Is the Mediaconvert endpoint a sensitive info

0

I have shared my mediaconvert endpoint on social media. Is the endpoint vulnerable? Can someone call it frequently, create saturation and high cost? Can I change the endpoint url?

asked 2 years ago586 views
2 Answers
0

When referring to MediaConvert Endpoint is this the S3 bucket where transcoded files are written? Are you attempting to share video files? Making files in S3 buckets public does have some risk. The recommended method for access would be to use a CloudFront Distribution, with Origin Access Identity (OAI) to the S3 bucket. This will allow only the CloudFront Distribution to request the files. Users can request the files through CloudFront. See this link for how to configure this OAI access. https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-access-to-amazon-s3/

AWS
Mike-ME
answered 2 years ago
0

Hello and thank you for contacting AWS re:Post!

Consider an example endpoint "https://abcd1234.mediaconvert.us-west-1.amazonaws.com". The first eight digits after "https://" are an alphanumeric combination that is unique to your account. The region matches the regional endpoint that you send the request to. This is the endpoint to use for your transcoding requests.

To run transcoding jobs with AWS Elemental MediaConvert, you need an AWS Identity and Access Management (IAM) service role to allow MediaConvert access to your resources, such as your input files and the locations where your output files are stored (1).

Permissions for a job are set in the Job Details > Job Settings > AWS integration (2). The IAM role shown there (service role) would need to be used in order to access your S3 resources and utilize the API endpoint shown under AWS Elemental MediaConvert > Account.

All that said, if you can remove the social media post, that would be ideal, of course. Endpoints will have a different ID per region. I checked internally to see if AWS can change the identifier for your affected regional endpoint. As soon as I get additional info, I'll post a comment to this answer!

Thank you!

Resources

(1) Set up IAM permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/iam-role.html

(2) Creating the IAM role in MediaConvert with configured permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/creating-the-iam-role-in-mediaconvert-configured.html

AWS
SUPPORT ENGINEER
Ron_H
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions