AWS cli documentation change
Summary
Updated AWS CLI reference documentation for mediaconnect update-router-input command to add new MediaLiveChannel input type with encryption configuration, reorder Tagged Union structure keys, change minimum port constraints from 0 to 1024 for some protocols, and restructure documentation sections.
Security assessment
The changes primarily add new functionality (MediaLiveChannel input type) with encryption configuration options (Secrets Manager and Automatic key management). The port constraint change from min: 0 to min: 1024 for some protocols appears to be a security hardening measure to prevent use of privileged ports, but there's no explicit mention of a specific security vulnerability being addressed. The addition of encryption configuration documentation for MediaLive transit encryption represents security feature documentation.
Diff
diff --git a/cli/latest/reference/mediaconnect/update-router-input.md b/cli/latest/reference/mediaconnect/update-router-input.md index d943b780e..5dee27a25 100644 --- a//cli/latest/reference/mediaconnect/update-router-input.md +++ b//cli/latest/reference/mediaconnect/update-router-input.md @@ -15 +15 @@ - * [AWS CLI 2.34.25 Command Reference](../../index.html) » + * [AWS CLI 2.34.28 Command Reference](../../index.html) » @@ -127 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac -> This is a Tagged Union structure. Only one of the following top level keys can be set: `Standard`, `Failover`, `Merge`, `MediaConnectFlow`. +> This is a Tagged Union structure. Only one of the following top level keys can be set: `Standard`, `MediaLiveChannel`, `Failover`, `MediaConnectFlow`, `Merge`. @@ -149,27 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rtp`, `Rist`, `SrtListener`, `SrtCaller`. ->>> ->>> Rtp -> (structure) ->>> ->>>> The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state. ->>>> ->>>> Port -> (integer) [required] ->>>> ->>>>> The port number used for the RTP protocol in the router input configuration. ->>>>> ->>>>> Constraints: ->>>>> ->>>>> * min: `3000` ->>>>> * max: `30000` ->>>>> - ->>>> ->>>> ForwardErrorCorrection -> (string) ->>>> ->>>>> The state of forward error correction for the RTP protocol in the router input configuration. ->>>>> ->>>>> Possible values: ->>>>> ->>>>> * `ENABLED` ->>>>> * `DISABLED` ->>>>> - +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rist`, `SrtListener`, `SrtCaller`, `Rtp`. @@ -271 +245 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> * min: `0` +>>>>> * min: `1024` @@ -317,0 +292,26 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac +>>> +>>> Rtp -> (structure) +>>> +>>>> The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state. +>>>> +>>>> Port -> (integer) [required] +>>>> +>>>>> The port number used for the RTP protocol in the router input configuration. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `3000` +>>>>> * max: `30000` +>>>>> + +>>>> +>>>> ForwardErrorCorrection -> (string) +>>>> +>>>>> The state of forward error correction for the RTP protocol in the router input configuration. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `ENABLED` +>>>>> * `DISABLED` +>>>>> + @@ -332 +332 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac -> Failover -> (structure) +> MediaLiveChannel -> (structure) @@ -334 +334 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> Configuration settings for a failover router input that allows switching between two input sources. +>> Configuration settings for connecting a router input to a MediaLive channel output. @@ -336 +336 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> NetworkInterfaceArn -> (string) [required] +>> MediaLiveChannelArn -> (string) @@ -338 +338 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> The ARN of the network interface to use for this failover router input. +>>> The ARN of the MediaLive channel to connect to this router input. @@ -342 +342 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> * pattern: `arn:(aws[a-zA-Z-]*):mediaconnect:[a-z0-9-]+:[0-9]{12}:routerNetworkInterface:[a-z0-9]{12}` +>>> * pattern: `arn:(aws[a-zA-Z-]*):medialive:[a-z0-9-]+:[0-9]{12}:channel:[a-zA-Z0-9]+` @@ -346 +346 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> ProtocolConfigurations -> (list) [required] +>> MediaLivePipelineId -> (string) @@ -348 +348 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> A list of exactly two