP Account Integration (V2 API): Create, list, update, and delete STS-based service account integrations with Workload Identity authentication. - Security & Compliance Configuration: Enable CSPM, Security Command Center findings, and resource change tracking with the correct IAM roles. - Cost Optimization: Filter monitored resources by labels, disable unused metric namespaces, and apply metric-level filters to reduce volume. - Use Case: You need to monitor only production GCE instances while enabling CSPM. The Skill walks you through creating the Datadog delegate account, configuring Workload Identity in GCP, and registering the integration with resource filters and security features enabled. ## Quick Start Ask the agent to list all configured GCP integrations or to set up a new GCP integration for your project with CSPM enabled.

Frequently Asked Questions about gcp-integration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a Datadog GCP integration with Workload Identity?▼

Create a Datadog GCP delegate account with pup gcp delegate create, then create a service account in GCP, grant it monitoring roles, bind the delegate via Workload Identity, and register it with pup gcp accounts create using the client email.

How do I enable CSPM for a GCP project in Datadog?▼

Update the integration with pup gcp accounts update setting is-cspm-enabled and resource-collection-enabled to true. The service account also needs roles/compute.viewer, roles/iam.securityReviewer, and roles/cloudasset.viewer in GCP.

What is the difference between the GCP V1 and V2 integration APIs?▼

V2 uses STS-based Workload Identity authentication with short-lived tokens and richer configuration options. V1 relies on long-lived service account JSON keys, is deprecated, and should not be used for new integrations.

How can I reduce Datadog metric costs from GCP monitoring?▼

Disable unused metric namespaces, apply metric-level filters such as excluding per-region metrics, and use monitored resource configs to limit collection to labeled resources like env:production GCE instances.

Why does my GCP integration fail to authenticate?▼

Authentication failures usually mean Workload Identity is not configured. Verify the Datadog delegate account exists, the service account is in your GCP project, the Workload Identity binding is correct, and required IAM roles are granted.

Related Skills

Explore More Software Engineering Skills→
sitharaj88sitharaj88
1

gcp-iam

Generate least-privilege GCP IAM policies, roles, and service accounts.

Community
Advanced
alexmaruccialexmarucci

security-posture-management

Manage cloud security posture via Datadog CSPM, Vulnerability Management, and Security Findings APIs.

Community
Advanced
balsm-healthbalsm-health
2

implementing-cloud-security-posture-management

Automate continuous security posture monitoring across AWS, Azure, and GCP.

Official
Advanced
cockroachdbcockroachdb
3

configuring-log-export

Configure CockroachDB Cloud log and metric export to external monitoring services.

Official
Advanced