AWS Security ChangesHomeSearch

AWS mediatailor: Document POST_ADS_RESPONSE and PRE_MANIFEST_INSERTION hook timeouts

Service: mediatailor · 2026-09-27 · Documentation low

File: mediatailor/latest/ug/quotas.md

Summary

Adds quota rows for POST_ADS_RESPONSE and PRE_MANIFEST_INSERTION hook timeouts (2 seconds each) and a combined 2-second hook budget per request, describing behavior when timeouts or budget are exceeded.

Security assessment

This documents execution time limits for ad-insertion hooks. While timeouts can relate to availability/DoS resilience, the text is a functional quota description with no security framing or vulnerability reference.

Evidence

+Combined hook budget per request | 2 seconds | The maximum combined execution time for the PRE_ADS_REQUEST, POST_ADS_RESPONSE, and PRE_MANIFEST_INSERTION hooks within a single request. Time spent by an earlier hook reduces the budget available to later hooks. If the budget is exhausted before a hook starts, MediaTailor skips that hook and continues processing the request.

Diff

diff --git a/mediatailor/latest/ug/quotas.md b/mediatailor/latest/ug/quotas.md
index 36e314a66..5f3fae07c 100644
--- a//mediatailor/latest/ug/quotas.md
+++ b//mediatailor/latest/ug/quotas.md
@@ -33,0 +34,3 @@ PRE_ADS_REQUEST hook timeout | 2 seconds | The maximum number of seconds that a
+POST_ADS_RESPONSE hook timeout | 2 seconds | The maximum number of seconds that a POST_ADS_RESPONSE hook execution can take, including all function steps and HTTP calls. If the hook exceeds its timeout, MediaTailor discards all output and proceeds as if no function was executed.  
+PRE_MANIFEST_INSERTION hook timeout | 2 seconds | The maximum number of seconds that a PRE_MANIFEST_INSERTION hook execution can take, including all function steps and HTTP calls. If the hook exceeds its timeout, MediaTailor discards all output and proceeds as if no function was executed.  
+Combined hook budget per request | 2 seconds | The maximum combined execution time for the PRE_ADS_REQUEST, POST_ADS_RESPONSE, and PRE_MANIFEST_INSERTION hooks within a single request. Time spent by an earlier hook reduces the budget available to later hooks. If the budget is exhausted before a hook starts, MediaTailor skips that hook and continues processing the request.