Is the Mediaconvert endpoint a sensitive info

0

I have shared my mediaconvert endpoint on social media. Is the endpoint vulnerable? Can someone call it frequently, create saturation and high cost? Can I change the endpoint url?

demandé il y a 2 ans603 vues
2 réponses
0

When referring to MediaConvert Endpoint is this the S3 bucket where transcoded files are written? Are you attempting to share video files? Making files in S3 buckets public does have some risk. The recommended method for access would be to use a CloudFront Distribution, with Origin Access Identity (OAI) to the S3 bucket. This will allow only the CloudFront Distribution to request the files. Users can request the files through CloudFront. See this link for how to configure this OAI access. https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-access-to-amazon-s3/

AWS
Mike-ME
répondu il y a 2 ans
0

Hello and thank you for contacting AWS re:Post!

Consider an example endpoint "https://abcd1234.mediaconvert.us-west-1.amazonaws.com". The first eight digits after "https://" are an alphanumeric combination that is unique to your account. The region matches the regional endpoint that you send the request to. This is the endpoint to use for your transcoding requests.

To run transcoding jobs with AWS Elemental MediaConvert, you need an AWS Identity and Access Management (IAM) service role to allow MediaConvert access to your resources, such as your input files and the locations where your output files are stored (1).

Permissions for a job are set in the Job Details > Job Settings > AWS integration (2). The IAM role shown there (service role) would need to be used in order to access your S3 resources and utilize the API endpoint shown under AWS Elemental MediaConvert > Account.

All that said, if you can remove the social media post, that would be ideal, of course. Endpoints will have a different ID per region. I checked internally to see if AWS can change the identifier for your affected regional endpoint. As soon as I get additional info, I'll post a comment to this answer!

Thank you!

Resources

(1) Set up IAM permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/iam-role.html

(2) Creating the IAM role in MediaConvert with configured permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/creating-the-iam-role-in-mediaconvert-configured.html

AWS
INGÉNIEUR EN ASSISTANCE TECHNIQUE
Ron_H
répondu il y a 2 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions