Menu
AWS Elemental MediaConvert
User Guide

Step 3: Set Up IAM Permissions

To run transcoding jobs with AWS Elemental MediaConvert, first set up an AWS Identity and Access Management (IAM) role to allow AWS Elemental MediaConvert access to your input files and the locations where your output files are stored. If you use DRM, your IAM permissions also allow AWS Elemental MediaConvert to access your encryption keys through API Gateway.

To set up your AWS Elemental MediaConvert role in IAM

  1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane of the IAM console, choose Roles. Then choose Create role.

  3. Choose the AWS service role type, and then choose the MediaConvert service.

  4. Choose the MediaConvert use case for your service. Then choose Next: Permissions. The service has already defined the permissions used by the role. These permissions grant AWS Elemental MediaConvert these permissions:

    • Full access to your Amazon S3 resources

    • API Gateway invoke full access

    The only entity that can assume this role is the AWS Elemental MediaConvert service.

  5. Choose Next: Review.

  6. For Role name, type a name that describes the purpose of the role. You might want to begin the name with "MediaConvert" to make it easy to find when you are creating a job.

    Role names must be unique within your AWS account. You can use up to 64 characters that are letters, numbers, or among the following + = , . @ - _.

    Because various entities might reference the role, you cannot edit the name of the role after it has been created.

  7. (Optional) For Role description, edit the description for the new service role.

  8. Review the role, and then choose Create role.