AWS mediapackage documentation change
Summary
Added new CDNAuthorizationStatus and CDNAuthorizationStatusDetails CloudWatch metrics
Security assessment
New metrics help monitor authorization attempts and failures, enhancing security visibility but not addressing a specific vulnerability.
Diff
diff --git a/mediapackage/latest/userguide/monitoring-cloudwatch.md b/mediapackage/latest/userguide/monitoring-cloudwatch.md index e0055244b..a13eb4949 100644 --- a//mediapackage/latest/userguide/monitoring-cloudwatch.md +++ b//mediapackage/latest/userguide/monitoring-cloudwatch.md @@ -252,0 +253,2 @@ No Dimension | Metrics are aggregated and shown for all channels, endpoints, or +`CDNAuthorizationStatus` | Value: `Authorized` or `Unauthorized` Can be used in combination with `ChannelGroup`, `Channel`, `OriginEndpoint`, and `CDNAuthorizationStatusDetails` to show metrics for the CDN authorization requests to the specified endpoint. +`CDNAuthorizationStatusDetails` | Value when `CDNAuthorizationStatus` is `Authorized`: `HeaderSecretMatched` Value when `CDNAuthorizationStatus` is `Unauthorized`: `HeaderSecretMismatched`, `MissingCdnAuthHeaderAndConfiguration`, `MissingCdnAuthHeader`, `MissingCdnAuthConfiguration`, `MissingCdnIdentifierSecretArns`, `MissingSecretsRoleArn`, `SecretsManagerInvalidParameterError`, `SecretsManagerInternalServiceError`, `SecretsManagerThrottlingError`, `MediaPackageSecretsValidationError`, or `OtherErrors`. Can be used in combination with `ChannelGroup`, `Channel`, `OriginEndpoint`, and `CDNAuthorizationStatus` to show the CDN authorization request details for the specified endpoint.