AWS cli documentation change
Summary
Updated AWS CLI version from 2.34.25 to 2.34.28, added new MediaLiveChannel router input type with encryption configuration, reordered Tagged Union structure keys, changed minimum port constraints from 0 to 1024 for certain protocols, and restructured documentation sections.
Security assessment
The changes primarily add new functionality (MediaLiveChannel input type) and reorganize existing documentation. The addition of encryption configuration details for MediaLive transit (Secrets Manager and Automatic encryption) adds security documentation. The change in minimum port from 0 to 1024 for certain protocols improves security by preventing use of privileged ports, but there's no evidence this addresses a specific security vulnerability. The update appears to be a feature enhancement and documentation reorganization rather than a response to a security incident.
Diff
diff --git a/cli/latest/reference/mediaconnect/create-router-input.md b/cli/latest/reference/mediaconnect/create-router-input.md index 6f75ff893..3ea2493bb 100644 --- a//cli/latest/reference/mediaconnect/create-router-input.md +++ b//cli/latest/reference/mediaconnect/create-router-input.md @@ -15 +15 @@ - * [AWS CLI 2.34.25 Command Reference](../../index.html) » + * [AWS CLI 2.34.28 Command Reference](../../index.html) » @@ -120 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac -> This is a Tagged Union structure. Only one of the following top level keys can be set: `Standard`, `Failover`, `Merge`, `MediaConnectFlow`. +> This is a Tagged Union structure. Only one of the following top level keys can be set: `Standard`, `MediaLiveChannel`, `Failover`, `MediaConnectFlow`, `Merge`. @@ -142,27 +142 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rtp`, `Rist`, `SrtListener`, `SrtCaller`. ->>> ->>> Rtp -> (structure) ->>> ->>>> The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state. ->>>> ->>>> Port -> (integer) [required] ->>>> ->>>>> The port number used for the RTP protocol in the router input configuration. ->>>>> ->>>>> Constraints: ->>>>> ->>>>> * min: `3000` ->>>>> * max: `30000` ->>>>> - ->>>> ->>>> ForwardErrorCorrection -> (string) ->>>> ->>>>> The state of forward error correction for the RTP protocol in the router input configuration. ->>>>> ->>>>> Possible values: ->>>>> ->>>>> * `ENABLED` ->>>>> * `DISABLED` ->>>>> - +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rist`, `SrtListener`, `SrtCaller`, `Rtp`. @@ -264 +238 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> * min: `0` +>>>>> * min: `1024` @@ -310,0 +285,26 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac +>>> +>>> Rtp -> (structure) +>>> +>>>> The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state. +>>>> +>>>> Port -> (integer) [required] +>>>> +>>>>> The port number used for the RTP protocol in the router input configuration. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `3000` +>>>>> * max: `30000` +>>>>> + +>>>> +>>>> ForwardErrorCorrection -> (string) +>>>> +>>>>> The state of forward error correction for the RTP protocol in the router input configuration. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `ENABLED` +>>>>> * `DISABLED` +>>>>> + @@ -325 +325 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac -> Failover -> (structure) +> MediaLiveChannel -> (structure) @@ -327 +327 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> Configuration settings for a failover router input that allows switching between two input sources. +>> Configuration settings for connecting a router input to a MediaLive channel output. @@ -329 +329 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> NetworkInterfaceArn -> (string) [required] +>> MediaLiveChannelArn -> (string) @@ -331 +331 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> The ARN of the network interface to use for this failover router input. +>>> The ARN of the MediaLive channel to connect to this router input. @@ -335 +335 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> * pattern: `arn:(aws[a-zA-Z-]*):mediaconnect:[a-z0-9-]+:[0-9]{12}:routerNetworkInterface:[a-z0-9]{12}` +>>> * pattern: `arn:(aws[a-zA-Z-]*):medialive:[a-z0-9-]+:[0-9]{12}:channel:[a-zA-Z0-9]+` @@ -339 +339 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> ProtocolConfigurations -> (list) [required] +>> MediaLivePipelineId -> (string) @@ -341 +341 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> A