AWS mediatailor documentation change
Summary
Updated permission requirements from 'top-level manifests' to 'multivariant playlists' in S3 authentication context.
Security assessment
Improves documentation accuracy regarding required resource permissions but doesn't address security vulnerabilities or add security-specific guidance. Maintains existing security posture through clearer documentation.
Diff
diff --git a/mediatailor/latest/ug/channel-assembly-access-configuration-sigv4.md b/mediatailor/latest/ug/channel-assembly-access-configuration-sigv4.md index 72388e27f..900af95e1 100644 --- a//mediatailor/latest/ug/channel-assembly-access-configuration-sigv4.md +++ b//mediatailor/latest/ug/channel-assembly-access-configuration-sigv4.md @@ -23 +23 @@ If you activate SigV4 for Amazon S3 authentication for your source location, you - * The **mediatailor.amazonaws.com** service principal must have permissions to read all top-level manifests referenced by the VOD source package configurations. + * The **mediatailor.amazonaws.com** service principal must have permissions to read all multivariant playlists referenced by the VOD source package configurations. @@ -25 +25 @@ If you activate SigV4 for Amazon S3 authentication for your source location, you - * The caller of the API must have **s3:GetObject** IAM permissions to read all top-level manifests referenced by your MediaTailor VOD source package configurations. + * The caller of the API must have **s3:GetObject** IAM permissions to read all multivariant playlists referenced by your MediaTailor VOD source package configurations.