AWS medialive documentation change
Summary
Added documentation for Elemental Inference requirements including IAM permissions and FAS usage
Security assessment
Introduces documentation for securing Elemental Inference feeds using IAM permissions and Forward Access Sessions (FAS). While this adds security-related documentation about access control mechanisms, there's no indication it addresses an existing vulnerability.
Diff
diff --git a/medialive/latest/ug/setting-up-for-production.md b/medialive/latest/ug/setting-up-for-production.md index fe7f6e033..666723581 100644 --- a//medialive/latest/ug/setting-up-for-production.md +++ b//medialive/latest/ug/setting-up-for-production.md @@ -4,0 +5,2 @@ +Elemental Inference + @@ -41,0 +44,2 @@ This section assumes that you have already performed these tasks: + * Elemental Inference + @@ -48,2 +51,0 @@ This section assumes that you have already performed these tasks: - * [MediaStore](./requirements-for-mediastore.html) - @@ -60,0 +63,16 @@ This section assumes that you have already performed these tasks: +## Requirements for Elemental Inference + +Your organization might implement [AWS Elemental Inference features](./elemental-inference.html) in a channel. Users who configure the channel to use these features need permissions to work with feeds. + + * Users need permissions to work with feeds. Users need these permissions even though they are using the MediaLive console or API to set up the feeds and to associate the channel with the feed. + + * Users need permissions to let MediaLive perform setup on a feed after the channel has been created or modified. The setup involves associating the channel with the feed. MediaLive uses IAM forward access sessions (FAS) to send and retrieve. + + + + +Permissions | Service name in IAM | Actions +---|---|--- +When configuring a channel, so that MediaLive can work with the Elemental Inference feed. | Elemental Inference | `CreateFeed``DeleteFeed``GetFeed``ListFeeds``UpdateFeed` +After configuration of a channel, so that MediaLive can use FAS to associate the channel with the Elemental Inference feed. | Elemental Inference | `AssociateFeed` `DisassociateFeed` `GetFeed` +