Resource-based policy examples for AWS Elemental MediaTailor

To learn how to attach a resource-based policy to a channel, see Creating channels.

Anonymous access

Consider the following Allow policy. With this policy in effect, MediaTailor allows anonymous access to the mediatailor:GetManifest action on the channel resource in the policy. This occurs where region is the AWS Region, accountID is your AWS account ID, and channelName is the name of the channel resource.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowAnonymous",
      "Effect": "Allow",
      "Principal": "*",
      "Action": "mediatailor:GetManifest",
      "Resource": "arn:aws:mediatailor:region:accountID:channel/channelName"
    }
  ]
}

Cross-account access

Consider the following Allow policy. With this policy in effect, MediaTailor allows the mediatailor:GetManifest action on the channel resource in the policy, across accounts. This occurs where region is the AWS Region, accountID is your AWS account ID, and channelName is the name of the channel resource.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCrossAccountAccess",
      "Effect": "Allow",
      "Principal": {"AWS":  "arn:aws:iam::111111111111:root"},
      "Action": "mediatailor:GetManifest",
      "Resource": "arn:aws:mediatailor:region:accountID:channel/channelName"
    }
  ]
}