interface StaticKeyEncryption 🔹

Language	Type name
.NET	`Amazon.CDK.AWS.MediaConnect.Alpha.StaticKeyEncryption`
Go	`github.com/aws/aws-cdk-go/awsmediaconnectalpha/v2#StaticKeyEncryption`
Java	`software.amazon.awscdk.services.mediaconnect.alpha.StaticKeyEncryption`
Python	`aws_cdk.aws_mediaconnect_alpha.StaticKeyEncryption`
TypeScript (source)	`@aws-cdk/aws-mediaconnect-alpha` » `StaticKeyEncryption`

Static key encryption/decryption configuration for Zixi protocol sources and outputs, and flow entitlements.

The secret must live in the same AWS account and Region as the resource (source, output, or entitlement) that uses it. MediaConnect does not support cross-account or cross-Region secrets.

Example

declare const stack: Stack;
declare const flow: Flow;
declare const role: iam.IRole;
declare const secret: secretsmanager.ISecret;

const entitlement = new FlowEntitlement(stack, 'MyEntitlement', {
  flow: flow,
  description: 'Grant partner access to live feed',
  subscribers: ['111122223333'],
  encryption: {
    role,
    secret,
    algorithm: EncryptionAlgorithm.AES256,
  },
});

Properties

Name	Type	Description
algorithm🔹	`EncryptionAlgorithm`	The encryption algorithm to use.
secret🔹	`ISecret`	Secrets Manager secret containing the static encryption key.
role?🔹	`IRole`	IAM role that MediaConnect assumes to access the Secrets Manager secret.

algorithm🔹

Type: EncryptionAlgorithm

The encryption algorithm to use.

secret🔹

Type: ISecret

Secrets Manager secret containing the static encryption key.

role?🔹

Type: IRole (optional, default: a scoped role is auto-created with read access to the secret (including kms:Decrypt for a customer-managed key) and a confused-deputy trust condition. See the Encryption section of the module README for the generated trust policy.)

IAM role that MediaConnect assumes to access the Secrets Manager secret.

If provided, the role is used as-is; you must grant it the necessary permissions yourself.

AWS CDK