Per a session I had with datadog support to connect to a TLS endpoint you need to define the optional variable tls_ca_cert