AWS::MediaPackage::PackagingConfiguration SpekeKeyProvider

A configuration for accessing an external Secure Packager and Encoder Key Exchange (SPEKE) service that provides encryption keys.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "EncryptionContractConfiguration" : EncryptionContractConfiguration,
  "RoleArn" : String,
  "SystemIds" : [ String, ... ],
  "Url" : String
}

YAML

  EncryptionContractConfiguration: 
    EncryptionContractConfiguration
  RoleArn: String
  SystemIds: 
    - String
  Url: String

Properties

EncryptionContractConfiguration

Use encryptionContractConfiguration to configure one or more content encryption keys for your endpoints that use SPEKE Version 2.0. The encryption contract defines which content keys are used to encrypt the audio and video tracks in your stream. To configure the encryption contract, specify which audio and video encryption presets to use.

Required: No

Type: EncryptionContractConfiguration

Update requires: No interruption

RoleArn

The ARN for the IAM role that's granted by the key provider to provide access to the key provider API. Valid format: arn:aws:iam::{accountID}:role/{name}

Required: Yes

Type: String

Update requires: No interruption

SystemIds

List of unique identifiers for the DRM systems to use, as defined in the CPIX specification.

Required: Yes

Type: Array of String

Update requires: No interruption

Url

URL for the key provider's key retrieval API endpoint. Must start with https://.

Required: Yes

Type: String

Update requires: No interruption