Redaction policy in Oracle API Cloud Service

Oracle API CS offers an inbuilt feature to limit or remove the certain fields and headers which is the part of request and response payload. This policy is called Redaction policy. The policy can be used in both request and response pipeline.

In the request pipeline, headers, queries and payload content can be controlled before the backend service is invoked. Similarly, in the response pipeline, headers, queries and payload content can be controlled before the response sent to the consumer.

Let’s see how to apply the redaction policy in request and response pipeline separately.

To complete this article, we’ll assume one service is already configured in the Oracle API CS. If not, kindly follow the blog

Let suppose, one API configured is in the API CS with the below request and response:

Parameter / Header	Description
empi	This is of query parameter of string type
key	This is custom request header of string type

• Click the API implementation tab of the API

• Move to the Request pipeline
• In the Available Policies region, expand Interface Management, hover over Redaction, and then click Apply

• Enter below information and click the Next button
• Your Policy Name: Enter the policy name of your choice
• Comments: Enter comment
• Place after the following policy: Select the policy after which this policy is placed

• Select Exclude from the Headers section and enter key in the Header name then click Apply button

• Click Save to save the changes and redeploy the API
• Hit the API, pass custom header(key) and see the response, key value will be blank in response as request key header is directly mapped with the key of the response payload