AWS cli low security documentation change
Summary
Added documentation for MSS encryption method (IsmEncryptionMethod) and CMAF DRM metadata exclusion (CmafExcludeSegmentDrmMetadata), along with new MssManifests configuration details
Security assessment
The change adds explicit documentation about encryption methods (IsmEncryptionMethod) and DRM metadata handling (CmafExcludeSegmentDrmMetadata). The CmafExcludeSegmentDrmMetadata parameter specifically describes security-related behavior around omitting SEIG/SGPD boxes which could impact DRM compatibility. While not fixing a vulnerability, it documents security controls for content protection.
Diff
diff --git a/cli/latest/reference/mediapackagev2/get-origin-endpoint.md b/cli/latest/reference/mediapackagev2/get-origin-endpoint.md index 996715402..3ae7103fa 100644 --- a//cli/latest/reference/mediapackagev2/get-origin-endpoint.md +++ b//cli/latest/reference/mediapackagev2/get-origin-endpoint.md @@ -15 +15 @@ - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) » @@ -277,0 +278,4 @@ Segment -> (structure) +>>> +>>> IsmEncryptionMethod -> (string) +>>> +>>>> The encryption method used for Microsoft Smooth Streaming (MSS) content. This specifies how the MSS segments are encrypted to protect the content during delivery to client players. @@ -284,0 +289,19 @@ Segment -> (structure) +>> CmafExcludeSegmentDrmMetadata -> (boolean) +>> +>>> Excludes SEIG and SGPD boxes from segment metadata in CMAF containers. +>>> +>>> When set to `true` , MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don’t support these boxes. +>>> +>>> Important considerations: +>>> +>>> * This setting only affects CMAF container formats +>>> * Key rotation can still be handled through media playlist signaling +>>> * PSSH and TENC boxes remain unaffected +>>> * Default behavior is preserved when this setting is disabled +>>> + +>>> +>>> Valid values: `true` | `false` +>>> +>>> Default: `false` +>> @@ -748,0 +772,48 @@ DashManifests -> (list) +MssManifests -> (list) + +> The Microsoft Smooth Streaming (MSS) manifest configurations associated with this origin endpoint. +> +> (structure) +> +>> Configuration details for a Microsoft Smooth Streaming (MSS) manifest associated with an origin endpoint. This includes all the settings and properties that define how the MSS content is packaged and delivered. +>> +>> ManifestName -> (string) +>> +>>> The name of the MSS manifest. This name is appended to the origin endpoint URL to create the unique path for accessing this specific MSS manifest. +>> +>> Url -> (string) +>> +>>> The complete URL for accessing the MSS manifest. Client players use this URL to retrieve the manifest and begin streaming the Microsoft Smooth Streaming content. +>> +>> FilterConfiguration -> (structure) +>> +>>> Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest. +>>> +>>> ManifestFilter -> (string) +>>> +>>>> Optionally specify one or more manifest filters for all of your manifest egress requests. When you include a manifest filter, note that you cannot use an identical manifest filter query parameter for this manifest’s endpoint URL. +>>> +>>> Start -> (timestamp) +>>> +>>>> Optionally specify the start time for all of your manifest egress requests. When you include start time, note that you cannot use start time query parameters for this manifest’s endpoint URL. +>>> +>>> End -> (timestamp) +>>> +>>>> Optionally specify the end time for all of your manifest egress requests. When you include end time, note that you cannot use end time query parameters for this manifest’s endpoint URL. +>>> +>>> TimeDelaySeconds -> (integer) +>>> +>>>> Optionally specify the time delay for all of your manifest egress requests. Enter a value that is smaller than your endpoint’s startover window. When you include time delay, note that you cannot use time delay query parameters for this manifest’s endpoint URL. +>>> +>>> ClipStartTime -> (timestamp) +>>> +>>>> Optionally specify the clip start time for all of your manifest egress requests. When you include clip start time, note that you cannot use clip start time query parameters for this manifest’s endpoint URL. +>> +>> ManifestWindowSeconds -> (integer) +>> +>>> The duration (in seconds) of the manifest window. This represents the total amount of content available in the manifest at any given time. +>> +>> ManifestLayout -> (string) +>> +>>> The layout format of the MSS manifest, which determines how the manifest is structured for client compatibility. + @@ -788 +859 @@ Tags -> (map) - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) »