I'm currently testing a web application hosted on AWS. In the response headers, I've noticed various Amazon-related headers, I've never really seen before.

The headers include:

x-amzn-RequestId: <UUID>
x-amzn-ErrorType: <STRING>
x-amz-apigw-id: <BASE64-ENCODED-VALUE>
X-Amzn-Trace-Id: <STRING>:<VALUE>;
x-amzn-Remapped-Date: <DATETIME>

I found very little to no context on these, except some blogs explaining how to trace requests/debug with these and I have no experience with developing web applications on AWS.

I doubt that these are crucial for the application and considering they can be used for debugging purposes:

Could these response headers be classified as being "information disclosure"?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.