This is the new AWS CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.
AWS::MediaPackageV2::OriginEndpoint Encryption
The parameters for encrypting content.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "CmafExcludeSegmentDrmMetadata" :Boolean, "ConstantInitializationVector" :String, "EncryptionMethod" :EncryptionMethod, "KeyRotationIntervalSeconds" :Integer, "SpekeKeyProvider" :SpekeKeyProvider}
YAML
CmafExcludeSegmentDrmMetadata:BooleanConstantInitializationVector:StringEncryptionMethod:EncryptionMethodKeyRotationIntervalSeconds:IntegerSpekeKeyProvider:SpekeKeyProvider
Properties
CmafExcludeSegmentDrmMetadata-
Excludes SEIG and SGPD boxes from segment metadata in CMAF containers.
When set to
true, MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.Important considerations:
-
This setting only affects CMAF container formats
-
Key rotation can still be handled through media playlist signaling
-
PSSH and TENC boxes remain unaffected
-
Default behavior is preserved when this setting is disabled
Valid values:
true|falseDefault:
falseRequired: No
Type: Boolean
Update requires: No interruption
-
ConstantInitializationVector-
A 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).
Required: No
Type: String
Pattern:
^[0-9a-fA-F]+$Minimum:
32Maximum:
32Update requires: No interruption
EncryptionMethod-
The encryption method to use.
Required: Yes
Type: EncryptionMethod
Update requires: No interruption
KeyRotationIntervalSeconds-
The interval, in seconds, to rotate encryption keys for the origin endpoint.
Required: No
Type: Integer
Minimum:
300Maximum:
31536000Update requires: No interruption
SpekeKeyProvider-
The SPEKE key provider to use for encryption.
Required: Yes
Type: SpekeKeyProvider
Update requires: No interruption
