AWS solutions documentation change
Summary
Removed Amazon ElastiCache from architecture services list and deleted its dedicated section. Changed AWS WAF role from 'Supporting' to 'Core'. Updated log rotation parameters (removed 'analytics' from metrics logs description).
Security assessment
The change elevates AWS WAF's importance to a core component, directly relating to security infrastructure. However, there's no evidence of addressing a specific security vulnerability. The ElastiCache removal impacts caching but doesn't indicate security remediation.
Diff
diff --git a/solutions/latest/prebid-server-deployment-on-aws/architecture-details.md b/solutions/latest/prebid-server-deployment-on-aws/architecture-details.md index 498e0ee32..9ccd0249f 100644 --- a//solutions/latest/prebid-server-deployment-on-aws/architecture-details.md +++ b//solutions/latest/prebid-server-deployment-on-aws/architecture-details.md @@ -5 +5 @@ -AWS services in this solutionCloudFront distributionAWS WAFApplication Load Balancer (ALB)Amazon VPCAmazon ECSPrebid Server containerAmazon EFSDataSync (EFS to S3)Glue ETL (Metrics processing)AWS Glue Data CatalogAmazon CloudWatchAmazon ElastiCache +AWS services in this solutionCloudFront distributionAWS WAFApplication Load Balancer (ALB)Amazon VPCAmazon ECSPrebid Server containerAmazon EFSDataSync (EFS to S3)Glue ETL (Metrics processing)AWS Glue Data CatalogAmazon CloudWatch @@ -28,2 +28 @@ AWS service | Description -[Amazon ElastiCache](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/WhatIs.html) | **Core**. high-performance, scalable, and cost-effective caching solution. -[AWS WAF](https://aws.amazon.com/waf/) | **Supporting**. Provide layer of security around Amazon CloudFront. +[AWS WAF](https://aws.amazon.com/waf/) | **Core**. Provide layer of security around Amazon CloudFront. @@ -68 +67 @@ The EFS file system is mounted and shared among all container instances in the E -DataSync is configurated to periodically move rotated log files from each Prebid Server container’s EFS location to an equivalent location in the `DataSyncLogsBucket` S3 bucket. After each file is copied to S3 and verified, it is removed from the EFS file system through a clean-up Lambda function. Essentially, only actively written log files are retained on the EFS file system until the Prebid Server process closes it, rotates it, and starts a new file. Rotated log files are migrated with DataSync. Runtime logs are rotated every 24 hours or when reaching 100 MB. Metrics and analytics logs are rotated every one hour or when reaching 100 MB. +DataSync is configurated to periodically move rotated log files from each Prebid Server container’s EFS location to an equivalent location in the `DataSyncLogsBucket` S3 bucket. After each file is copied to S3 and verified, it is removed from the EFS file system through a clean-up Lambda function. Essentially, only actively written log files are retained on the EFS file system until the Prebid Server process closes it, rotates it, and starts a new file. Rotated log files are migrated with DataSync. Runtime logs are rotated every 24 hours or when reaching 100 MB. Metrics logs are rotated every one hour or when reaching 100 MB. @@ -82,4 +80,0 @@ CloudWatch alarms monitor specific metrics in real-time and proactively notify A -## Amazon ElastiCache - -ElastiCache offers serverless caching, which simplifies adding and operating a cache for your application. This solution uses ElastiCache for providing caching implementation in accordance with the [Prebid Cache](https://docs.prebid.org/prebid-server/features/pbs-caching.html). -