AWS Elemental MediaConnect
User Guide

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.

Subscribing to Content Provided by Another AWS Account

When another AWS account (originator account) grants an entitlement to your AWS account (subscriber account), you can create a flow that uses the originator's content as your source. To subscribe to content provided by another AWS account, you create a flow based on the entitlement granted to you. You must set up your flow in the same AWS Region as the originator's flow.

You can use an entitlement only once.

Prerequisites

Before you can create your flow, you must do the following:

  • Obtain the following information from the content originator:

    • The entitlement ARN

    • The AWS Region that the originator created the flow in

    • The encryption key and algorithm if the originator set up encryption on the entitlement

  • If the entitlement is encrypted using static key encryption, store the encryption key in AWS Secrets Manager before you begin this procedure. (If the content is encrypted using SPEKE, you don't need to do anything to configure encryption.)

To create a flow based on an entitlement (console)

  1. Open the MediaConnect console at https://console.aws.amazon.com/mediaconnect/.

  2. Verify that you are logged in to the same AWS Region that the originator's flow is in.

  3. On the Flows page, choose Create flow.

  4. In the Details section, for Name, specify a name for your flow.

  5. For Availability Zone, choose an Availability Zone for your flow. This does not need to match the Availability Zone of the originator's flow.

  6. In the Source section, for Source type, choose Entitled source.

  7. For Entitlement ARN, choose the appropriate entitlement. This list includes all entitlements that have been granted to you.

    Tip

    You can click in this field and start typing the entitlement name. AWS Elemental MediaConnect will filter the list to include only entitlements with a name that matches what you type.

  8. If the originator set up static key encryption on the entitlement, choose Enable in the Decryption section and do the following:

    1. For Decryption type, choose Static key.

    2. For Role ARN, specify the ARN of the role that you created when you set up encryption.

    3. For Secret ARN, specify the ARN that AWS Secrets Manager assigned when you created the secret to store the encryption key.

    4. For Decryption algorithm, choose the type of encryption that the originator provided.

    Note

    If the originator set up SPEKE encryption on the entitlement, skip this step. All encryption settings are automatically set with the entitlement.

  9. At the bottom of the page, choose Create flow.

    Note

    The flow does not start automatically. You must start the flow manually.

  10. Add outputs to specify where you want AWS Elemental MediaConnect to send the content, or grant entitlements to allow users of other AWS accounts to subscribe to your content.