Hiding sensitive data in assign message policy in trace

Google Cloud Apigee
1

I have stored key and secret in kvm and used kvm policy to retrieve the values and assigned to private.key. Now I set the retrieved private.key value as form param using assign message policy as below. When I trace it, i can see the form param values. How to hide these values from trave when set as formparam in ApigeeX

{private.key}

2

How do you see them? I suppose in the display of variables?

you can use the data masking feature in Edge to obscure variables by name in Trace. Eg request.formparam.key. Check the docs. You need to use the API to set the data mask. You can do it on a per proxy basis or at environment scope.