Skip to content

docs(api-shield): surface discovery requirements inline including Workers exclusion#32044

Open
zeinjaber wants to merge 1 commit into
productionfrom
docs/DEE-3708-api-discovery-requirements-workers-exclusion
Open

docs(api-shield): surface discovery requirements inline including Workers exclusion#32044
zeinjaber wants to merge 1 commit into
productionfrom
docs/DEE-3708-api-discovery-requirements-workers-exclusion

Conversation

@zeinjaber

Copy link
Copy Markdown
Collaborator

What

Expand the Requirements section on the API Shield Discovery page to list the three discovery conditions inline:

  • 2xx response required
  • Requests from Cloudflare Workers are excluded
  • 500 requests within a continuous 10-day period

Also adds a note that the API Shield subscription must be active at both account and zone level.

Why

TSEs and customers using the Cloudflare traffic simulator or Worker-based test harnesses repeatedly hit the Workers exclusion condition without knowing it exists. The previous Requirements section only linked to the WAM discovery requirements page without surfacing the constraints inline — customers had to follow the link and find the relevant section.

Chat signal: https://chat.google.com/room/AAAAj1kIEx8/U_m7OWjLO-Q (Jul 7–8 2026, API Shield room) — SE reported traffic simulator not discovering endpoints; engineer responded by quoting all three requirements verbatim.

The conditions are already documented on the WAM side (Discovery requirements). This change surfaces them on the API Shield page so customers don't need to follow a cross-product link to understand why their endpoints aren't appearing.

Files changed

  • src/content/docs/api-shield/security/api-discovery.mdx — Requirements section expanded (+8 lines)

How to verify

Read the Requirements section at /api-shield/security/api-discovery/ — three bullet conditions and the dual subscription note should appear before the cross-link to WAM.

Closes DEE-3708

@cloudflare-docs-bot

cloudflare-docs-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Review

✅ No issues found in commit 8cb1dba.

Code Review

This code review is in beta and may not always be helpful — use your judgment.

No code review issues found.

Conventions

No convention issues found.

Style Guide Review

No style-guide issues found.

Commands

Only codeowners can run commands. Post a comment with the command to trigger it.

Command Description
/review Runs a review now. Incremental if a prior review exists, full if not.
/full-review Re-reviews the entire PR diff from scratch, ignoring incremental history. Useful after a rebase, when you want a fresh review, or if the bot gets out of sync and reports issues that no longer exist.
/ignore-review-limit Permanently lifts the 2-review automatic limit for this PR. Future pushes will trigger reviews as normal.
/disable-auto-review Stops automatic reviews from triggering on future pushes to this PR. Codeowners can still run /review or /full-review manually.

@github-actions

Copy link
Copy Markdown
Contributor

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern Owners
/src/content/docs/api-shield/ @patriciasantaana, @cloudflare/appsec-reviewers, @elithrar, @xmflsct, @danielegm, @cloudflare/product-owners

@ALIABDULRAHMANALREHAWI

ALIABDULRAHMANALREHAWI commented Jul 13, 2026 via email

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants