API Gateway does not have X-Ray tracing enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_73
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

When an API Gateway stage has the active tracing feature enabled, Amazon API Gateway service automatically samples API invocation requests based on the sampling algorithm specified by AWS X-Ray. With tracing enabled X-Ray can provide an end-to-end view of an entire HTTP request. You can use this to analyze latencies in APIs and their backend services.

How to Fix

Resource: AWS::ApiGateway::Stage

• Arguments: Properties.TracingEnabled [source,go]

---

{ "Resources: MyStage: Type: AWS::ApiGateway::Stage Properties: ...

• TracingEnabled: true ...",

}