Intermediate LevelWeb Security & Cyber Defense
How do you redact PII (Personally Identifiable Information) from distributed tracing telemetry?
❓ Interview Prompt: Explain OpenTelemetry PII redaction, telemetry attribute filtering, `attributes/insert` / `attributes/hash` processors, and log privacy.
Distributed tracing collectors capture HTTP headers, query parameters, and span attributes that may accidentally contain user PII (passwords, credit cards, auth tokens):
OpenTelemetry Collector Redaction:
Use the 'transform' or 'attributes' processor to strip or hash sensitive keys before telemetry is exported to third-party APMs (Datadog, Jaeger):
Code Implementation Example
yaml
# OpenTelemetry Collector PII Redaction Processor Config
processors:
attributes:
actions:
- key: http.request.header.authorization
action: delete
- key: db.statement
action: hash💡OpenTelemetry Collector attribute processor scrubbing Authorization headers and hashing SQL statements.
🎯 Interview Key Takeaway
Configure OpenTelemetry processors to redact or hash PII and credentials from distributed traces before exporting to telemetry APMs.
#OpenTelemetry#PII Redaction#Observability#Intermediate
Back to all Web Security & Cyber Defense Questions→