AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-22 · Documentation medium

File: cli/latest/reference/medialive/create-input.md

Summary

Added support for MediaConnect Router input type with encryption configuration options (AUTOMATIC/SECRETS_MANAGER) and SecretArn parameter documentation

Security assessment

The change introduces documentation for encryption configuration during MediaConnect Router input creation, specifying encryption types and secret ARN usage. While this adds security-related documentation about data encryption in transit, there is no evidence of addressing a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/medialive/create-input.md b/cli/latest/reference/medialive/create-input.md
index e40e2b8d7..88847500f 100644
--- a//cli/latest/reference/medialive/create-input.md
+++ b//cli/latest/reference/medialive/create-input.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.39 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.3 Command Reference](../../index.html) »
@@ -83,0 +84 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/medial
+    [--router-settings <value>]
@@ -305,0 +307 @@ JSON Syntax:
+>   * `MEDIACONNECT_ROUTER`
@@ -546,0 +549,48 @@ Syntax:
+`--router-settings` (structure) This is the collection of settings that are used during the creation of a MediaConnect router input.Destinations -> (list)
+
+> > Destinations for the input from MediaConnect Router. Provide one for a single-pipeline input and two for a standard input.
+>> 
+>> (structure)
+>>
+>>> Placeholder documentation for RouterDestinationSettings
+>>> 
+>>> AvailabilityZoneName -> (string) [required]
+>>>
+>>>> Availability Zone for this MediaConnect Router destination.
+> 
+> EncryptionType -> (string)
+>
+>> Encryption configuration for MediaConnect router. When using SECRETS_MANAGER encryption, you must provide the ARN of the secret used to encrypt data in transit. When using AUTOMATIC encryption, a service-managed secret will be used instead.
+>> 
+>> Possible values:
+>> 
+>>   * `AUTOMATIC`
+>>   * `SECRETS_MANAGER`
+>> 
+
+> 
+> SecretArn -> (string)
+>
+>> ARN of the secret used to encrypt this input.
+
+Shorthand Syntax:
+    
+    
+    Destinations=[{AvailabilityZoneName=string},{AvailabilityZoneName=string}],EncryptionType=string,SecretArn=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "Destinations": [
+        {
+          "AvailabilityZoneName": "string"
+        }
+        ...
+      ],
+      "EncryptionType": "AUTOMATIC"|"SECRETS_MANAGER",
+      "SecretArn": "string"
+    }
+    
+
@@ -909,0 +960 @@ Input -> (structure)
+>>   * `MEDIACONNECT_ROUTER`
@@ -1058,0 +1110,35 @@ Input -> (structure)
+> 
+> RouterSettings -> (structure)
+>
+>> Information about any MediaConnect router association with this input.
+>> 
+>> Destinations -> (list)
+>>
+>>> MediaConnect Router destinations associated with the MediaLive Input.
+>>> 
+>>> (structure)
+>>>
+>>>> Placeholder documentation for RouterDestination
+>>>> 
+>>>> AvailabilityZoneName -> (string)
+>>>>
+>>>>> The Availability Zone (AZ) names of the AZs this destination is created in.
+>>>> 
+>>>> RouterOutputArn -> (string)
+>>>>
+>>>>> ARN of the output from MediaConnect Router currently connected to this input.
+>> 
+>> EncryptionType -> (string)
+>>
+>>> Encryption configuration for MediaConnect router. When using SECRETS_MANAGER encryption, you must provide the ARN of the secret used to encrypt data in transit. When using AUTOMATIC encryption, a service-managed secret will be used instead.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `AUTOMATIC`
+>>>   * `SECRETS_MANAGER`
+>>> 
+
+>> 
+>> SecretArn -> (string)
+>>
+>>> ARN of the secret used to encrypt this input.
@@ -1070 +1156 @@ Input -> (structure)
-  * [AWS CLI 2.31.39 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.3 Command Reference](../../index.html) »