AWS ivs medium security documentation change
Summary
Added field constraints (1 KB max length, UTF-8 support) and emphasized non-use of sensitive data in participant token attributes
Security assessment
Explicitly defining size limits and reinforcing warnings about sensitive data in tokens helps prevent misuse (e.g., excessive payloads or accidental exposure of PII). This addresses potential security risks related to data handling.
Diff
diff --git a/ivs/latest/RealTimeAPIReference/API_ParticipantToken.md b/ivs/latest/RealTimeAPIReference/API_ParticipantToken.md index af5b736f8..aa7fdc86e 100644 --- a//ivs/latest/RealTimeAPIReference/API_ParticipantToken.md +++ b//ivs/latest/RealTimeAPIReference/API_ParticipantToken.md @@ -18 +18 @@ Object specifying a participant token in a stage. -Application-provided attributes to encode into the token and attach to a stage. _This field is exposed to all stage participants and should not be used for personally identifying, confidential, or sensitive information._ +Application-provided attributes to encode into the token and attach to a stage. Map keys and values can contain UTF-8 encoded text. The maximum length of this field is 1 KB total. _This field is exposed to all stage participants and should not be used for personally identifying, confidential, or sensitive information._