Troubleshooting Mediaconnect

IF error mentions VPC interface:
  → EFA required for CDI/ST2110 JPEG XS. Max 1 EFA per flow. Second must be ENA.
  → Subnet and SG MUST be in same AZ as flow.
  → Verify subnet has available IP addresses.
IF error mentions "Unable to assume role":
  → IAM trust policy MUST include mediaconnect.amazonaws.com
  → Action array MUST include sts:TagSession alongside sts:AssumeRole
IF CDI workflow:
  → Flow and MediaLive input MUST be in same AZ (use AZ IDs, not names)
IF source bitrate exceeds flow size:
  → Flow tiers set the max bitrate: Standard 80 Mbps, Large 150 Mbps, Extra Large 400 Mbps.
  → ST 2110/CDI REQUIRE Large or Extra Large.

IF protocol is ST 2110:
  → Verify ALL ports open (separate UDP per essence: video, audio, ancillary)
  → WhitelistCidr is INVALID at source level for ST 2110 JPEG XS
  → Define ports in MediaStreamSourceConfigurations[].InputConfigurations[]
IF protocol is CDI:
  → Self-referencing SG rules required (same SG on both MediaConnect and MediaLive)
IF protocol is SRT:
  → Verify caller/listener mode matches between source and MediaConnect
  → Latency SHOULD be approximately 4× measured RTT; insufficient latency causes packet loss
  → Passphrase must match (10-79 characters)
IF using Direct Connect:
  → Keep DX utilization well below the link's steady-state ceiling so SRT retransmission bursts do not cause loss (around 50% is a common operator target)
  → Monitor DX utilization, have backup path

IF CDI output:
  → Output and destination MUST be in same AZ. Cross-AZ CDI is not supported.
  → Verify using AZ IDs (use1-az1), not AZ names.
IF targeting MediaLive input:
  → MediaLive input MUST exist before creating MediaConnect output
  → Verify endpoint IPs are correct (from describe-input)
IF SourcePTSError > 0:
  → PTS discontinuities in source. Check encoder stability.
  → Increase MaxSyncBuffer (valid: 0-250) for jittery sources.
IF entitlement (cross-account):
  → Verify entitlement is active and subscriber has accepted it.

IF full AZ redundancy needed:
  → Dual-AZ input → Dual-AZ output (paired resilient endpoints)
IF dual-AZ input → single-AZ output:
  → WARNING: negates availability benefit
IF cross-account routing needed:
  → Use VPC peering or MediaConnect entitlements (not natively supported)