Overview

The AWS CloudFront CDN Embedder is a Lambda@Edge reference implementation that performs real-time per-session forensic watermark embedding at the CDN edge. This release aligns the embedder with backend improvements shipped in Session-API v2.9.0 and TNP-API v1.20.7.

Improvements

  • Improved FWM Token Generation Compatibility: The embedder has been updated to handle the improved watermark token structure introduced in the latest FWM token generation process. This ensures correct token parsing and embedding behavior at the Lambda@Edge layer when using the updated Session-API, preventing edge-layer failures that could occur with the previous token format.

  • Session Revoke Information in History View: Session revoke request data is now surfaced within the FWM session history UI. When a watermark session is revoked (e.g., following a piracy detection event), operators can view the associated revoke metadata directly from the session history, streamlining incident response without requiring separate log queries.

  • Notification Permissions Alignment: Updated in conjunction with the improved FWM notification permissions settings to ensure CDN-side event handling remains consistent with the backend notification architecture changes in TNP-API v1.20.7.

CDN Embedder Sample Availability

DoveRunner provides open-source CDN embedder samples on GitHub for all supported CDN platforms. Each sample includes configuration guides and deployment instructions, and both AES and JWT watermark token formats are supported.

CDN Platform

Implementation

Token Support

GitHub Repository

AWS CloudFront

Lambda@Edge

AES, JWT

fwm-cdn-embedder

AWS CloudFront

CDK environment generator (automated CloudFront + Lambda@Edge setup)

AES

fwm-cdn-embedder-aws-cdk

Akamai

EdgeWorkers

AES, JWT

fwm-cdn-embedder-edgeworkers

Cloudflare

Workers + R2

AES, JWT

fwm-cdn-embedder-cloudflare-workers