Serverless API X-Ray Tracing Disabled
- Query id: 434945e5-4dfd-41b1-aba1-47075ccd9265
- Query name: Serverless API X-Ray Tracing Disabled
- Platform: ServerlessFW
- Severity: Medium
- Category: Observability
- CWE: 778
- URL: Github
Description¶
Serverless API Gateway should have X-Ray Tracing enabled
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - yml file
service: my-service
frameworkVersion: '2'
provider:
name: aws
apiGateway:
minimumCompressionSize: 1024
tracing:
apiGateway: false
Positive test num. 2 - yml file
service: my-service
frameworkVersion: '2'
provider:
name: aws
apiGateway:
minimumCompressionSize: 1024
tracing: