update: still digging into the root cause, but somehow our new "feature" that was supposed to be sandboxed managed to escape and take down our entire api gateway. because who needs logging or monitoring, right?