AWS ivs documentation change
Summary
Added S3 bucket security requirements for server-side composition including encryption (SSE-S3) and object ownership controls
Security assessment
Documents security best practices for S3 bucket configuration but does not indicate remediation of a specific vulnerability. The changes emphasize proper encryption and access control configuration to maintain data security.
Diff
diff --git a/ivs/latest/RealTimeUserGuide/ssc-getting-started.md b/ivs/latest/RealTimeUserGuide/ssc-getting-started.md index 88601e9e2..56f631fef 100644 --- a//ivs/latest/RealTimeUserGuide/ssc-getting-started.md +++ b//ivs/latest/RealTimeUserGuide/ssc-getting-started.md @@ -5 +5 @@ -PrerequisitesCLI Instructions +PrerequisitesAPI InstructionsCLI Instructions @@ -13 +13,18 @@ This document takes you through the steps involved in getting started with IVS s -To use server-side composition, you must have a stage with active publishers and use an IVS channel and/or an S3 bucket as the composition destination. Below, we describe one possible workflow that uses EventBridge events to start a composition that broadcasts the stage to an IVS channel when a participant publishes. Alternatively, you can start and stop compositions based on your own app logic. See [Composite Recording](./rt-composite-recording.html) for another example which showcases the use of server-side composition to record a stage directly to an S3 bucket. +To use server-side composition, you must have a stage with active publishers and use an IVS channel and/or an S3 bucket as the composition destination. + +To create an S3 bucket, see the S3 documentation on [how to create buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-bucket.html). The S3 bucket must be created in the same AWS region as the IVS stage. + +**Important** : If you use an existing S3 bucket: + + * The **Object Ownership** setting must be **Bucket owner enforced** or **Bucket owner preferred**. + + * The **Default Encryption** setting must be **Server-side encryption with Amazon S3 managed keys (SSE-S3)**. + + + + +For details, see the S3 documentation on [controlling ownership of objects](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html) and [protecting data with encryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryption.html). + +## API Instructions + +Below, we describe one possible workflow that uses EventBridge events to start a composition that broadcasts the stage to an IVS channel when a participant publishes. Alternatively, you can start and stop compositions based on your own app logic. See [Composite Recording](./rt-composite-recording.html) for another example which showcases the use of server-side composition to record a stage directly to an S3 bucket.