How can we mask data in analytics?

[#1]

Hi All,

We know that APIGEE captures request URIs for analytics purpose but this could be a problem for the APIs which contain some sort of token or some id as part of path parameter (for example AccountId in following URL.

https://apis-bank-test.apigee.net/ais/open-banking/v1.0/accounts/{AccountId}

How can we prevent these values being captured in analytics? Has anyone else encountered the same problem?

[divyaachan]

@Vipul Agarwal

We currently do not have any feature out of the box that would mask this data in analytics.

Your sensitive data is in the request URL itself which the MP populates in different flow variables proxy.pathsuffix and requesturi) for AX , some of which cannot be overriden in the proxy.
Moreover, the request will also be logged in our logs as well.

So, the best practice would be to not put sensitive information in the request URL and change your API implementation so that the sensitive data is not exposed.