AWS cli documentation change
Summary
Added support for MediaConnect Router integration in AWS Elemental MediaLive channels. This includes new parameters for MediaConnect Router output settings, encryption configuration options (AUTOMATIC and SECRETS_MANAGER), and special router settings for MediaConnect Router as a source. The documentation was restructured to accommodate these new features and includes updated AWS CLI version reference.
Security assessment
The changes introduce new encryption configuration options for MediaConnect Router, specifically the ability to use SECRETS_MANAGER encryption with ARN references to secrets for encrypting data in transit. This is a security feature addition rather than a fix for a security vulnerability. The changes document how to configure encryption for MediaConnect Router outputs, which enhances data protection capabilities but does not indicate a security issue was addressed.
Diff
diff --git a/cli/latest/reference/medialive/update-channel.md b/cli/latest/reference/medialive/update-channel.md index 0c25edaab..d8f000cf1 100644 --- a//cli/latest/reference/medialive/update-channel.md +++ b//cli/latest/reference/medialive/update-channel.md @@ -15 +15 @@ - * [AWS CLI 2.34.25 Command Reference](../../index.html) » + * [AWS CLI 2.34.28 Command Reference](../../index.html) » @@ -82,0 +83 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/medial + [--special-router-settings <value>] @@ -250,0 +252,23 @@ JSON Syntax: +> +> MediaConnectRouterSettings -> (list) +> +>> Destination settings for a MediaConnect Router output; one destination for each redundant encoder. +>> +>> (structure) +>> +>>> MediaConnect Router Output Destination Settings +>>> +>>> EncryptionType -> (string) +>>> +>>>> Encryption configuration for MediaConnect router. When using SECRETS_MANAGER encryption, you must provide the ARN of the secret used to encrypt data in transit. When using AUTOMATIC encryption, a service-managed secret will be used instead. +>>>> +>>>> Possible values: +>>>> +>>>> * `AUTOMATIC` +>>>> * `SECRETS_MANAGER` +>>>> + +>>> +>>> SecretArn -> (string) +>>> +>>>> ARN of the secret used to encrypt this input. Used only with the SECRETS_MANAGER encryption type. @@ -255 +279 @@ Shorthand Syntax: - Id=string,MediaPackageSettings=[{ChannelId=string,ChannelGroup=string,ChannelName=string,ChannelEndpointId=string,MediaPackageRegionName=string},{ChannelId=string,ChannelGroup=string,ChannelName=string,ChannelEndpointId=string,MediaPackageRegionName=string}],MultiplexSettings={MultiplexId=string,ProgramName=string},Settings=[{PasswordParam=string,StreamName=string,Url=string,Username=string},{PasswordParam=string,StreamName=string,Url=string,Username=string}],SrtSettings=[{EncryptionPassphraseSecretArn=string,StreamId=string,Url=string,ConnectionMode=string,ListenerPort=integer},{EncryptionPassphraseSecretArn=string,StreamId=string,Url=string,ConnectionMode=string,ListenerPort=integer}],LogicalInterfaceNames=string,string ... + Id=string,MediaPackageSettings=[{ChannelId=string,ChannelGroup=string,ChannelName=string,ChannelEndpointId=string,MediaPackageRegionName=string},{ChannelId=string,ChannelGroup=string,ChannelName=string,ChannelEndpointId=string,MediaPackageRegionName=string}],MultiplexSettings={MultiplexId=string,ProgramName=string},Settings=[{PasswordParam=string,StreamName=string,Url=string,Username=string},{PasswordParam=string,StreamName=string,Url=string,Username=string}],SrtSettings=[{EncryptionPassphraseSecretArn=string,StreamId=string,Url=string,ConnectionMode=string,ListenerPort=integer},{EncryptionPassphraseSecretArn=string,StreamId=string,Url=string,ConnectionMode=string,ListenerPort=integer}],LogicalInterfaceNames=string,string,MediaConnectRouterSettings=[{EncryptionType=string,SecretArn=string},{EncryptionType=string,SecretArn=string}] ... @@ -297 +321,8 @@ JSON Syntax: - "LogicalInterfaceNames": ["string", ...] + "LogicalInterfaceNames": ["string", ...], + "MediaConnectRouterSettings": [ + { + "EncryptionType": "AUTOMATIC"|"SECRETS_MANAGER", + "SecretArn": "string" + } + ... + ] @@ -3118,0 +3150,12 @@ JSON Syntax: +>>>> +>>>> MediaConnectRouterGroupSettings -> (structure) +>>>> +>>>>> Media Connect Router Group Settings +>>>>> +>>>>> AvailabilityZones -> (list) +>>>>> +>>>>>> The names of the Availability Zones in which to write output to MediaConnect Router. +>>>>>> +>>>>>> (string) +>>>>>> +>>>>>>> Placeholder documentation