AWS mediatailor: MediaTailor Elemental Inference policy example and region terms
Summary
Rewords 'opt-in Region'/'non-opt-in Region' to 'enabled by default'/'opt-in' terminology, updates the sample account ID from 123456789012 to 111122223333 in the resource-policy examples, and adds a tip about caching GetMetadata responses to reduce request rate.
Security assessment
The changed lines are placeholder account IDs and region terminology inside an existing resource-policy example that already uses aws:SourceAccount/aws:SourceArn confused-deputy conditions; no new security control or vulnerability fix is introduced.
Evidence
+ "aws:SourceAccount": "111122223333"
Diff
diff --git a/mediatailor/latest/ug/monetization-functions-elemental-inference-integration.md b/mediatailor/latest/ug/monetization-functions-elemental-inference-integration.md index 6f61b48..066eca3 100644 --- a//mediatailor/latest/ug/monetization-functions-elemental-inference-integration.md +++ b//mediatailor/latest/ug/monetization-functions-elemental-inference-integration.md @@ -55,2 +55,2 @@ Scenario | Service principal -MediaTailor and Elemental Inference in the same non-opt-in Region, or in different non-opt-in Regions | `mediatailor.amazonaws.com` -MediaTailor in an opt-in Region calling Elemental Inference in a non-opt-in Region | `mediatailor.`region`.amazonaws.com` (for example, `mediatailor.af-south-1.amazonaws.com`) +MediaTailor and Elemental Inference in the same Region that is enabled by default, or in different Regions that are enabled by default | `mediatailor.amazonaws.com` +MediaTailor in an opt-in Region calling Elemental Inference in a Region that is enabled by default | `mediatailor.`region`.amazonaws.com` (for example, `mediatailor.af-south-1.amazonaws.com`) @@ -61 +61 @@ Restrict access to a single MediaTailor Region | `mediatailor.`region`.amazonaws -MediaTailor does not currently support cross-opt-in-Region access (opt-in to different opt-in, or non-opt-in to opt-in). +MediaTailor does not currently support cross-opt-in-Region access (opt-in to different opt-in, or enabled-by-default to opt-in). @@ -75 +75 @@ The following example resource policy grants MediaTailor permission to call `Get - "Resource": "arn:aws:elemental-inference:us-west-2:123456789012:feed/my-contextual-feed", + "Resource": "arn:aws:elemental-inference:us-west-2:111122223333:feed/my-contextual-feed", @@ -78 +78 @@ The following example resource policy grants MediaTailor permission to call `Get - "aws:SourceAccount": "123456789012" + "aws:SourceAccount": "111122223333" @@ -81 +81 @@ The following example resource policy grants MediaTailor permission to call `Get - "aws:SourceArn": "arn:aws:mediatailor:us-west-2:123456789012:playbackConfiguration/*" + "aws:SourceArn": "arn:aws:mediatailor:us-west-2:111122223333:playbackConfiguration/*" @@ -88 +88 @@ The following example resource policy grants MediaTailor permission to call `Get -Replace `us-west-2`, `123456789012`, and `my-contextual-feed` with your Region, account ID, and feed ID. +Replace `us-west-2`, `111122223333`, and `my-contextual-feed` with your Region, account ID, and feed ID. @@ -104 +104 @@ The following example shows a resource policy for an opt-in Region, where the se - "Resource": "arn:aws:elemental-inference:us-west-2:123456789012:feed/my-contextual-feed", + "Resource": "arn:aws:elemental-inference:us-west-2:111122223333:feed/my-contextual-feed", @@ -107 +107 @@ The following example shows a resource policy for an opt-in Region, where the se - "aws:SourceAccount": "123456789012" + "aws:SourceAccount": "111122223333" @@ -110 +110 @@ The following example shows a resource policy for an opt-in Region, where the se - "aws:SourceArn": "arn:aws:mediatailor:af-south-1:123456789012:playbackConfiguration/*" + "aws:SourceArn": "arn:aws:mediatailor:af-south-1:111122223333:playbackConfiguration/*" @@ -240,0 +241,4 @@ The following list explains the key fields in the preceding example: +###### Tip + +Sessions that reach the same ad break often send the same `GetMetadata` request. To reduce the request rate to Elemental Inference, add a `Cache` object to the function. For details and an example, see [Caching HTTP responses](./monetization-functions-caching.html). + @@ -448 +452 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -AWS service request +Caching HTTP responses