Modernize Datadog API authentication with scoped credentials

Datadog is modernizing its API authentication model to better accommodate the diverse and complex access patterns of contemporary infrastructures, which now include CI/CD pipelines, Terraform workflows, and AI agents operating across teams. The new model introduces four purpose-specific authentication approaches: Personal Access Tokens (PATs) for developer workflows, Service Access Tokens (SATs) for automation and non-human workloads, workload identity federation for cloud-native workloads, and OAuth clients for delegated and temporary AI agent access. This revamped system replaces the dual-key authentication model, providing scoped, identity-aware authentication that enhances security, compliance, and audit attribution by offering tailored credential options based on the specific user or system requirements. While the existing application keys will remain operational until after Q3 2026, Datadog encourages users to transition to the new authentication methods to leverage improved features such as better scoping, clearer identity, and proper time-to-live support.