Dynamic Media and Ability to Create Unique URL to Asset

[am_DAM_manager]

@apogupta

I am searching for more information on how to use different details in the DM/S7 url, in place of the name of the asset. Right now with the asset name, it is a security issue as it leads directly to accessibility of our visual asset by product id, ,which is in the name. We have heard a different type of url can be created with some other data, ex: asset id, to increase security for the url by removing the ability to guess if you have the product id.

It has been difficult to find information on this topic directly from Adobe. I have found in some AI or other search results and from third parties. However, we would like the official answer and confirm the information from Adobe please.

Our current set-up:

Adobe AEMaaCS with Dynamic Media Classic used to send assets downstream.
Example URL:  images.mycompany.com/is/image/products/1011C052_401_SR_RT$sfcc-product$
1011C052_401_SR_RT would be substituted with other data instead, but still link to this specific asset

Here is the information from Google/AI we would like to verify accuracy and then follow-up with more information, details, video or description from Adobe. What is needed to apply this technology.

Thank you.

Dynamic Media with Open API in Adobe Experience Manager (AEM) Assets provides a mechanism for delivering digital assets, including images and videos, through URLs that incorporate unique identifiers to ensure non-guessable and non-predictive delivery URLs.

Unique IDs and Non-Predictive URLs:

• When assets are published through Dynamic Media, particularly with OpenAPI capabilities enabled, unique identifiers are integrated into the delivery URLs.
• These identifiers are not based on simple sequential numbering or predictable patterns, making the URLs "non-guessable." This enhances security by preventing unauthorized access attempts through brute-force methods of URL guessing.
• The system generates these unique identifiers, ensuring that each published asset rendition or variation has a distinct and non-predictive URL.

Delivery URLs:

• Dynamic Media generates delivery URLs for various renditions of your assets, including different image sizes, formats, and video renditions (e.g., adaptive bitrate streaming).
• These URLs can be directly used in web applications, content management systems, or other platforms to link to and display the optimized assets.
• The "Copy URL" functionality within AEM Assets, when Dynamic Media with OpenAPI is enabled, allows users to easily retrieve the delivery URL for approved assets, which includes these unique, non-predictive identifiers.

Benefits:

• Enhanced Security:

  The use of non-predictive URLs with unique identifiers makes it significantly harder for unauthorized users to guess asset URLs and potentially access or misuse digital assets.
• Improved Content Delivery:

  Dynamic Media optimizes asset delivery, and the unique URLs ensure that the correct, optimized rendition is served efficiently.
• Streamlined Integration:

  The OpenAPI allows for seamless integration with other systems, and the consistent, uniquely identified delivery URLs simplify referencing and embedding assets.

google search: experience league+Dynamic Media with Open API+Unique IDs+non-predictive URL+Delivery URLs+unique identifiers+non-guessable

[apogupta]

yes, you were pointed to in the right direction. Dynamic Media with OpenAPI is a new stack that was made available to all DM customers in June 2024. URL structure in DM with OpenAPI stack is completely different than Scene7 stack. Refer below docs to learn more

https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/assets/dynamicme... 

https://developer.adobe.com/experience-cloud/experience-manager-apis/

You will see 2 documentation - 

1.        Dynamic Media with Open API
2.        Dynamic Media with Open API (Experimental)

Any modifier available in 1st doc (included limited availability ones) is already available for production use and we guarantee its support and backward compatibility. 

For any Experimental modifiers (2nd doc), you can try them using the experimental APIs as mentioned in the doc. If you wish to have any experimental modifier available for production use, please reach out to us via support team

If you are not on DM Prime or DM Ultimate SKU, you would need to raise a support ticket to enable DM with OpenAPI for your Cloud Services env,

[am_DAM_manager]

Thank you Apporva for the information.

I am on the business side product owner of AEM and DM, not on the technical team that supports. So my knowledge is limited to opportunities for different features and benefits.

Can you answer if any of the below functionalities are possible with Dynamic Media Classic and Scene7? Or are they only options in Dynamic Media with OpenAPI? 

Unique IDs and Non-Predictive URLs:

• When assets are published through Dynamic Media, particularly with OpenAPI capabilities enabled, unique identifiers are integrated into the delivery URLs.
• These identifiers are not based on simple sequential numbering or predictable patterns, making the URLs "non-guessable." This enhances security by preventing unauthorized access attempts through brute-force methods of URL guessing.
• The system generates these unique identifiers, ensuring that each published asset rendition or variation has a distinct and non-predictive URL. 

Are there any other ways to obscure the product code, but still pass the url to downstream systems and pull the correct asset/rendition from the DAM? (We have DM Classic with S7.)

If the only way to get a feature like that is upgrade to DM with OpenAPI, what would that look like coming from DM w/ Scene7? Would we lose any current functionality?

Just trying to see what our next steps should be to accomplish this new functionality to secure our DM URL as we are having security breach of our assets.

Thank. you.