API Gateway X-Ray Disabled
- Query id: 5813ef56-fa94-406a-b35d-977d4a56ff2b
- Query name: API Gateway X-Ray Disabled
- Platform: Terraform
- Severity: Low
- Category: Observability
- CWE: 778
- URL: Github
Description¶
API Gateway should have X-Ray Tracing enabled
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - tf file
resource "aws_api_gateway_stage" "positive1" {
stage_name = "prod"
rest_api_id = aws_api_gateway_rest_api.test.id
deployment_id = aws_api_gateway_deployment.test.id
xray_tracing_enabled = false
}
resource "aws_api_gateway_stage" "positive2" {
stage_name = "prod"
rest_api_id = aws_api_gateway_rest_api.test.id
deployment_id = aws_api_gateway_deployment.test.id
}