In OkHttpClient.newCall, a HttpLoggingInterceptor is configured to filter out sensitive headers (Authorization and X-Api-Key) when logging. Should any other headers be filtered for Bedrock or Vertex? Should the list of headers to filter be pushed into each Backend implementation.
Vertex only add one header, which will already be filtered by the current scheme:
Bedrock signatures add four headers (capitalized as shown):
AuthorizationHostx-amz-content-sha256X-Amz-Date
Do any of these (other than the obvious Authorization) need to be filtered out?
In
OkHttpClient.newCall, aHttpLoggingInterceptoris configured to filter out sensitive headers (AuthorizationandX-Api-Key) when logging. Should any other headers be filtered for Bedrock or Vertex? Should the list of headers to filter be pushed into eachBackendimplementation.Vertex only add one header, which will already be filtered by the current scheme:
AuthorizationBedrock signatures add four headers (capitalized as shown):
AuthorizationHostx-amz-content-sha256X-Amz-DateDo any of these (other than the obvious
Authorization) need to be filtered out?