AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-03-26 · Documentation low

File: AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowsource.md

Summary

Updated documentation for FlowSource resource with formatting fixes, encryption type clarification, source description scope, and CIDR block wording improvements

Security assessment

The change specifies allowable encryption types (static-key) and clarifies security-related configurations like IP range restrictions, but does not address a specific security vulnerability

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowsource.md b/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowsource.md
index e57449f1d..5e52aafdf 100644
--- a/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowsource.md
+++ b/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowsource.md
@@ -7 +7 @@ SyntaxPropertiesReturn values
-The AWS::MediaConnect::FlowSource resource is usedt to add additional sources to an existing flow. Adding an additional source requires Failover to be enabled. When you enable Failover, the additional source must use the same protocol as the existing source. A source is the external video content that includes configuration information (encryption and source type) and a network address. Each flow has at least one source. A standard source comes from a source other than another AWS Elemental MediaConnect flow, such as an on-premises encoder.
+The `AWS::MediaConnect::FlowSource` resource is usedt to add additional sources to an existing flow. Adding an additional source requires Failover to be enabled. When you enable Failover, the additional source must use the same protocol as the existing source. A source is the external video content that includes configuration information (encryption and source type) and a network address. Each flow has at least one source. A standard source comes from a source other than another AWS Elemental MediaConnect flow, such as an on-premises encoder.
@@ -73 +73 @@ To declare this entity in your AWS CloudFormation template, use the following sy
-The type of encryption that is used on the content ingested from the source.
+The type of encryption that is used on the content ingested from this source. Allowable encryption types: static-key.
@@ -84 +84 @@ _Required_ : No
-A description of the source. This description is not visible outside of the current AWS account.
+A description for the source. This value is not used or seen outside of the current MediaConnect account.
@@ -95 +95 @@ _Required_ : Yes
-The ARN of the entitlement that allows you to subscribe to the flow. The entitlement is set by the content originator, and the ARN is generated as part of the originator's flow.
+The ARN of the entitlement that allows you to subscribe to this flow. The entitlement is set by the flow originator, and the ARN is generated as part of the originator's flow.
@@ -117 +117 @@ _Required_ : No
-The source configuration for cloud flows receiving a stream from a bridge.
+The bridge's source.
@@ -139 +139 @@ _Required_ : No
-The maximum bitrate for RIST, RTP, and RTP-FEC streams.
+The smoothing max bitrate (in bps) for RIST, RTP, and RTP-FEC streams.
@@ -253 +253 @@ _Required_ : No
-The name of the VPC interface that you want to send your output to.
+The name of the VPC interface to use for this source.
@@ -264 +264 @@ _Required_ : No
-The range of IP addresses that are allowed to contribute content to your source. Format the IP addresses as a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16.
+The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16.