Experimental
@aws-cdk/aws-mediaconnect-alpha is an experimental (alpha) package: its API may change in any release, without a major version bump.
SrtPasswordEncryption Struct
SRT password encryption/decryption configuration for SRT Listener and SRT Caller sources and outputs on flows.
The secret must live in the same AWS account and Region as the resource (source or output) that uses it. MediaConnect does not support cross-account or cross-Region secrets.
Example
ts
declare const stack: Stack;
declare const flow: Flow;
declare const role: iam.IRole;
declare const secret: secretsmanager.ISecret;
// SRT Caller output with encryption
const output = new FlowOutput(stack, 'EncryptedOutput', {
flow: flow,
description: 'Encrypted SRT output',
output: OutputConfiguration.srtCaller({
destination: '203.0.113.100',
port: 7000,
encryption: { role, secret },
}),
});
Properties
IAM role that MediaConnect assumes to access the Secrets Manager secret.
Default: a scoped role is auto-created with read access to the secret and a confused-deputy trust condition. See the Encryption section of the module README for the generated trust policy.
If provided, the role is used as-is; you must grant it the necessary permissions yourself.