SAM API must have X-Ray tracing enabled

Property
Language
Severity
Service	sam
Provider	AWS

Description#

The SAM API is deployed without AWS X-Ray tracing enabled, which prevents capturing end-to-end request data for API Gateway calls. This limits visibility into API execution and hinders effective debugging and monitoring.

Impact#

Without X-Ray tracing, it becomes challenging to trace and diagnose issues across distributed components, making it harder to investigate performance bottlenecks or errors. This lack of insight can delay incident response and obscure the root cause of operational or security issues in production APIs.

Resolution#

Enable tracing