AWS solutions documentation change
Summary
Added documentation for deployment scenarios including Prebid Server only, Prebid Server + Simulator (RTB Fabric), Prebid Server + Simulator (VPC peering), and pre-built container image options with corresponding deploy.sh flags and connectivity details.
Security assessment
The changes describe deployment architecture options and connectivity methods (public internet, RTB Fabric, VPC peering) but contain no evidence of addressing security vulnerabilities, weaknesses, or security incidents. The documentation update focuses on operational configurations without security-specific content.
Diff
diff --git a/solutions/latest/prebid-server-deployment-on-aws/plan-your-deployment.md b/solutions/latest/prebid-server-deployment-on-aws/plan-your-deployment.md index 01bac93cd..2ac4caaee 100644 --- a//solutions/latest/prebid-server-deployment-on-aws/plan-your-deployment.md +++ b//solutions/latest/prebid-server-deployment-on-aws/plan-your-deployment.md @@ -7 +7 @@ -Supported AWS Regions +Supported AWS RegionsDeployment scenarios @@ -11 +11 @@ Supported AWS Regions -This section describes the [cost](./cost1.html), [configurations for ECS Auto Scaling](./configurations-for-elastic.html), [security](./security-1.html), Region, and [quota](./quotas.html) considerations for planning your deployment. +This section describes the [prerequisites](./prerequisites.html), [cost](./cost1.html), [configurations for ECS Auto Scaling](./configurations-for-elastic.html), [security](./security-1.html), Region, deployment scenarios, and [quota](./quotas.html) considerations for planning your deployment. @@ -28,0 +29,15 @@ Asia Pacific (Sydney) | +## Deployment scenarios + +This solution supports multiple deployment modes depending on your connectivity requirements and whether you are deploying the optional bidder simulator. The following table summarizes the available scenarios and the corresponding `deploy.sh` flags. + +Scenario | Description | deploy.sh flags | Connectivity +---|---|---|--- +Prebid Server only | Deploy the core Prebid Server stack without a bidder simulator. Bidders are reached via the public internet through NAT Gateways. | `--profile <p> --region <r>` | Public internet (NAT Gateway) +Prebid Server + Simulator (RTB Fabric) | Deploy both stacks with RTB Fabric connectivity. The `simulator-fabric-link.sh` script creates and manages the Fabric Link after deployment. | `--deploy-bidding-simulator --simulator-connectivity rtb-fabric --profile <p> --region <r>` | RTB Fabric (Requester Gateway → Fabric Link → Responder Gateway) +Prebid Server + Simulator (VPC peering) | Deploy both stacks with VPC peering connectivity. Use this mode in Regions where RTB Fabric is not available. | `--deploy-bidding-simulator --simulator-connectivity vpc-peering --profile <p> --region <r>` | VPC peering (direct network path) +Pre-built container image | Deploy using the pre-built container image from the repository instead of building from source. Requires Git LFS. | `--container-image deployment/container/prebid-server.tar.gz --profile <p> --region <r>` | Any (combine with other flags) + +###### Note + +The `--container-image` flag can be combined with any other deployment scenario. When specified, the script loads the container tar.gz, pushes it to ECR, and uses it for the ECS task definition instead of building from the Dockerfile. + @@ -37 +52 @@ Logging -Cost +Prerequisites