We’ve seen 403 spikes happen even when the edge was mostly fine but parts of the control plane were degraded. During incidents the dashboard, auth or analytics layers can fail independently from actual traffic handling.
If external checks from different networks still show normal response times, it’s usually more of a panel/API issue than a full outage.