fix: RD-13884-Node-Tracer-can-change-event-body-of-a-Lambda-function (#…

…522)

* fix: node tracer can change event body of a lambda function

package.json

@@ -27,6 +27,7 @@
     "@lumigo/node-core": "1.16.0",
     "agentkeepalive": "^4.1.4",
     "axios": "1.7.7",
+    "rfdc": "^1.4.1",
     "shimmer": "1.2.1",
     "utf8": "^3.0.0"
   },

src/parsers/eventParser.ts

@@ -12,6 +12,7 @@ import type {
 
 import * as logger from '../logger';
 import { getEnvVarAsList, isScrubKnownServicesOn } from '../utils';
+const clone = require('rfdc')();
 
 const API_GW_KEYS_ORDER = getEnvVarAsList('LUMIGO_API_GW_KEYS_ORDER', [
   'version',
@@ -234,7 +235,8 @@ export const parseCloudfrontEvent = (event: CloudFrontRequestEvent) => {
   return newCloudfrontEvent;
 };
 
-export const parseEvent = (event) => {
+export const parseEvent = (awsEvent) => {
+  const event = clone(awsEvent);
   if (isApiGwEvent(event)) {
     return parseApiGwEvent(event);
   }

src/spans/awsSpan.test.js

@@ -8,6 +8,7 @@ import {
   EXECUTION_TAGS_KEY,
   getEventEntitySize,
   LUMIGO_SECRET_MASKING_ALL_MAGIC,
+  LUMIGO_SECRET_MASKING_EXACT_PATH,
   LUMIGO_SECRET_MASKING_REGEX_ENVIRONMENT,
   LUMIGO_SECRET_MASKING_REGEX_HTTP_REQUEST_BODIES,
   LUMIGO_SECRET_MASKING_REGEX_HTTP_REQUEST_HEADERS,
@@ -466,6 +467,29 @@ describe('awsSpan', () => {
     expect(JSON.parse(startSpan.event).Records[0].s3.object.key).toEqual('value');
   });
 
+  test('Lambda invoked by Lambda -> shouldnt scrub initial event', () => {
+    const { context } = TracerGlobals.getHandlerInputs();
+    const event = {
+      string: 'value',
+      object: {
+        string: 'value',
+        object: {
+          string: 'value',
+        },
+      },
+    };
+    process.env[LUMIGO_SECRET_MASKING_EXACT_PATH] =
+      '["string","object.string", "object.object.string"]';
+    TracerGlobals.setHandlerInputs({ event, context });
+    const startSpan = awsSpan.getFunctionSpan(event, context);
+
+    expect(event.string).toEqual('value');
+    expect(event.object.string).toEqual('value');
+    expect(event.object.object.string).toEqual('value');
+    expect(JSON.parse(startSpan.event).string).toEqual('****');
+    expect(JSON.parse(startSpan.event).object.object.string).toEqual('****');
+  });
+
   test('Lambda invoked by DDB stream -> shouldnt scrub known fields', () => {
     const { context } = TracerGlobals.getHandlerInputs();
     const event = {