AWS AWSCloudFormation documentation change
Summary
Minor wording improvements and clarifications for encryption context, source descriptions, port documentation, and CIDR block requirements
Security assessment
Changes are clarifications of existing functionality without addressing vulnerabilities or introducing new security controls. CIDR block wording change from 'are allowed' to 'should be allowed' is advisory but not a security fix.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.md b/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.md index d8317ab54..943840fc9 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.md @@ -88 +88 @@ To declare this entity in your AWS CloudFormation template, use the following sy -The type of encryption that is used on the content ingested from the source. +The type of encryption that is used on the content ingested from this source. @@ -99 +99 @@ _Required_ : No -A description of the source. This description is not visible outside of the current AWS account. +A description for the source. This value is not used or seen outside of the current MediaConnect account. @@ -110 +110 @@ _Required_ : No -The ARN of the entitlement that allows you to subscribe to content that comes from another AWS account. The entitlement is set by the content originator and the ARN is generated as part of the originator’s flow. +The ARN of the entitlement that allows you to subscribe to content that comes from another AWS account. The entitlement is set by the content originator and the ARN is generated as part of the originator's flow. @@ -132 +132 @@ _Required_ : No -The IP address that the flow listens on for incoming content. +The IP address that the flow will be listening on for incoming content. @@ -143 +143 @@ _Required_ : No -The port that the flow listens on for incoming content. If the protocol of the source is Zixi, the port must be set to 2088. +The port that the flow will be listening on for incoming content. @@ -187 +187 @@ _Required_ : No -The media stream that is associated with the source, and the parameters for that association. +The media streams that are associated with the source, and the parameters for those associations. @@ -314 +314 @@ _Required_ : No -The name of the VPC interface that the source content comes from. +The name of the VPC interface that is used for this source. @@ -325 +325 @@ _Required_ : No -The range of IP addresses that are allowed to contribute content to your source. Format the IP addresses as a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16. +The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16.