AWS solutions documentation change
Summary
Added Amazon ElastiCache to architecture components, modified AWS WAF role classification, updated log rotation details, and added ElastiCache section
Security assessment
While adding ElastiCache improves performance through caching, there's no explicit security configuration mentioned. The AWS WAF role change from 'Core' to 'Supporting' is a classification adjustment without security implications. Log rotation frequency update is operational rather than security-focused.
Diff
diff --git a/solutions/latest/prebid-server-deployment-on-aws/architecture-details.md b/solutions/latest/prebid-server-deployment-on-aws/architecture-details.md index 9ccd0249f..498e0ee32 100644 --- a//solutions/latest/prebid-server-deployment-on-aws/architecture-details.md +++ b//solutions/latest/prebid-server-deployment-on-aws/architecture-details.md @@ -5 +5 @@ -AWS services in this solutionCloudFront distributionAWS WAFApplication Load Balancer (ALB)Amazon VPCAmazon ECSPrebid Server containerAmazon EFSDataSync (EFS to S3)Glue ETL (Metrics processing)AWS Glue Data CatalogAmazon CloudWatch +AWS services in this solutionCloudFront distributionAWS WAFApplication Load Balancer (ALB)Amazon VPCAmazon ECSPrebid Server containerAmazon EFSDataSync (EFS to S3)Glue ETL (Metrics processing)AWS Glue Data CatalogAmazon CloudWatchAmazon ElastiCache @@ -28 +28,2 @@ AWS service | Description -[AWS WAF](https://aws.amazon.com/waf/) | **Core**. Provide layer of security around Amazon CloudFront. +[Amazon ElastiCache](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/WhatIs.html) | **Core**. high-performance, scalable, and cost-effective caching solution. +[AWS WAF](https://aws.amazon.com/waf/) | **Supporting**. Provide layer of security around Amazon CloudFront. @@ -67 +68 @@ The EFS file system is mounted and shared among all container instances in the E -DataSync is configurated to periodically move rotated log files from each Prebid Server container’s EFS location to an equivalent location in the `DataSyncLogsBucket` S3 bucket. After each file is copied to S3 and verified, it is removed from the EFS file system through a clean-up Lambda function. Essentially, only actively written log files are retained on the EFS file system until the Prebid Server process closes it, rotates it, and starts a new file. Rotated log files are migrated with DataSync. Runtime logs are rotated every 24 hours or when reaching 100 MB. Metrics logs are rotated every one hour or when reaching 100 MB. +DataSync is configurated to periodically move rotated log files from each Prebid Server container’s EFS location to an equivalent location in the `DataSyncLogsBucket` S3 bucket. After each file is copied to S3 and verified, it is removed from the EFS file system through a clean-up Lambda function. Essentially, only actively written log files are retained on the EFS file system until the Prebid Server process closes it, rotates it, and starts a new file. Rotated log files are migrated with DataSync. Runtime logs are rotated every 24 hours or when reaching 100 MB. Metrics and analytics logs are rotated every one hour or when reaching 100 MB. @@ -80,0 +82,4 @@ CloudWatch alarms monitor specific metrics in real-time and proactively notify A +## Amazon ElastiCache + +ElastiCache offers serverless caching, which simplifies adding and operating a cache for your application. This solution uses ElastiCache for providing caching implementation in accordance with the [Prebid Cache](https://docs.prebid.org/prebid-server/features/pbs-caching.html). +