AWS mediatailor: Document session.accept_language variable and header forwarding
Summary
Adds documentation for the [session.accept_language] session variable, noting case-insensitive header lookup and that CDN/proxy setups must forward the Accept-Language header, including a note that the CloudFront managed policy Managed-Elemental-MediaTailor-PersonalizedManifests does not forward it.
Security assessment
The change documents a new session variable and CDN/proxy header-forwarding configuration. It touches header handling and CloudFront origin request policies, which is security-adjacent configuration guidance, but it addresses functionality (localization) rather than a specific vulnerability or access-control concern.
Evidence
+`[session.accept_language]` | No | | The `Accept-Language` header that MediaTailor received from the player's session initialization request. Header lookup is case-insensitive. If the player does not provide this header, MediaTailor leaves `[session.accept_language]` empty. If you use a CDN or proxy in front of the manifest endpoint, configure it to forward the `Accept-Language` header from the player. The CloudFront managed policy `Managed-Elemental-MediaTailor-PersonalizedManifests` does not forward this header. Use a policy that forwards `Accept-Language` (such as `AllViewer`) or add it to a custom origin request policy allowlist.
Diff
diff --git a/mediatailor/latest/ug/variables-session.md b/mediatailor/latest/ug/variables-session.md index ace47b5f7..3e498c3ba 100644 --- a//mediatailor/latest/ug/variables-session.md +++ b//mediatailor/latest/ug/variables-session.md @@ -51,0 +52 @@ Value can be a string. +`[session.accept_language]` | No | | The `Accept-Language` header that MediaTailor received from the player's session initialization request. Header lookup is case-insensitive. If the player does not provide this header, MediaTailor leaves `[session.accept_language]` empty. If you use a CDN or proxy in front of the manifest endpoint, configure it to forward the `Accept-Language` header from the player. The CloudFront managed policy `Managed-Elemental-MediaTailor-PersonalizedManifests` does not forward this header. Use a policy that forwards `Accept-Language` (such as `AllViewer`) or add it to a custom origin request policy allowlist.