I'm currently testing a web application hosted on AWS. In the response headers, I've noticed various Amazon-related headers, I've never really seen before.
The headers include:
x-amzn-RequestId: <UUID> x-amzn-ErrorType: <STRING> x-amz-apigw-id: <BASE64-ENCODED-VALUE> X-Amz-Cf-Id: <BASE64-ENCODED-VALUE> X-Amzn-Trace-Id: <STRING>:<VALUE>; x-amzn-Remapped-Date: <DATETIME>
I found very little to no context on these, except some blogs explaining how to trace requests/debug with these and I have no experience with developing web applications on AWS.
I doubt that these are crucial for the application and considering they can be used for debugging purposes:
Could these response headers be classified as being "information disclosure"?