tech-log-backend/docs/runbooks/management-actuator-forbidden.md

title, category, error_codes, severity, owner, last_updated, status

title	category	error_codes	severity	owner	last_updated	status
Runbook — ACTUATOR_FORBIDDEN (Actuator 접근 거부)	AUTHZ	ACTUATOR_FORBIDDEN	P2	oncall	2026-06-15	stub

Runbook: ACTUATOR_FORBIDDEN (runbook://management/actuator-forbidden)

Symptoms

• HTTP 403 with error.code=ACTUATOR_FORBIDDEN
• Attempt to access restricted actuator endpoint (env/configprops/heapdump/shutdown)

Diagnosis

• Identify which actuator endpoint was accessed
• Check caller identity (internal tooling vs external)

Action

• Verify management port is not exposed externally
• For heapdump/threaddump: follow break-glass runbook procedure

Escalation

• P1 if forbidden actuator access appears to be external attack

---

Stub: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)