AWS solutions documentation change
Summary
Added AWS Well-Architected Framework section covering six pillars (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability) with implementation details. Updated headings and section structure.
Security assessment
The change adds documentation about security features (CloudFront with OAI, MediaPackage CDN authorization via Secrets Manager) but doesn't address any specific vulnerability. It's part of general best practices documentation.
Diff
diff --git a/solutions/latest/live-streaming-on-aws/architecture-overview.md b/solutions/latest/live-streaming-on-aws/architecture-overview.md index d9cca0be1..d31903074 100644 --- a//solutions/latest/live-streaming-on-aws/architecture-overview.md +++ b//solutions/latest/live-streaming-on-aws/architecture-overview.md @@ -5,2 +4,0 @@ -Architecture diagram - @@ -8,0 +7,2 @@ Architecture diagram +Live Streaming on AWS architecture overview + @@ -11 +11 @@ This section provides a reference implementation architecture diagram for the co -## Architecture diagram +== Architecture diagram @@ -43,0 +44,44 @@ AWS CloudFormation resources are created from [AWS Cloud Development Kit (AWS CD +== AWS Well-Architected + +We designed this solution with best practices from the AWS [Well-Architected Framework](https://aws.amazon.com/architecture/well-architected/), which helps customers design and operate reliable, secure, efficient, and cost-effective workloads in the cloud. + +This section describes how we applied the design principles and best practices of the Well-Architected Framework when building this solution. + +=== Operational excellence + +This section describes how the principles and best practices of the [operational excellence pillar](https://docs.aws.amazon.com/wellarchitected/latest/operational-excellence-pillar/welcome.html) were applied when designing this solution. + +The Live Streaming on AWS solution tracks all assets via AWS CloudTrail, and logs from AWS Elemental MediaLive, MediaPackage, and Amazon CloudFront provide observability into the infrastructure and the rest of the solution components. + +=== Security + +This section describes how the principles and best practices of the [security pillar](https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/welcome.html) were applied when designing this solution. To help reduce latency and improve security, Live Streaming on AWS includes an Amazon CloudFront distribution with an origin access identity, which is a special CloudFront user that helps restrict access to the solution’s website bucket contents. + +AWS Elemental MediaPackage only fulfills playback requests that are authorized between MediaPackage and CloudFront using a CDN identifier. This CDN identifier is created as part of the AWS CloudFormation deployment and securely stored in [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/). For more details, refer to the [CDN authorization in AWS Elemental MediaPackage](https://docs.aws.amazon.com/mediapackage/latest/ug/cdn-auth.html) in the _AWS Elemental MediaPackage User Guide_. + +=== Reliability + +This section describes how the principles and best practices of the [reliability pillar](https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/welcome.html) were applied when designing this solution. + +The solution supports primary and secondary live streams throughout AWS Elemental MediaLive and AWS Elemental MediaPackage providing the redundancy that customers require for critical live video events. + +=== Performance efficiency + +This section describes how the principles and best practices of the [performance efficiency pillar](https://docs.aws.amazon.com/wellarchitected/latest/performance-efficiency-pillar/welcome.html) were applied when designing this solution. + +This solution uses AWS Elemental MediaLive, MediaPackage, and MediaConnect, which are currently available in specific AWS Regions only. If you use MediaConnect as input, you must deploy this solution in the same Region as your MediaConnect flows. + +The Live Streaming on AWS solution is automatically tested and reviewed by solution architects and subject matter experts for areas to experiment and improve. + +=== Cost optimization + +This section describes how the principles and best practices of the [cost optimization pillar](https://docs.aws.amazon.com/wellarchitected/latest/cost-optimization-pillar/welcome.html) were applied when designing this solution. + +The cost for running this solution varies based on a number of factors, including the encoded profile selected, the bitrate of the live stream and the number of viewers. + +Using Application Manager, customers can measure the efficiency of the workloads, and the costs associated with delivery. + +=== Sustainability + +This section describes how the principles and best practices of the [sustainability pillar](https://docs.aws.amazon.com/wellarchitected/latest/sustainability-pillar/sustainability-pillar.html) were applied when designing this solution. To minimize the environmental impact of backend services, Live Streaming on AWS uses managed and serverless services. Customers can run this solution only during a live event and delete the stack after the program ends, thereby reducing the carbon footprint as compared to the footprint of continually operating on-premises servers. + @@ -50 +94 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Concepts and definitions +Solution overview @@ -52 +96 @@ Concepts and definitions -AWS Well-Architected +Architecture details