for __string @@ -4863,180 +4905,0 @@ JSON Syntax: ->>>>> ->>>>> VideoDescriptionName -> (string) ->>>>> ->>>>>> The name of the VideoDescription used as the source for this output. -> -> TimecodeConfig -> (structure) [required] -> ->> Contains settings used to acquire and adjust timecode information from inputs. ->> ->> Source -> (string) [required] ->> ->>> Identifies the source for the timecode that will be associated with the events outputs. -Embedded (embedded): Initialize the output timecode with timecode from the the source. If no embedded timecode is detected in the source, the system falls back to using “Start at 0” (zerobased). -System Clock (systemclock): Use the UTC time. -Start at 0 (zerobased): The time of the first frame of the event will be 00:00:00:00. ->>> ->>> Possible values: ->>> ->>> * `EMBEDDED` ->>> * `SYSTEMCLOCK` ->>> * `ZEROBASED` ->>> - ->> ->> SyncThreshold -> (integer) ->> ->>> Threshold in frames beyond which output timecode is resynchronized to the input timecode. Discrepancies below this threshold are permitted to avoid unnecessary discontinuities in the output timecode. No timecode sync when this is not specified. -> -> VideoDescriptions -> (list) [required] -> ->> Placeholder documentation for __listOfVideoDescription ->> ->> (structure) ->> ->>> Video settings for this stream. ->>> ->>> CodecSettings -> (structure) ->>> ->>>> Video codec settings. ->>>> ->>>> FrameCaptureSettings -> (structure) ->>>> ->>>>> Frame Capture Settings ->>>>> ->>>>> CaptureInterval -> (integer) ->>>>> ->>>>>> The frequency at which to capture frames for inclusion in the output. May be specified in either seconds or milliseconds, as specified by captureIntervalUnits. ->>>>> ->>>>> CaptureIntervalUnits -> (string) ->>>>> ->>>>>> Unit for the frame capture interval. ->>>>>> ->>>>>> Possible values: ->>>>>> ->>>>>> * `MILLISECONDS` ->>>>>> * `SECONDS` ->>>>>> - ->>>>> ->>>>> TimecodeBurninSettings -> (structure) ->>>>> ->>>>>> Timecode burn-in settings ->>>>>> ->>>>>> FontSize -> (string) [required] ->>>>>> ->>>>>>> Choose a timecode burn-in font size ->>>>>>> ->>>>>>> Possible values: ->>>>>>> ->>>>>>> * `EXTRA_SMALL_10` ->>>>>>> * `LARGE_48` ->>>>>>> * `MEDIUM_32` ->>>>>>> * `SMALL_16` ->>>>>>> - ->>>>>> ->>>>>> Position -> (string) [required] ->>>>>> ->>>>>>> Choose a timecode burn-in output position ->>>>>>> ->>>>>>> Possible values: ->>>>>>> ->>>>>>> * `BOTTOM_CENTER` ->>>>>>> * `BOTTOM_LEFT` ->>>>>>> * `BOTTOM_RIGHT` ->>>>>>> * `MIDDLE_CENTER` ->>>>>>> * `MIDDLE_LEFT` ->>>>>>> * `MIDDLE_RIGHT` ->>>>>>> * `TOP_CENTER` ->>>>>>> * `TOP_LEFT` ->>>>>>> * `TOP_RIGHT` ->>>>>>> - ->>>>>> ->>>>>> Prefix -> (string) ->>>>>> ->>>>>>> Create a timecode burn-in prefix (optional) ->>>> ->>>> H264Settings -> (structure) ->>>> ->>>>> H264 Settings ->>>>> ->>>>> AdaptiveQuantization -> (string) ->>>>> ->>>>>> Enables or disables adaptive quantization (AQ), which is a technique MediaLive can apply to video on a frame-by-frame basis to produce more compression without losing quality. There are three types of adaptive quantization: spatial, temporal, and flicker. We recommend that you set the field to Auto. For more information about all the options, see the topic about video adaptive quantization in the MediaLive user guide. ->>>>>> ->>>>>> Possible values: ->>>>>> ->>>>>> * `AUTO` ->>>>>> * `HIGH` ->>>>>> * `HIGHER` ->>>>>> * `LOW` ->>>>>> * `MAX` ->>>>>> * `MEDIUM` ->>>>>> * `OFF` ->>>>>> - ->>>>> ->>>>> AfdSignaling -> (string) ->>>>> ->>>>>> Indicates that AFD values will be written into the output stream. If afdSignaling is “auto”, the system will try to preserve the input AFD value (in cases where multiple AFD values are valid). If set to “fixed”, the AFD value will be the value configured in the fixedAfd parameter. ->>>>>> ->>>>>> Possible values: ->>>>>> ->>>>>> * `AUTO` ->>>>>> * `FIXED` ->>>>>> * `NONE` ->>>>>> - ->>>>> ->>>>> Bitrate -> (integer) ->>>>> ->>>>>> Average bitrate in bits/second. Required when the rate control mode is VBR or CBR. Not used for QVBR. In an MS Smooth output group, each output must have a unique value when its bitrate is rounded down to the nearest multiple of 1000. ->>>>> ->>>>> BufFillPct -> (integer) ->>>>> ->>>>>> Percentage of the buffer that should initially be filled (HRD buffer model). ->>>>> ->>>>> BufSize -> (integer) ->>>>> ->>>>>> Size of buffer (HRD buffer model) in bits. ->>>>> ->>>>> ColorMetadata -> (string)