AWS::MediaPackageV2::OriginEndpoint Encryption - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::MediaPackageV2::OriginEndpoint Encryption

The parameters for encrypting content.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

Properties

CmafExcludeSegmentDrmMetadata

Excludes SEIG and SGPD boxes from segment metadata in CMAF containers.

When set to true, MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.

Important considerations:

  • This setting only affects CMAF container formats

  • Key rotation can still be handled through media playlist signaling

  • PSSH and TENC boxes remain unaffected

  • Default behavior is preserved when this setting is disabled

Valid values: true | false

Default: false

Required: No

Type: Boolean

Update requires: No interruption

ConstantInitializationVector

A 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).

Required: No

Type: String

Pattern: ^[0-9a-fA-F]+$

Minimum: 32

Maximum: 32

Update requires: No interruption

EncryptionMethod

The encryption method to use.

Required: Yes

Type: EncryptionMethod

Update requires: No interruption

KeyRotationIntervalSeconds

The interval, in seconds, to rotate encryption keys for the origin endpoint.

Required: No

Type: Integer

Minimum: 300

Maximum: 31536000

Update requires: No interruption

SpekeKeyProvider

The SPEKE key provider to use for encryption.

Required: Yes

Type: SpekeKeyProvider

Update requires: No interruption