feat(appsec): enable api security

Author: florentinl

datadog_lambda/asm.py

@@ -195,6 +195,17 @@ def asm_start_response(
  ),
  )
 
+ if isinstance(response, dict) and "statusCode" in response:
+ body = response.get("body")
+ else:
+ body = response
+
+ core.dispatch(
+ # The matching listener is registered in ddtrace.appsec._handlers
+ "aws_lambda.parse_body",
+ (body,),
+ )
+
 
 def get_asm_blocked_response(
  event_source: _EventSource,

datadog_lambda/wrapper.py

@@ -318,6 +318,9 @@ def _after(self, event, context):
  if status_code:
  self.inferred_span.set_tag("http.status_code", status_code)
 
+ if self.trigger_tags and (route := self.trigger_tags.get("http.route")):
+ self.inferred_span.set_tag("http.route", route)
+
  if config.service:
  self.inferred_span.set_tag("peer.service", config.service)
 

tests/integration/snapshots/logs/async-metrics_python310.log

@@ -66,6 +66,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -613,6 +614,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",

tests/integration/snapshots/logs/async-metrics_python311.log

@@ -66,6 +66,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -613,6 +614,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",

tests/integration/snapshots/logs/async-metrics_python312.log

@@ -66,6 +66,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -613,6 +614,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",

tests/integration/snapshots/logs/async-metrics_python313.log

@@ -66,6 +66,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -613,6 +614,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",

tests/integration/snapshots/logs/async-metrics_python38.log

@@ -66,6 +66,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -613,6 +614,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",

tests/integration/snapshots/logs/async-metrics_python39.log

@@ -66,6 +66,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -613,6 +614,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",

tests/integration/snapshots/logs/sync-metrics_python310.log

@@ -46,6 +46,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -653,6 +654,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",

tests/integration/snapshots/logs/sync-metrics_python311.log

@@ -46,6 +46,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",
@@ -653,6 +654,7 @@ HTTP GET https://www.datadoghq.com/ Headers: ["Accept-Encoding:gzip, deflate","A
  "_inferred_span.synchronicity": "sync",
  "_inferred_span.tag_source": "self",
  "http.status_code": "200",
+ "http.route": "/httpapi/get",
  "peer.service": "integration-tests-python",
  "_dd.peer.service.source": "peer.service",
  "_dd.base_service": "integration-tests-python",