AWS ivs high security documentation change
Summary
Added documentation about VPC endpoints for secure private connection to IVS using AWS PrivateLink
Security assessment
Explicitly describes a security feature (VPC endpoints) that keeps ingest traffic within AWS network and off public internet, which directly impacts data-in-transit security
Diff
diff --git a/ivs/latest/RealTimeUserGuide/release-notes.md b/ivs/latest/RealTimeUserGuide/release-notes.md index 5b0c381d6..6b5ff9ab2 100644 --- a//ivs/latest/RealTimeUserGuide/release-notes.md +++ b//ivs/latest/RealTimeUserGuide/release-notes.md @@ -66 +66 @@ arm64 | 3.569 MB | 7.962 MB -We updated the quota for "maximum concurrent Composition resources per account" from 5 to 20. It is documented in Service Quotas > [Other Quotas](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/service-quotas.html#quotas-other). +We updated the quota for "maximum concurrent Composition resources per account" from 5 to 20. It is documented in Service Quotas > [Other Quotas](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/service-quotas.html#quotas-other). @@ -116 +116 @@ arm64 | 3.569 MB | 7.963 MB -New support for custom participant ordering for SSC provides granular control over participant positioning in both grid and Picture-in-Picture (PiP) layouts. See [Server-Side Composition](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/server-side-composition.html) (various changes, including adding `participantOrderAttribute` and "Custom Participant Ordering") and the [IVS Real-Time Streaming API Reference](https://docs.aws.amazon.com/ivs/latest/RealTimeAPIReference/Welcome.html) (added `participantOrderAttribute` to the Composition object). +New support for custom participant ordering for SSC provides granular control over participant positioning in both grid and Picture-in-Picture (PiP) layouts. See [Server-Side Composition](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/server-side-composition.html) (various changes, including adding `participantOrderAttribute` and "Custom Participant Ordering") and the [IVS Real-Time Streaming API Reference](https://docs.aws.amazon.com/ivs/latest/RealTimeAPIReference/Welcome.html) (added `participantOrderAttribute` to the Composition object). @@ -157 +157 @@ arm64 | 3.594 MB | 8.046 MB -New support for interface VPC (Virtual Private Cloud) endpoints enables you to establish a secure private connection between your Amazon VPC and IVS, for workloads that require secure, live video ingestion. This keeps your IVS ingest traffic within the AWS network and off the public internet. Interface VPC endpoints are powered by AWS PrivateLink, an AWS technology that enables private communication between AWS services, using an elastic network interface with private IPs in your Amazon VPC. See [Private Ingest](https://docs.aws.amazon.com/ivs/latest/LowLatencyUserGuide/private-ingest-ll.html) in the _IVS Low-Latency Streaming User Guide_ and [Private Ingest to Stages](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/rt-rtmp-publishing.html#private-ingest-stages) in the _IVS Real-Time Streaming User Guide_. +New support for interface VPC (Virtual Private Cloud) endpoints enables you to establish a secure private connection between your Amazon VPC and IVS, for workloads that require secure, live video ingestion. This keeps your IVS ingest traffic within the AWS network and off the public internet. Interface VPC endpoints are powered by AWS PrivateLink, an AWS technology that enables private communication between AWS services, using an elastic network interface with private IPs in your Amazon VPC. See [Private Ingest](https://docs.aws.amazon.com//ivs/latest/LowLatencyUserGuide/private-ingest-ll.html) in the _IVS Low-Latency Streaming User Guide_ and [Private Ingest to Stages](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/rt-rtmp-publishing.html#private-ingest-stages) in the _IVS Real-Time Streaming User Guide_. @@ -252 +252 @@ On June 23, we introduced two new adjustable service quotas, for the maximum num -We've introduced a new non-adjustable service quota, for the maximum number of concurrent replications per participant across all stages in an AWS Region. It is documented in Service Quotas > [Other Quotas](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/service-quotas.html#quotas-other). +We've introduced a new non-adjustable service quota, for the maximum number of concurrent replications per participant across all stages in an AWS Region. It is documented in Service Quotas > [Other Quotas](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/service-quotas.html#quotas-other). @@ -307 +307 @@ Platform | Downloads and Changes -We've introduced two new adjustable service quotas, for the maximum number of concurrent publishers and concurrent subscriptions across all stages in an AWS Region. They are documented in Service Quotas > [Other Quotas](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/service-quotas.html#quotas-other). These quotas give you more control over total usage across your account. Previously, IVS enforced limits only on the number of publishers and subscribers _per stage_. This made it hard to set safeguards at the account level and could result in higher usage and associated costs than expected, especially for customers creating many stages. +We've introduced two new adjustable service quotas, for the maximum number of concurrent publishers and concurrent subscriptions across all stages in an AWS Region. They are documented in Service Quotas > [Other Quotas](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/service-quotas.html#quotas-other). These quotas give you more control over total usage across your account. Previously, IVS enforced limits only on the number of publishers and subscribers _per stage_. This made it hard to set safeguards at the account level and could result in higher usage and associated costs than