AWS AWSCloudFormation high security documentation change
Summary
Added PlayerGatewayConfiguration and PlayerGatewayMode properties to configure DDoS protection through traffic validation, IP masking, and relay endpoint management
Security assessment
Explicitly documents DDoS protection capabilities through player gateway configuration, including traffic validation and IP address hiding. References security-focused developer guide for mitigation.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-gamelift-fleet.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-gamelift-fleet.md index 423a276df..9413d6d31 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-gamelift-fleet.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-gamelift-fleet.md @@ -37,0 +38,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "PlayerGatewayConfiguration" : [PlayerGatewayConfiguration](./aws-properties-gamelift-fleet-playergatewayconfiguration.html), + "PlayerGatewayMode" : String, @@ -73,0 +76,3 @@ To declare this entity in your CloudFormation template, use the following syntax + PlayerGatewayConfiguration: + [PlayerGatewayConfiguration](./aws-properties-gamelift-fleet-playergatewayconfiguration.html) + PlayerGatewayMode: String @@ -341,0 +347,37 @@ _Minimum_ : `1` +`PlayerGatewayConfiguration` + + +Configuration settings for player gateway. Use this to specify advanced options for how player gateway handles connections. + +_Required_ : No + + _Type_ : [PlayerGatewayConfiguration](./aws-properties-gamelift-fleet-playergatewayconfiguration.html) + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`PlayerGatewayMode` + + +Configures player gateway for your fleet. Player gateway provides benefits such as DDoS protection by rate limiting and validating traffic before it reaches game servers, hiding game server IP addresses from players, and providing updated endpoints when relay endpoints become unhealthy. Note, player gateway is only available for fleets using server SDK 5.x or later game server builds. + +**How it works:** When enabled, game clients connect to relay endpoints instead of to your game servers. Player gateway validates player gateway tokens and routes traffic to the appropriate game server. Your game backend calls [GetPlayerConnectionDetails](https://docs.aws.amazon.com/gamelift/latest/apireference/API_GetPlayerConnectionDetails.html) to retrieve relay endpoints and player gateway tokens for your game clients. To learn more about this topic, see [DDoS protection with Amazon GameLift Servers player gateway](https://docs.aws.amazon.com/gameliftservers/latest/developerguide/ddos-protection-intro.html). + +Possible values include: + + * `DISABLED` (default) -- Game clients connect to the game server endpoint. Use this when you do not intend to integrate your game with player gateway. + + * `ENABLED` \-- Player gateway is available in fleet locations where it is supported. Your game backend can call [GetPlayerConnectionDetails](https://docs.aws.amazon.com/gamelift/latest/apireference/API_GetPlayerConnectionDetails.html) to obtain a player gateway token and endpoints for game clients. + + * `REQUIRED` \-- Player gateway is available in fleet locations where it is supported, and the fleet can only use locations that support this feature. Attempting to add a remote location to your fleet which does not support player gateway will result in an `InvalidRequestException`. + + + + +_Required_ : No + + _Type_ : String + + _Allowed values_ : `DISABLED | ENABLED | REQUIRED` + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) +