Is there any AWS service that is able to log URL query string?

Question

Context: I have a use case that requires a hack to store very important data inside a query string.
I understand the security drawback of sending sensitive data with a query string so no need to illustrate that further.

I want to know how AWS treats URL query string when using HTTPS.
Is there any AWS service (API Gateway, CloudFront, Amplify, Lamda) that is able to logs or store any of those data in plain text?
What policy does AWS have in order to protect those data?

https://forums.aws.amazon.com/thread.jspa?messageID=690297&#690297
This is the only resource I found prior to this question

Answer

It all depends on how you are implementing the service.

If you come in through CloudFront, the logging is documented here:  
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/logging.html

If you come in through Application Load Balancer, the logging is document here:  
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html

If you come in through the Network Load Balancer, the logging is documented here:  
https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-access-logs.html

If you come in though a Classic Load Balancer, the logging is documented here:  
https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/access-log-collection.html

If you come in through an API Gateway, the logging is documented here:  
https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html

If you hit an Elastic IP on an instance, you will have to consult the documentation of the web server you are using.

Is there any AWS service that is able to log URL query string?

相關內容