AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-10 · Documentation low

File: cli/latest/reference/medialive/describe-channel.md

Summary

Updated AWS CLI version from 2.34.25 to 2.34.28 and added extensive documentation for MediaConnect Router integration including MediaConnectRouterSettings, MediaConnectRouterGroupSettings, and MediaConnectRouterOutputSettings with detailed configuration options for encryption, availability zones, and container settings.

Security assessment

The change adds documentation for encryption configuration in MediaConnect Router settings (EncryptionType and SecretArn fields) which describes how to encrypt data in transit using either AUTOMATIC service-managed secrets or SECRETS_MANAGER with user-provided ARNs. This enhances security documentation but doesn't indicate a specific security issue being fixed. The change primarily documents new feature capabilities rather than addressing a vulnerability.

Diff

diff --git a/cli/latest/reference/medialive/describe-channel.md b/cli/latest/reference/medialive/describe-channel.md
index c19f43498..4ff11122d 100644
--- a//cli/latest/reference/medialive/describe-channel.md
+++ b//cli/latest/reference/medialive/describe-channel.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.25 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.28 Command Reference](../../index.html) »
@@ -357,0 +358,23 @@ Destinations -> (list)
+>> 
+>> MediaConnectRouterSettings -> (list)
+>>
+>>> Destination settings for a MediaConnect Router output; one destination for each redundant encoder.
+>>> 
+>>> (structure)
+>>>
+>>>> MediaConnect Router Output Destination Settings
+>>>> 
+>>>> EncryptionType -> (string)
+>>>>
+>>>>> Encryption configuration for MediaConnect router. When using SECRETS_MANAGER encryption, you must provide the ARN of the secret used to encrypt data in transit. When using AUTOMATIC encryption, a service-managed secret will be used instead.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `AUTOMATIC`
+>>>>>   * `SECRETS_MANAGER`
+>>>>> 
+
+>>>> 
+>>>> SecretArn -> (string)
+>>>>
+>>>>> ARN of the secret used to encrypt this input. Used only with the SECRETS_MANAGER encryption type.
@@ -3190,0 +3214,12 @@ EncoderSettings -> (structure)
+>>>> 
+>>>> MediaConnectRouterGroupSettings -> (structure)
+>>>>
+>>>>> Media Connect Router Group Settings
+>>>>> 
+>>>>> AvailabilityZones -> (list)
+>>>>>
+>>>>>> The names of the Availability Zones in which to write output to MediaConnect Router.
+>>>>>> 
+>>>>>> (string)
+>>>>>>
+>>>>>>> Placeholder documentation for __string
@@ -4934,0 +4970,402 @@ EncoderSettings -> (structure)
+>>>>>> 
+>>>>>> MediaConnectRouterOutputSettings -> (structure)
+>>>>>>
+>>>>>>> Media Connect Router Output Settings
+>>>>>>> 
+>>>>>>> ConnectedRouterInputs -> (structure)
+>>>>>>>
+>>>>>>>> Shows the MediaConnect Router Inputs that are connected to this output. This parameter is purely informative, and editing it will have no effect. To connect or disconnect MediaConnect Router Inputs, go to MediaConnect.
+>>>>>>>> 
+>>>>>>>> Pipeline0 -> (string)
+>>>>>>>>
+>>>>>>>>> The ARN of the MediaConnect Router Input connected to pipeline 0.
+>>>>>>>> 
+>>>>>>>> Pipeline1 -> (string)
+>>>>>>>>
+>>>>>>>>> The ARN of the MediaConnect Router Input connected to pipeline 1.
+>>>>>>> 
+>>>>>>> ContainerSettings -> (structure) [required]
+>>>>>>>
+>>>>>>>> Media Connect Router Container Settings
+>>>>>>>> 
+>>>>>>>> M2tsSettings -> (structure)
+>>>>>>>>
+>>>>>>>>> M2ts Settings
+>>>>>>>>> 
+>>>>>>>>> AbsentInputAudioBehavior -> (string)
+>>>>>>>>>
+>>>>>>>>>> When set to drop, output audio streams will be removed from the program if the selected input audio stream is removed from the input. This allows the output audio configuration to dynamically change based on input configuration. If this is set to encodeSilence, all output audio streams will output encoded silence when not connected to an active input stream.
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `DROP`
+>>>>>>>>>>   * `ENCODE_SILENCE`
+>>>>>>>>>> 
+
+>>>>>>>>> 
+>>>>>>>>> Arib -> (string)
+>>>>>>>>>
+>>>>>>>>>> When set to enabled, uses ARIB-compliant field muxing and removes video descriptor.
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `DISABLED`
+>>>>>>>>>>   * `ENABLED`
+>>>>>>>>>> 
+
+>>>>>>>>> 
+>>>>>>>>> AribCaptionsPid -> (string)
+>>>>>>>>>
