Description

No authentication was detected for an administrative endpoint, potentially allowing unauthorized users to access sensitive functionality.

Rationale

This finding detects when an endpoint:

• Is identified as a potential administrative route
• Datadog detected no authentication mechanism.

Remediation

• Validate that the code isn’t expecting the user to be authenticated to have access to this resource (AuthN). If this API is, in fact, authenticated, ensure your code is instrumented correctly. Datadog auto-instruments many event types. Review your instrumented business logic events.
• To improve authentication detection, you can configure custom authentication detection via the Endpoint Tagging Rules settings.