IT41031: FOR API GATEWAY, REDACTED DATA IN ASSEMBLY LOG ARE NOT MASKED FOR THE ERROR FLOW WHILE NO "ROOT" PROPERTY IS DEFINED

APAR status

• Closed as program error.

Error description

• For API Gateway, redacted data in assembly log are not masked
  for the error flow while no "root" property is defined.
  
  
  For example, when API is configured with the following:
       - log:
           version: 2.0.0
           title: log
           mode: gather-only
       - redact:
           version: 2.0.0
           title: redact
           redactions:
             - action: redact
               path: log.request_body.a
             - action: redact
               path: log.response_body.b
  
  In error case (for example, when there is an Invoke policy at
  the front that the response from the backend server is HTTP
  40X), the data for request_body and response_body are not
  obfuscates with "*"s in APIC Analytics.
  

Local fix

• For the redact policy, define a value in "root"
  

Problem summary

• For API Gateway, redacted data in assembly log are not masked
  for the error flow while no "root" property is definted.
  

Problem conclusion

• Fix is available in 10.5.0.1
  For a list of the latest fix packs available, please see:
  https://www.ibm.com/support/pages/node/83105
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels