CloudFront Media Behavior Automation Web PHP v151

v151 converts Dry run and Apply to AJAX-only streaming actions. The app no longer uses normal page POST for CloudFront changes. A browser refresh cannot replay Apply.

Safety behavior

• Dry run and Apply use ajax-run-action.
• Normal page POST for Dry run / Apply is blocked before CloudFront calls.
• Each Dry run / Apply requires a fresh action token from the current rendered page.
• The action token rotates immediately when the run starts.
• Old or reloaded POST bodies are blocked before CloudFront calls.

Progress behavior

• Apply/Dry run stream newline-delimited JSON progress rows.
• The result panel updates as progress rows arrive.
• The browser receives output during the run instead of waiting on a silent spinner.

CloudFront behavior

• Apply/Dry run use the same AWS credential resolver as the green AWS credential test.
• Apply no longer uses a browser confirm popup.
• JSON directory-index behavior is intentionally left untouched.
• Generated media behaviors preserve/restore default Lambda@Edge and CloudFront Function associations.

Built 2026-05-21T01:26:12Z.