Is the Mediaconvert endpoint a sensitive info

0

I have shared my mediaconvert endpoint on social media. Is the endpoint vulnerable? Can someone call it frequently, create saturation and high cost? Can I change the endpoint url?

질문됨 2년 전602회 조회
2개 답변
0

When referring to MediaConvert Endpoint is this the S3 bucket where transcoded files are written? Are you attempting to share video files? Making files in S3 buckets public does have some risk. The recommended method for access would be to use a CloudFront Distribution, with Origin Access Identity (OAI) to the S3 bucket. This will allow only the CloudFront Distribution to request the files. Users can request the files through CloudFront. See this link for how to configure this OAI access. https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-access-to-amazon-s3/

AWS
Mike-ME
답변함 2년 전
0

Hello and thank you for contacting AWS re:Post!

Consider an example endpoint "https://abcd1234.mediaconvert.us-west-1.amazonaws.com". The first eight digits after "https://" are an alphanumeric combination that is unique to your account. The region matches the regional endpoint that you send the request to. This is the endpoint to use for your transcoding requests.

To run transcoding jobs with AWS Elemental MediaConvert, you need an AWS Identity and Access Management (IAM) service role to allow MediaConvert access to your resources, such as your input files and the locations where your output files are stored (1).

Permissions for a job are set in the Job Details > Job Settings > AWS integration (2). The IAM role shown there (service role) would need to be used in order to access your S3 resources and utilize the API endpoint shown under AWS Elemental MediaConvert > Account.

All that said, if you can remove the social media post, that would be ideal, of course. Endpoints will have a different ID per region. I checked internally to see if AWS can change the identifier for your affected regional endpoint. As soon as I get additional info, I'll post a comment to this answer!

Thank you!

Resources

(1) Set up IAM permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/iam-role.html

(2) Creating the IAM role in MediaConvert with configured permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/creating-the-iam-role-in-mediaconvert-configured.html

AWS
지원 엔지니어
Ron_H
답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인