expected, especially for customers creating many stages. @@ -311 +311 @@ We've introduced two new adjustable service quotas, for the maximum number of co -We also added two new CloudWatch metrics, `ConcurrentPublishers` and `ConcurrentSubscriptions`. These metrics help you monitor usage across all stages and assess whether you are approaching the default limits. They are documented in Monitoring Real-Time Streaming > [CloudWatch Metrics](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/stage-health.html#stage-health-cloudwatch-metrics). We recommend setting up [CloudWatch alarms](https://docs.aws.amazon.com/servicequotas/latest/userguide/configure-cloudwatch.html) to alert you when your usage is close to a quota limit. +We also added two new CloudWatch metrics, `ConcurrentPublishers` and `ConcurrentSubscriptions`. These metrics help you monitor usage across all stages and assess whether you are approaching the default limits. They are documented in Monitoring Real-Time Streaming > [CloudWatch Metrics](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/stage-health.html#stage-health-cloudwatch-metrics). We recommend setting up [CloudWatch alarms](https://docs.aws.amazon.com/servicequotas/latest/userguide/configure-cloudwatch.html) to alert you when your usage is close to a quota limit. @@ -469 +469 @@ Platform | Downloads and Changes - * Added a simulcast publisher controls feature. See "Configuring Layered Encoding (Publisher)" in the [Android Broadcast SDK Guide](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/android-publish-subscribe.html#android-layered-encoding-simulcast-configure-publisher). + * Added a simulcast publisher controls feature. See "Configuring Layered Encoding (Publisher)" in the [Android Broadcast SDK Guide](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/android-publish-subscribe.html#android-layered-encoding-simulcast-configure-publisher). @@ -475 +475 @@ Platform | Downloads and Changes - * Added a simulcast publisher controls feature. See "Configuring Layered Encoding (Publisher)" in the [iOS Broadcast SDK Guide](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/ios-publish-subscribe.html#ios-layered-encoding-simulcast-configure-publisher). + * Added a simulcast publisher controls feature. See "Configuring Layered Encoding (Publisher)" in the [iOS Broadcast SDK Guide](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/ios-publish-subscribe.html#ios-layered-encoding-simulcast-configure-publisher). @@ -503 +503 @@ Platform | Downloads and Changes - * Added a simulcast publisher controls feature. See "Configuring Layered Encoding (Publisher)" in the [Web Broadcast SDK Guide](https://docs.aws.amazon.com/ivs/latest/RealTimeUserGuide/web-publish-subscribe.html#web-layered-encoding-simulcast-configure-publisher). + * Added a simulcast publisher controls feature. See "Configuring Layered Encoding (Publisher)" in the [Web Broadcast SDK Guide](https://docs.aws.amazon.com//ivs/latest/RealTimeUserGuide/web-publish-subscribe.html#web-layered-encoding-simulcast-configure-publisher). @@ -775 +775 @@ This release allows you to enable/disable the recording of thumbnails for a live - * [API Reference RT](https://docs.aws.amazon.com/ivs/latest/RealTimeAPIReference/Welcome.html) — We made several changes: + * [API Reference RT](https://docs.aws.amazon.com//ivs/latest/RealTimeAPIReference/Welcome.html) — We made several changes: @@ -1040 +1040 @@ You can now generate participant tokens on your own server application by using -Individual participant recording allows IVS real-time streaming customers to record IVS stage publishers individually into S3 buckets. See [Recording](./rt-recording.html), [Individual Participant Recording](./rt-individual-participant-recording.html), and changes in the [Real-Time Streaming API Reference](https://docs.aws.amazon.com/ivs/latest/RealTimeAPIReference/Welcome.html). (For specific documentation changes, see the [Document History](./doc-history.html).) +Individual participant recording allows IVS real-time streaming customers to record IVS stage publishers individually into S3 buckets. See [Recording](./rt-recording.html), [Individual Participant Recording](./rt-individual-participant-recording.html), and changes in the [Real-Time Streaming API Reference](https://docs.aws.amazon.com//ivs/latest/RealTimeAPIReference/Welcome.html). (For specific documentation changes, see the [Document History](./doc-history.html).) @@ -1625 +1625 @@ IVS server-side composition enables clients to offload the composition and broad - * [Real-Time Streaming API Reference](https://docs.aws.amazon.com/ivs/latest/RealTimeAPIReference/Welcome.html) – We added 8 Composition and EncoderConfiguration endpoints and 11 objects (ChannelDestinationConfiguration, Composition, CompositionSummary, Destination, DestinationConfiguration, DestinationSummary, EncoderConfiguration, EncoderConfigurationSummary, GridConfiguration, LayoutConfiguration, and Video). + * [Real-Time Streaming API Reference](https://docs.aws.amazon.com//ivs/latest/RealTimeAPIReference/Welcome.html) – We added 8 Composition and EncoderConfiguration endpoints and 11 objects (ChannelDestinationConfiguration, Composition, CompositionSummary, Destination, DestinationConfiguration, DestinationSummary, EncoderConfiguration, EncoderConfigurationSummary, GridConfiguration, LayoutConfiguration, and Video). @@ -1632 +1632 @@ In the _IVS Low-Latency Streaming User Guide_ , see: - * [Enabling Multiple Hosts on an IVS Stream](https://docs.aws.amazon.com/ivs/latest/LowLatencyUserGuide/multiple-hosts.html) – We added "Broadcasting a Stage: Client-Side versus Server-Side Composition" and updated "4. Broadcast the Stage." + * [Enabling Multiple Hosts on an IVS Stream](https://docs.aws.amazon.com//ivs/latest/LowLatencyUserGuide/multiple-hosts.html) – We added "Broadcasting a Stage: Client-Side versus Server-Side Composition" and updated "4. Broadcast the Stage."