Skip to main content

Troubleshooting

Quick Diagnosis​

# Check container status
docker ps | grep encryption

# Check recent logs
docker logs encryption-patterns --tail 50 2>&1 | grep -i error

# Test multi-field encryption
curl -X POST http://localhost:8080/transactions \
  -H "Content-Type: application/json" \
  -d '{"card": "4532123456789010", "ssn": "123-45-6789", "email": "[email protected]"}'

Common Issues​

Wrong key used for field type​

Cause: Key selection logic not matching field

# Check which keys are being used
docker logs encryption-patterns --tail 20 2>&1 | grep key_

Fix: Verify key selection in mapping:

See the complete configuration for the maintained encryption mapping and its ciphertext fields.

Key rotation failing​

Cause: Old key not available for re-encryption

Fix: Retain required key versions under the deployment's access and retention policy:

See the complete configuration for the maintained encryption mapping and its ciphertext fields.

Analytics fields not preserved​

Cause: Derived fields deleted during encryption

Fix: Extract analytics-safe data before encrypting:

See the complete configuration for the maintained encryption mapping and its ciphertext fields.

Transformation audit gaps​

Cause: Missing encryption metadata for audit trail

Fix: Add encryption metadata to every encrypted field:

Partial snippet
root.card_encrypted = {
  "ciphertext": encrypted_value,
  "key_id": "${KEY_ID}",
  "encrypted_at": now(),
  "algorithm": "AES-256-GCM"
}

Still stuck?​

  1. Add debug logging: logger: {level: DEBUG}
  2. Check the Complete Pipeline for reference config
  3. Review Enforce Schema for validation patterns