list of exactly two protocol configurations for the failover input sources. Both must use the same protocol type. +>>> The index of the MediaLive pipeline to connect to this router input. @@ -343 +343 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> (tagged union structure) +>>> Possible values: @@ -345 +345,27 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>> Protocol configuration settings for failover router inputs. +>>> * `PIPELINE_0` +>>> * `PIPELINE_1` +>>> + +>> +>> MediaLiveChannelOutputName -> (string) +>> +>>> The name of the MediaLive channel output to connect to this router input. +>> +>> SourceTransitDecryption -> (structure) [required] +>> +>>> The encryption configuration that defines how content is encrypted during transit between MediaConnect Router and MediaLive. This configuration determines whether encryption keys are automatically managed by the service or manually managed through Secrets Manager. +>>> +>>> EncryptionKeyType -> (string) +>>> +>>>> The type of encryption key to use for MediaLive transit encryption. +>>>> +>>>> Possible values: +>>>> +>>>> * `SECRETS_MANAGER` +>>>> * `AUTOMATIC` +>>>> + +>>> +>>> EncryptionKeyConfiguration -> (tagged union structure) [required] +>>> +>>>> The configuration details for the MediaLive encryption key. @@ -349 +375 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rtp`, `Rist`, `SrtListener`, `SrtCaller`. +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `SecretsManager`, `Automatic`. @@ -351 +377 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>> Rtp -> (structure) +>>>> SecretsManager -> (structure) @@ -353 +379 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state. +>>>>> The configuration settings for transit encryption using Secrets Manager, including the secret ARN and role ARN. @@ -355 +381 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> Port -> (integer) [required] +>>>>> SecretArn -> (string) [required] @@ -357 +383 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> The port number used for the RTP protocol in the router input configuration. +>>>>>> The ARN of the Secrets Manager secret used for transit encryption. @@ -361,2 +387 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> * min: `3000` ->>>>>> * max: `30000` +>>>>>> * pattern: `arn:(aws[a-zA-Z-]*):secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+` @@ -366 +391 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> ForwardErrorCorrection -> (string) +>>>>> RoleArn -> (string) [required] @@ -368 +393 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> The state of forward error correction for the RTP protocol in the router input configuration. +>>>>>> The ARN of the IAM role assumed by MediaConnect to access the Secrets Manager secret. @@ -370 +395 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> Possible values: +>>>>>> Constraints: @@ -372,2 +397 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> * `ENABLED` ->>>>>> * `DISABLED` +>>>>>> * pattern: `arn:(aws[a-zA-Z-]*):iam::[0-9]{12}:role/[a-zA-Z0-9_+=,.@-]+` @@ -375,0 +400,30 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac +>>>> +>>>> Automatic -> (structure) +>>>> +>>>>> Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation. +> +> Failover -> (structure) +> +>> Configuration settings for a failover router input that allows switching between two input sources. +>> +>> NetworkInterfaceArn -> (string) [required] +>> +>>> The ARN of the network interface to use for this failover router input. +>>> +>>> Constraints: +>>> +>>> * pattern: `arn:(aws[a-zA-Z-]*):mediaconnect:[a-z0-9-]+:[0-9]{12}:routerNetworkInterface:[a-z0-9]{12}` +>>> + +>> +>> ProtocolConfigurations -> (list) [required] +>> +>>> A list of exactly two protocol configurations for the failover input sources. Both must use the same protocol type. +>>> +>>> (tagged union structure) +>>> +>>>> Protocol configuration settings for failover router inputs. +>>>> +>>>> ### Note +>>>> +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rist`, `SrtListener`, `SrtCaller`, `Rtp`. @@ -471 +525 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> * min: `0` +>>>>>> * min: `1024` @@ -518,48 +571,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> ->> SourcePriorityMode -> (string) [required] ->> ->>> The mode for determining source priority in failover configurations. ->>> ->>> Possible values: ->>> ->>> * `NO_PRIORITY` ->>> * `PRIMARY_SECONDARY` ->>> -