AWS mediaconvert medium security documentation change

Service: mediaconvert · 2025-06-28 · Security-related medium

File: mediaconvert/latest/ug/mediaconvert_error_codes.md

Summary

Added new HTTP input error codes 3452-3456 and 3458 with descriptions and resolution steps for URL formatting, redirect handling, DNS resolution, SSL/TLS errors, server address validation, and ranged-GET requirements

Security assessment

Error code 3453 explicitly states redirects are blocked for security reasons. Error code 3455 addresses SSL/TLS certificate validation which prevents MITM attacks. These changes document security-related error conditions and secure configuration requirements.

Diff

diff --git a/mediaconvert/latest/ug/mediaconvert_error_codes.md b/mediaconvert/latest/ug/mediaconvert_error_codes.md
index 4dacd5822..48420cb79 100644
--- a//mediaconvert/latest/ug/mediaconvert_error_codes.md
+++ b//mediaconvert/latest/ug/mediaconvert_error_codes.md
@@ -16 +16 @@ The following provides detailed information about error codes and messages that
-1010 | 1020 | 1021 | 1022 | 1030 | 1040 | 1041 | 1042 | 1043 | 1056 | 1060 | 1075 | 1076 | 1080 | 1091 | 1092 | 1093 | 1401 | 1404 | 1432 | 1433 | 1434 | 1515 | 1517 | 1522 | 1550 | 1601 | 1602 | 1603 | 1700 | 1999 | 3400 | 3401 | 3403 | 3404 | 3408 | 3450 | 3451 | 3457 | 3999
+1010 | 1020 | 1021 | 1022 | 1030 | 1040 | 1041 | 1042 | 1043 | 1056 | 1060 | 1075 | 1076 | 1080 | 1091 | 1092 | 1093 | 1401 | 1404 | 1432 | 1433 | 1434 | 1515 | 1517 | 1522 | 1550 | 1601 | 1602 | 1603 | 1700 | 1999 | 3400 | 3401 | 3403 | 3404 | 3408 | 3450 | 3451 | 3452 | 3453 | 3454 | 3455 | 3456 | 3457 | 3458 | 3999
@@ -1143,0 +1144,158 @@ Example error messages:
+3452 | Malformed URL with spaces error**
+    
+
+The URL you specified for your HTTP input is malformed.
+
+What this means: The HTTP URL you provided doesn't follow proper URL formatting standards and cannot be processed by MediaConvert.
+
+To resolve this issue:
+
+  * Verify that your URL is properly formatted with the correct protocol (http:// or https://).
+
+  * Ensure the URL doesn't contain spaces or other unsupported characters.
+
+  * Test the URL in a web browser to verify it's accessible.
+
+
+
+
+For more information about HTTP input requirements, see [HTTP input requirements](./http-input-requirements.html).
+
+Example error messages:
+
+**`3452: URL '_http://example.com/invalid url with spaces_ ' is malformed.`**
+
+**
+
+3453 | HTTP redirect error**
+    
+
+MediaConvert can't follow redirects when accessing your HTTP input.
+
+What this means: Your HTTP input URL redirects to another location, but MediaConvert doesn't support following HTTP redirects for security and reliability reasons.
+
+To resolve this issue:
+
+  * Use the final destination URL directly instead of a redirecting URL.
+
+  * Contact the server administrator to get the direct URL to your content.
+
+  * Consider downloading the file and uploading it to Amazon S3 instead.
+
+
+
+
+For more information about HTTP input requirements, see [HTTP input requirements](./http-input-requirements.html).
+
+Example error messages:
+
+**`3453: MediaConvert can't follow redirects when accessing your input:_http://example.com/redirect-url_. For information about HTTP(S) input requirements, see https://docs.aws.amazon.com/mediaconvert/latest/ug/upload-input-files.html#http-input-requirements.`**
+
+**
+
+3454 | DNS resolution error**
+    
+
+Name resolution failed when accessing your HTTP input.
+
+What this means: MediaConvert cannot resolve the domain name in your HTTP URL to an IP address. The domain might not exist, be temporarily unavailable, or have DNS configuration issues.
+
+To resolve this issue:
+
+  * Verify that the domain name in your URL is correct and exists.
+
+  * Check if the domain is accessible from other locations.
+
+  * Wait and retry if this is a temporary DNS issue.
+
+  * Consider using an IP address instead of a domain name if possible.
+
+
+
+
+For more information about HTTP input requirements, see [HTTP input requirements](./http-input-requirements.html).
+
+Example error messages:
+
+**`3454: Name resolution failed when accessing: '_http://nonexistent-domain.example.com/video.mp4_ '.`**
+
+**
+
+3455 | SSL/TLS error**
+    
+
+SSL failures encountered when accessing your HTTPS input.
+
+What this means: MediaConvert encountered SSL/TLS certificate or connection issues when trying to access your HTTPS input. This could be due to expired certificates, certificate chain issues, or unsupported SSL configurations.
+
+To resolve this issue:
+
+  * Verify that the SSL certificate for your HTTPS server is valid and not expired.
+
+  * Check that the certificate chain is properly configured.
+
+  * Ensure the server supports modern SSL/TLS protocols.
+
+
+
+
+For more information about HTTPS input requirements, see [HTTP input requirements](./http-input-requirements.html).
+
+Example error messages:
+
+**`3455: SSL failures encountered when accessing: '_https://example.com/video.mp4_ '.`**
+
+**
+
+3456 | Invalid HTTP server address**
+    
+
+The HTTP server address for your input URL is invalid.
+
+What this means: The server address portion of your HTTP URL contains invalid characters or formatting that prevents MediaConvert from connecting to it.
+
+To resolve this issue:
+
+  * Verify that the server address in your URL is correctly formatted.
+
+  * Check for any invalid characters in the hostname or IP address.
+
+  * Ensure the port number (if specified) is valid.
+
+
+
+
+For more information about HTTP input requirements, see [HTTP input requirements](./http-input-requirements.html).
+
+Example error messages:
+
+**`3456: HTTP server address '_invalid-server-address_ ' for URL '_http://invalid-server-address/video.mp4_ ' is invalid.`**
+
+**
+
+3458 | Ranged-GET not supported**
+    
+
+The URL you provided doesn't support ranged-GET requests.
+
+What this means: MediaConvert requires HTTP servers to support partial content requests (HTTP Range requests), but your server doesn't support this feature.
+
+To resolve this issue:
+
+  * Configure your HTTP server to support ranged-GET requests.
+
+  * Download the file and upload it to Amazon S3 instead.
+
+  * Use a different HTTP server that supports ranged-GET requests.
+
+
+
+
+For more information about HTTP input requirements, see [HTTP input requirements](./http-input-requirements.html).
+
+Example error messages:
+
+**`3458: The URL you provided doesn't support ranged-GET requests: '_http://example.com/video.mp4_ '.`**
+
+**
+