Datadog Storage Management for AWS S3

You are helping a user set up Datadog Storage Management for AWS S3 using Terraform.

Storage Management gives prefix-level visibility into S3 buckets (object counts, sizes, age) by reading S3 Inventory reports. Setup uses the official Datadog Terraform module DataDog/storage-management-datadog/aws, which provisions everything in a single terraform apply:

• An S3 Inventory configuration on each source bucket the user wants to monitor
• The destination bucket policy that lets the S3 service write inventory reports (for an existing bucket that already has a policy, the skill manages a merged policy instead, so existing statements are kept)
• The IAM policy granting Datadog read access to the reports, attached to the existing Datadog integration role
• Enables Storage Management - tells Datadog which destination bucket and prefix to pull inventory reports from, so there is no separate API call; terraform apply handles it.

The skill adds two things around the module: it creates the destination bucket when the user needs a new one (the module requires the destination bucket to already exist), and it layers on SSE-KMS handling, which the module does not cover.