AWS solutions documentation change
Summary
Removed detailed metrics collection information and opt-out instructions, simplified data collection description, deleted latency performance table, and added contributor names.
Security assessment
The changes primarily reduce transparency about collected metrics and remove opt-out instructions, which relates to privacy (a security-adjacent concern). However, there's no evidence of addressing a specific vulnerability like data exposure or exploitation. The removal of opt-out steps could impact user control over data sharing but doesn't constitute a direct security fix.
Diff
diff --git a/solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/reference.md b/solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/reference.md index f48805f37..d08340be9 100644 --- a//solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/reference.md +++ b//solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/reference.md @@ -5 +5 @@ -Anonymized data collectionS3 Object Lambda architecture response latencyRelated resourcesContributors +Data collectionRelated resourcesContributors @@ -9 +9 @@ Anonymized data collectionS3 Object Lambda architecture response latencyRelated -This section includes information about an optional feature for collecting unique metrics for this solution, data surrounding response times of a deployment using the S3 Object Lambda architecture, pointers to related resources, and a list of builders who contributed to this solution. +This section includes information about data collection, data surrounding response times of a deployment using the S3 Object Lambda architecture, pointers to related resources, and a list of builders who contributed to this solution. @@ -11 +11 @@ This section includes information about an optional feature for collecting uniqu -## Anonymized data collection +## Data collection @@ -13,104 +13 @@ This section includes information about an optional feature for collecting uniqu -This solution includes an option to send anonymized operational metrics to AWS. We use this data to better understand how customers use this solution and related services and products. When invoked, the following information is collected and sent to AWS: - - * **Solution ID** \- The AWS solution identifier - - * **Version** \- The Dynamic Image Transformation for Amazon CloudFront solution version - - * **Unique ID (UUID)** \- Randomly generated, unique identifier - - * **Timestamp** \- The timestamp when the solution’s Lambda function runs - - * **Region** \- The AWS Region the solution is being deployed in - - * **CorsEnable** \- Whether CORS is activated - - * **NumberOfSourceBuckets** \- Number of source buckets - - * **DeployDemoUi** \- Whether the Demo UI deployment is activated - - * **LogRetentionPeriod** \- The log retention period - - * **AutoWebP** \- Whether AutoWebP is activated - - * **EnableSignature** \- Whether the image URL signature is activated - - * **EnableDefaultFallbackImage** \- Whether the default fallback image is activated - - * **UseExistingCloudFrontDistribution** \- Whether the deployment uses a natively created, or an existing CloudFront distribution - - * **EnableS3ObjectLambda** \- Whether the S3 Object Lambda architecture is being used - - * **OriginShieldRegion** \- What region Origin Shield is enabled in (or if disabled) - - * **AWS/Lambda/Invocations** \- Quantity of image handler Lambda function invocations - - * **AWS/CloudFront/Requests** \- Quantity of requests hitting the image handler distribution - - * **AWS/CloudFront/BytesDownloaded** \- Quantity of bytes downloaded from the image handler distribution - - * **AWSLambdaBilledDuration** \- Sum of billed duration for image handler Lambda function - - * **AWSLambdaMemorySize** \- Memory size of image handler Lambda function - - * **DefaultRequestsCount** \- The count of requests which use the default base64 request encoding - - * **ThumborRequestsCount** \- The count of requests which use Thumbor-style request encoding - - * **CustomRequestsCount** \- The count of requests which use a custom request encoding - - * **QueryParamRequestsCount** \- The count of requests which use query parameter based image edits - - * **ExpiresRequestsCount** \- The count of requests which use the expires query parameter - - - - -AWS owns the data gathered through this survey. Data collection is subject to the [AWS Privacy Notice](https://aws.amazon.com/privacy/). To opt out of this feature, complete the following steps before launching the CloudFormation template. - - 1. Download the `dynamic-image-transformation-for-amazon-cloudfront.template` [AWS CloudFormation template](./aws-cloudformation-template.html) to your local hard drive. - - 2. Open the CloudFormation template with a text editor. - - 3. Modify the AWS CloudFormation template mapping section from: - - Solution: - Config: - AnonymousUsage: "Yes", - DeployCloudWatchDashboard: …, - SharpSizeLimit: …, - SolutionId: …, - Version: … - -to: - - Solution: - Config: - AnonymousUsage: No, - DeployCloudWatchDashboard: …, - SharpSizeLimit: …, - SolutionId: …, - Version: … - - 4. Sign in to the [AWS CloudFormation console](https://console.aws.amazon.com/cloudformation/home). - - 5. Select **Create stack**. - - 6. On the **Create stack** page, **Specify template** section, select **Upload a template file**. - - 7. Under **Upload a template file** , choose **Choose file** and select the edited template from your local drive. - - 8. Choose **Next** and follow the steps in [Deployment process overview](./launch-stack.html) to launch the solution. - - - - -## S3 Object Lambda architecture response latency - -Average response latency for uncached images on a deployment using the S3 Object Lambda architecture. As the processing is identical between both architectures, processing durations should be similar to those when using the API Gateway architecture, this dataset can serve as a reference for determining the maximum size of an image that can be returned by the solution, especially for sizes which are not supported by the API Gateway architecture. In cases where Timeouts are encountered, increasing the memory allocation of the BackendImageHandler Lambda function may lead to performance enhancements. - -Image Size/Filters | No filters | Grayscale | Equalize | Format (PNG to JPG) ----|---|---|---|--- -**1 MB** | 0.35s | 0.65s | 0.95s | 0.41s -**10 MB** | 0.78s | 2.95s | 4.64s | 1.30s -**50 MB** | 2.28s | 10.96s | 22.55s | 4.65s -**100 MB** | 6.99s | 25.74s | Timeout (>30s) | 11.56s +This solution sends operational metrics to AWS (the "Data") about the use of this solution. We use this Data to better understand how customers use this solution and related services and products. AWS’s collection of this Data is subject to the [AWS Privacy Notice](https://aws.amazon.com/privacy/). @@ -139,0 +37,4 @@ Refer to the [sharp](https://sharp.pixelplumbing.com/) Node.js library for more + * Bryce Lee + + * Chaitanya Deolankar +