AWS::MediaPackageV2::OriginEndpoint SpekeKeyProvider - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::MediaPackageV2::OriginEndpoint SpekeKeyProvider

The parameters for the SPEKE key provider.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "DrmSystems" : [ String, ... ],
  "EncryptionContractConfiguration" : EncryptionContractConfiguration,
  "ResourceId" : String,
  "RoleArn" : String,
  "Url" : String
}

Properties

DrmSystems

The DRM solution provider you're using to protect your content during distribution.

Required: Yes

Type: Array of String

Minimum: 1

Maximum: 4

Update requires: No interruption

EncryptionContractConfiguration

The encryption contract configuration associated with the SPEKE key provider.

Required: Yes

Type: EncryptionContractConfiguration

Update requires: No interruption

ResourceId

The unique identifier for the content. The service sends this identifier to the key server to identify the current endpoint. How unique you make this identifier depends on how fine-grained you want access controls to be. The service does not permit you to use the same ID for two simultaneous encryption processes. The resource ID is also known as the content ID.

The following example shows a resource ID: MovieNight20171126093045

Required: Yes

Type: String

Pattern: ^[0-9a-zA-Z_-]+$

Minimum: 1

Maximum: 256

Update requires: No interruption

RoleArn

The ARN for the IAM role granted by the key provider that provides access to the key provider API. This role must have a trust policy that allows MediaPackage to assume the role, and it must have a sufficient permissions policy to allow access to the specific key retrieval URL. Get this from your DRM solution provider.

Valid format: arn:aws:iam::{accountID}:role/{name}. The following example shows a role ARN: arn:aws:iam::444455556666:role/SpekeAccess

Required: Yes

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

Url

The URL of the SPEKE key provider.

Required: Yes

Type: String

Minimum: 1

Maximum: 1024

Update requires: No interruption