Is the Mediaconvert endpoint a sensitive info

0

I have shared my mediaconvert endpoint on social media. Is the endpoint vulnerable? Can someone call it frequently, create saturation and high cost? Can I change the endpoint url?

已提問 2 年前檢視次數 603 次
2 個答案
0

When referring to MediaConvert Endpoint is this the S3 bucket where transcoded files are written? Are you attempting to share video files? Making files in S3 buckets public does have some risk. The recommended method for access would be to use a CloudFront Distribution, with Origin Access Identity (OAI) to the S3 bucket. This will allow only the CloudFront Distribution to request the files. Users can request the files through CloudFront. See this link for how to configure this OAI access. https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-access-to-amazon-s3/

AWS
Mike-ME
已回答 2 年前
0

Hello and thank you for contacting AWS re:Post!

Consider an example endpoint "https://abcd1234.mediaconvert.us-west-1.amazonaws.com". The first eight digits after "https://" are an alphanumeric combination that is unique to your account. The region matches the regional endpoint that you send the request to. This is the endpoint to use for your transcoding requests.

To run transcoding jobs with AWS Elemental MediaConvert, you need an AWS Identity and Access Management (IAM) service role to allow MediaConvert access to your resources, such as your input files and the locations where your output files are stored (1).

Permissions for a job are set in the Job Details > Job Settings > AWS integration (2). The IAM role shown there (service role) would need to be used in order to access your S3 resources and utilize the API endpoint shown under AWS Elemental MediaConvert > Account.

All that said, if you can remove the social media post, that would be ideal, of course. Endpoints will have a different ID per region. I checked internally to see if AWS can change the identifier for your affected regional endpoint. As soon as I get additional info, I'll post a comment to this answer!

Thank you!

Resources

(1) Set up IAM permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/iam-role.html

(2) Creating the IAM role in MediaConvert with configured permissions - https://docs.aws.amazon.com/mediaconvert/latest/ug/creating-the-iam-role-in-mediaconvert-configured.html

AWS
支援工程師
Ron_H
已回答 2 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南