Blog
Structured logging at API gateways: redaction, sampling, and correlation IDs
Logs help debug CORS and auth issues but can leak PII—field-level redaction is mandatory.
1 min read
observabilityloggingapi-gateway
Safe fields
Log origin hostnames but avoid full cookie values; hash sensitive identifiers when you need cardinality.
Sample high-volume 200 responses in production while keeping full fidelity for 4xx and 5xx.
Dashboards
Chart preflight share of traffic to catch misconfigured clients early.
Track CORS denial reasons with discrete labels rather than free-text error messages only.