AWS solutions documentation change
Summary
Updated parameter names and descriptions for CloudFormation stack, added new parameters (ContainerImageUri, EnableRtbRequesterGateway, EnableLogAnalytics, SimulatorEndpoint), and included deployment note about deploy.sh script.
Security assessment
Changes involve parameter renaming (deploy_cloudfront_and_waf_param to InstallCloudFrontAndWAF, ssl_certificate_param to SSLCertificateARN) and added parameters for image URI and connectivity options. No security vulnerability fixes, security advisories, or explicit security improvements are mentioned. WAF/CloudFront reference remains but isn't new security documentation.
Diff
diff --git a/solutions/latest/prebid-server-deployment-on-aws/stack-parameters.md b/solutions/latest/prebid-server-deployment-on-aws/stack-parameters.md index 786d2a3bc..726d70498 100644 --- a//solutions/latest/prebid-server-deployment-on-aws/stack-parameters.md +++ b//solutions/latest/prebid-server-deployment-on-aws/stack-parameters.md @@ -7 +7 @@ -# CDK Stack Parameters +# CloudFormation Stack Parameters @@ -9 +9 @@ -The following table lists the parameters for the stack. +The following table lists the CloudFormation parameters for the PrebidServerStack. @@ -13,10 +13,14 @@ Parameter | Default | Description -**PrebidServerContainerImage** | `public.ecr.aws/aws-solutions/prebid-server:{solution version}` | The fully qualified name of the Prebid Server container image to deploy. Set the env variable OVERRIDE_ECR_REGISTRY to point the deployment to a custom container registry. -**deploy_cloudfront_and_waf_param** | `Yes` | Specifies whether to deploy a CloudFront distribution. If you set it to `Yes`, the solution creates and configures a CloudFront distribution to serve your content. If you set it to `No`, provide your own SSL certificate. -**ssl_certificate_param** | _Optional_ | The ARN of an SSL certificate in AWS Certificate Manager associated with a domain name. This field is only required if **deploy_cloudfront_and_waf_param** is set to `No`. -**ECSTaskMinCapacity** | _2_ | The minimum number of running tasks that Amazon ECS will maintain for the Prebid Server service when ECS is autoscaling based on traffic, CPU, and memory utilization. -**ECSTaskMaxCapacity** | _300_ | The maximum number of running tasks that Amazon ECS will maintain for the Prebid Server service when ECS is autoscaling based on traffic, CPU, and memory utilization. -**RequestsPerTargetThreshold** | _5000_ | The number of requests per target to trigger scaling up the Prebid Server ECS service. -**SpotInstanceWeight** | _1_ | Spot instance weight configuration (On-demand weight fixed at 1). -**deployBiddingSimulator** | `false` | CDK context flag to deploy the optional bidder simulator stack. Set via `--context deployBiddingSimulator=true` or use the `--deploy-bidding-simulator` flag with deploy.sh script. -**enableLogAnalytics** | `false` | CDK context flag to enable the custom analytics adapter for detailed auction-level data collection. Set via `--context enableLogAnalytics=true` or use the `--enable-log-analytics` flag with deploy.sh script. -**includeRtbFabric** | `false` | CDK context flag to enable AWS RTB Fabric integration for private network connectivity. Requires `deployBiddingSimulator=true`. Set via `--context includeRtbFabric=true` or use the `--include-rtb-fabric` flag with deploy.sh script. +**InstallCloudFrontAndWAF** | `Yes` | Specifies whether to deploy a CloudFront distribution and AWS WAF. If set to `Yes`, the solution creates and configures a CloudFront distribution to serve your content. If set to `No`, provide your own SSL certificate. +**SSLCertificateARN** | _(empty)_ | The ARN of an SSL certificate in AWS Certificate Manager associated with a domain name. Only required if **InstallCloudFrontAndWAF** is set to `No`. +**ECSTaskMinCapacity** | `2` | The minimum number of running tasks that Amazon ECS maintains for the Prebid Server service during autoscaling. +**ECSTaskMaxCapacity** | `300` | The maximum number of running tasks that Amazon ECS maintains for the Prebid Server service during autoscaling. +**RequestsPerTargetThreshold** | `5000` | The number of requests per target to trigger scaling up the Prebid Server ECS service. +**SpotInstanceWeight** | `1` | Spot instance weight configuration (on-demand weight fixed at 1). +**ContainerImageUri** | _(empty)_ | An ECR image URI to use instead of building the container from source. When empty, CDK builds the Prebid Server container image during deployment. +**EnableRtbRequesterGateway** | `false` | When `true`, provisions an RTB Fabric Requester Gateway in the Prebid Server VPC. Required for RTB Fabric connectivity (set automatically by `deploy.sh` when using `--simulator-connectivity rtb-fabric`). +**EnableLogAnalytics** | `false` | When `true`, enables the custom analytics adapter for auction-level data collection through the ETL pipeline. +**SimulatorEndpoint** | _(empty)_ | The bidder simulator ALB endpoint URL for VPC peering connectivity. Set automatically by `deploy.sh` when using `--simulator-connectivity vpc-peering`. + +###### Note + +The `deploy.sh` script sets these parameters automatically based on the flags you provide. You only need to set parameters manually when using `cdk deploy` directly.