protocol configurations for the failover input sources. Both must use the same protocol type. +>>> The index of the MediaLive pipeline to connect to this router input. @@ -350 +350 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>> (tagged union structure) +>>> Possible values: @@ -352 +352,27 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>> Protocol configuration settings for failover router inputs. +>>> * `PIPELINE_0` +>>> * `PIPELINE_1` +>>> + +>> +>> MediaLiveChannelOutputName -> (string) +>> +>>> The name of the MediaLive channel output to connect to this router input. +>> +>> SourceTransitDecryption -> (structure) [required] +>> +>>> The encryption configuration that defines how content is encrypted during transit between MediaConnect Router and MediaLive. This configuration determines whether encryption keys are automatically managed by the service or manually managed through Secrets Manager. +>>> +>>> EncryptionKeyType -> (string) +>>> +>>>> The type of encryption key to use for MediaLive transit encryption. +>>>> +>>>> Possible values: +>>>> +>>>> * `SECRETS_MANAGER` +>>>> * `AUTOMATIC` +>>>> + +>>> +>>> EncryptionKeyConfiguration -> (tagged union structure) [required] +>>> +>>>> The configuration details for the MediaLive encryption key. @@ -356 +382 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rtp`, `Rist`, `SrtListener`, `SrtCaller`. +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `SecretsManager`, `Automatic`. @@ -358 +384 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>> Rtp -> (structure) +>>>> SecretsManager -> (structure) @@ -360 +386 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state. +>>>>> The configuration settings for transit encryption using Secrets Manager, including the secret ARN and role ARN. @@ -362 +388 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> Port -> (integer) [required] +>>>>> SecretArn -> (string) [required] @@ -364 +390 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> The port number used for the RTP protocol in the router input configuration. +>>>>>> The ARN of the Secrets Manager secret used for transit encryption. @@ -368,2 +394 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> * min: `3000` ->>>>>> * max: `30000` +>>>>>> * pattern: `arn:(aws[a-zA-Z-]*):secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+` @@ -373 +398 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>> ForwardErrorCorrection -> (string) +>>>>> RoleArn -> (string) [required] @@ -375 +400 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> The state of forward error correction for the RTP protocol in the router input configuration. +>>>>>> The ARN of the IAM role assumed by MediaConnect to access the Secrets Manager secret. @@ -377 +402 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> Possible values: +>>>>>> Constraints: @@ -379,2 +404 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> * `ENABLED` ->>>>>> * `DISABLED` +>>>>>> * pattern: `arn:(aws[a-zA-Z-]*):iam::[0-9]{12}:role/[a-zA-Z0-9_+=,.@-]+` @@ -382,0 +407,30 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac +>>>> +>>>> Automatic -> (structure) +>>>> +>>>>> Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation. +> +> Failover -> (structure) +> +>> Configuration settings for a failover router input that allows switching between two input sources. +>> +>> NetworkInterfaceArn -> (string) [required] +>> +>>> The ARN of the network interface to use for this failover router input. +>>> +>>> Constraints: +>>> +>>> * pattern: `arn:(aws[a-zA-Z-]*):mediaconnect:[a-z0-9-]+:[0-9]{12}:routerNetworkInterface:[a-z0-9]{12}` +>>> + +>> +>> ProtocolConfigurations -> (list) [required] +>> +>>> A list of exactly two protocol configurations for the failover input sources. Both must use the same protocol type. +>>> +>>> (tagged union structure) +>>> +>>>> Protocol configuration settings for failover router inputs. +>>>> +>>>> ### Note +>>>> +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Rist`, `SrtListener`, `SrtCaller`, `Rtp`. @@ -478 +532 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->>>>>> * min: `0` +>>>>>> * min: `1024` @@ -525,48 +578,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediac ->> ->> SourcePriorityMode -> (string) [required] ->> ->>> The mode for determining source priority in failover configurations. ->>> ->>> Possible values: ->>> ->>> * `NO_PRIORITY` ->>> * `PRIMARY_SECONDARY` ->>> -