+>>>>>>>>>> Packet Identifier (PID) for ARIB Captions in the transport stream. Can be entered as a decimal or hexadecimal value. Valid values are 32 (or 0x20)..8182 (or 0x1ff6).
+>>>>>>>>> 
+>>>>>>>>> AribCaptionsPidControl -> (string)
+>>>>>>>>>
+>>>>>>>>>> If set to auto, pid number used for ARIB Captions will be auto-selected from unused pids. If set to useConfigured, ARIB Captions will be on the configured pid number.
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `AUTO`
+>>>>>>>>>>   * `USE_CONFIGURED`
+>>>>>>>>>> 
+
+>>>>>>>>> 
+>>>>>>>>> AudioBufferModel -> (string)
+>>>>>>>>>
+>>>>>>>>>> When set to dvb, uses DVB buffer model for Dolby Digital audio. When set to atsc, the ATSC model is used.
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `ATSC`
+>>>>>>>>>>   * `DVB`
+>>>>>>>>>> 
+
+>>>>>>>>> 
+>>>>>>>>> AudioFramesPerPes -> (integer)
+>>>>>>>>>
+>>>>>>>>>> The number of audio frames to insert for each PES packet.
+>>>>>>>>> 
+>>>>>>>>> AudioPids -> (string)
+>>>>>>>>>
+>>>>>>>>>> Packet Identifier (PID) of the elementary audio stream(s) in the transport stream. Multiple values are accepted, and can be entered in ranges and/or by comma separation. Can be entered as decimal or hexadecimal values. Each PID specified must be in the range of 32 (or 0x20)..8182 (or 0x1ff6).
+>>>>>>>>> 
+>>>>>>>>> AudioStreamType -> (string)
+>>>>>>>>>
+>>>>>>>>>> When set to atsc, uses stream type = 0x81 for AC3 and stream type = 0x87 for EAC3. When set to dvb, uses stream type = 0x06.
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `ATSC`
+>>>>>>>>>>   * `DVB`
+>>>>>>>>>> 
+
+>>>>>>>>> 
+>>>>>>>>> Bitrate -> (integer)
+>>>>>>>>>
+>>>>>>>>>> The output bitrate of the transport stream in bits per second. Setting to 0 lets the muxer automatically determine the appropriate bitrate.
+>>>>>>>>> 
+>>>>>>>>> BufferModel -> (string)
+>>>>>>>>>
+>>>>>>>>>> Controls the timing accuracy for output network traffic. Leave as MULTIPLEX to ensure accurate network packet timing. Or set to NONE, which might result in lower latency but will result in more variability in output network packet timing. This variability might cause interruptions, jitter, or bursty behavior in your playback or receiving devices.
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `MULTIPLEX`
+>>>>>>>>>>   * `NONE`
+>>>>>>>>>> 
+
+>>>>>>>>> 
+>>>>>>>>> CcDescriptor -> (string)
+>>>>>>>>>
+>>>>>>>>>> When set to enabled, generates captionServiceDescriptor in PMT.
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `DISABLED`
+>>>>>>>>>>   * `ENABLED`
+>>>>>>>>>> 
+
+>>>>>>>>> 
+>>>>>>>>> DvbNitSettings -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Inserts DVB Network Information Table (NIT) at the specified table repetition interval.
+>>>>>>>>>> 
+>>>>>>>>>> NetworkId -> (integer) [required]
+>>>>>>>>>>
+>>>>>>>>>>> The numeric value placed in the Network Information Table (NIT).
+>>>>>>>>>> 
+>>>>>>>>>> NetworkName -> (string) [required]
+>>>>>>>>>>
+>>>>>>>>>>> The network name text placed in the networkNameDescriptor inside the Network Information Table. Maximum length is 256 characters.
+>>>>>>>>>> 
+>>>>>>>>>> RepInterval -> (integer)
+>>>>>>>>>>
+>>>>>>>>>>> The number of milliseconds between instances of this table in the output transport stream.
+>>>>>>>>> 
+>>>>>>>>> DvbSdtSettings -> (structure)
+>>>>>>>>>
+>>>>>>>>>> Inserts DVB Service Description Table (SDT) at the specified table repetition interval.
+>>>>>>>>>> 
+>>>>>>>>>> OutputSdt -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> Selects method of inserting SDT information into output stream. The sdtFollow setting copies SDT information from input stream to output stream. The sdtFollowIfPresent setting copies SDT information from input stream to output stream if SDT information is present in the input, otherwise it will fall back on the user-defined values. The sdtManual setting means user will enter the SDT information. The sdtNone setting means output stream will not contain SDT information.
+>>>>>>>>>>> 
+>>>>>>>>>>> Possible values:
+>>>>>>>>>>> 
+>>>>>>>>>>>   * `SDT_FOLLOW`
+>>>>>>>>>>>   * `SDT_FOLLOW_IF_PRESENT`
+>>>>>>>>>>>   * `SDT_MANUAL`
+>>>>>>>>>>>   * `SDT_NONE`
+>>>>>>>>>>> 
+
+>>>>>>>>>> 
+>>>>>>>>>> RepInterval -> (integer)
+>>>>>>>>>>
+>>>>>>>>>>> The number of milliseconds between instances of this table in the output transport stream.
+>>>>>>>>>>