AWS ivs medium security documentation change

Service: ivs · 2025-12-10 · Security-related medium

File: ivs/latest/RealTimeUserGuide/eventbridge.md

Summary

Added 'Token Exchanged' event documentation with metadata examples and token capability/attribute change tracking

Security assessment

Documenting token exchange events improves auditability of privilege changes (e.g., upgraded capabilities), which is critical for detecting unauthorized access. This enhances security monitoring.

Diff

diff --git a/ivs/latest/RealTimeUserGuide/eventbridge.md b/ivs/latest/RealTimeUserGuide/eventbridge.md
index f5e5ff3ae..2b136985f 100644
--- a//ivs/latest/RealTimeUserGuide/eventbridge.md
+++ b//ivs/latest/RealTimeUserGuide/eventbridge.md
@@ -43,0 +44 @@ IVS Stage Update | Participant Replication End | A participant replication ends.
+IVS Stage Update | Token Exchanged  | An existing participant token is exchanged for a new one. This exchange results in upgraded or downgraded token capabilities and/or updated token attributes.   
@@ -307,0 +309 @@ Stage update events include an event name (which classifies the event) and metad
+            "event_time": "2025-11-18T16:40:32Z", 
@@ -332,0 +335 @@ Stage update events include an event name (which classifies the event) and metad
+            "event_time": "2025-11-18T16:40:32Z", 
@@ -384,0 +388 @@ Stage update events include an event name (which classifies the event) and metad
+            "event_time": "2025-11-18T16:40:32Z", 
@@ -408,0 +413 @@ Stage update events include an event name (which classifies the event) and metad
+            "event_time": "2025-11-18T16:40:32Z", 
@@ -415,0 +421,39 @@ Stage update events include an event name (which classifies the event) and metad
+**Token Exchanged** : This event is sent when an existing participant token is exchanged for a new one, resulting in upgraded or downgraded token capabilities and/or updated token attributes.
+    
+    
+    { 
+        "version": "0", 
+        "id": "12345678-1a23-4567-a1bc-1a2b34567890", 
+        "detail-type": "IVS Stage Update", 
+        "source": "aws.ivs", 
+        "account": "123456789012", 
+        "time": "2020-06-23T20:12:36Z", 
+        "region": "us-west-2" 
+        "resources": [ 
+            "arn:aws:ivs:us-west-2:123456789012:stage/AbCdef1G2hij" 
+        ], 
+        "detail": { 
+            "session_id": "st-ZyXwvu1T2s", 
+            "event_name": "Token Exchanged", 
+            "event_time": "2025-11-12T20:54:53Z", 
+            "user_id": "UpdatedUser", 
+            "participant_id": "xYz1c2d3e4f", 
+            "previous_token": { 
+                "capabilities": ["SUBSCRIBE"], 
+                "attributes": { 
+                    "role": "viewer" 
+                }, 
+                "user_id": "InitialUser", 
+                "expiration_time": "2025-11-12T21:54:52Z" 
+            }, 
+            "new_token": { 
+                "capabilities": ["SUBSCRIBE", "PUBLISH"], 
+                "attributes": { 
+                    "role": "moderator" 
+                }, 
+                "user_id": "UpdatedUser", 
+                "expiration_time": "2025-11-12T22:54:52Z" 
+            } 
+        } 
+    }
+