Securing The Server - Adobe MEDIA SERVER User Manual

USING ADOBE MEDIA SERVER ON AMAZON WEB SERVICES
Using Adobe Media Server on Amazon Web Services
Amazon Web Services features
Adobe Media Server on Amazon Web Services supports all HTTP streaming features supported on Adobe Media
Server including HLS and HDS.
Adobe Media Server on Amazon Web Services does not support the following Amazon Web Services features:
• Reserve instances
• Spot instances
• Amazon VPC
• Booting from Elastic Block Store (EBS) volumes
• Rebundling instances

Securing the server

Modifying a Security Group
When you create an instance, you must create a Security Group or select an existing Security Group. A Security Group
is the Amazon Web Services term for a firewall. Configure the Security Group to allow and deny access to the instance.
When an instance is running, you cannot change the Security Group it belongs to. You can modify the rules of that
Security Group, however.
Amazon says, "A security group defines firewall rules for your instances. These rules specify which incoming network
traffic should be delivered to your instance (e.g., accept web traffic on port 80). All other traffic is ignored. You can
modify rules for a group at any time. The new rules are automatically enforced for all running instances."
In the AWS Management
1
Select the Security Group to modify. The rules for the Security Group are displayed in the lower pane.
2
3 To add a rule, provide the following information and click Save:
• Protocol
This menu contains a list of protocols and the ports they most commonly use. For example, HTTP uses port 80.
The RTMP protocol is not included in this list. To add it, select Custom and enter 1935 for the From Port and
To Port.
• From Port
This is the low number in a range. To open a single port, use the same value for the From Port and To Port.
• To Port
This is the high number in a range. To open a single port, use the same value for the From Port and To Port.
• Source (IP or Group).
From the Amazon
group name in the Connection Source field.To configure this rule to apply to an IP address range, enter the
CIDR range. For example, enter 0.0.0.0/0 to allow all IP addresses to access the specified port range. Enter an IP
address or subnet to limit access to that one computer or network, for example 92.23.32.51/32.
Console, in the Navigation pane, click Security Groups.
documentation: To allow access from other instances in a security group, enter the security
Last updated 9/20/2013
22