How do services like datadog / SigNoz etc. access customer resources in their AWS, Google, and / or Azure accounts?

Does anyone know how services like datadog, SigNoz, etc. are able to access customer resources in cloud providers? The only thing I’ve been able to find so far is this link in the AWS docs AWS IAM docs. I am just curious if Auth0 can do something like this.