return security headers in api gateway response

bcgov / moh-phlat

Repository for the PHLAT registries data loading application

Apache License 2.0

2 stars 0 forks source link

return security headers in api gateway response #96

Closed Ashwani-cgi closed 4 months ago

Ashwani-cgi commented 4 months ago

ZAP scan tool is reporting missing security headers when calling APIs. This PR implement changes in terraform to set response parameters in API gateway to return these security headers in response and override if present already.

BCMOHAD-24391