35 lines
813 B
Markdown
35 lines
813 B
Markdown
---
|
|
title: Runbook — AUTHZ_TENANT_MISMATCH (테넌트 cross-access 시도)
|
|
category: AUTHZ
|
|
error_codes: [AUTHZ_TENANT_MISMATCH]
|
|
severity: P1
|
|
owner: oncall
|
|
last_updated: 2026-06-15
|
|
status: stub
|
|
---
|
|
|
|
# Runbook: AUTHZ_TENANT_MISMATCH (`runbook://authz/tenant-mismatch`)
|
|
|
|
## Symptoms
|
|
|
|
- HTTP 403 with `error.code=AUTHZ_TENANT_MISMATCH`
|
|
- `log_level=ERROR` — cross-tenant access attempt detected
|
|
|
|
## Diagnosis
|
|
|
|
- Extract `traceId`, check `X-Tenant-Id` vs token tenant claim
|
|
- Determine if this is misconfigured client or intentional attack
|
|
|
|
## Action
|
|
|
|
- Block repeat offenders at gateway level
|
|
- Alert security team for investigation
|
|
|
|
## Escalation
|
|
|
|
- P1 if confirmed malicious cross-tenant access attempt
|
|
|
|
---
|
|
|
|
> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)
|