AWS had a similar oopsie with their Load Balancer: introduced a new flag to strip some headers, enabled it by default for all existing public ALBs, and the effe

AWS had a similar oopsie with their Load Balancer: introduced a new flag to strip some headers, enabled it by default for all existing public ALBs, and the effect was that all custom headers with an underscore in the name (“x-access_token”) started getting stripped. Took down a few APIs https://forums.aws.amazon.com/thread.jspa?messageID=923182 https://forums.aws.amazon.com/thread.jspa?messageID=923182