Edge connector for Kinesis Video Streams - Amazon IoT Greengrass
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Edge connector for Kinesis Video Streams

The edge connector for Kinesis Video Streams component (aws.iot.EdgeConnectorForKVS) reads video feeds from local cameras and publishes the streams to Kinesis Video Streams. You can configure this component to read video feeds from Internet Protocol (IP) cameras using Real Time Streaming Protocol (RTSP). Then, you can set up dashboards in Amazon Managed Grafana or local Grafana servers to monitor and interact with the video streams.

You can integrate this component with Amazon IoT TwinMaker to display and control video streams in Grafana dashboards. Amazon IoT TwinMaker is an Amazon service that enables you to build operational digital twins of physical systems. You can use Amazon IoT TwinMaker to visualize data from sensors, cameras, and enterprise applications for you to track your physical factories, buildings, or industrial plants. You can also use this data to monitor operations, diagnose errors, and repair errors. For more information, see What is Amazon IoT TwinMaker? in the Amazon IoT TwinMaker User Guide.

This component stores its configuration in Amazon IoT SiteWise, which is an Amazon service that models and stores industrial data. In Amazon IoT SiteWise, assets represent objects such as devices, equipment, or groups of other objects. To configure and use this component, you create an Amazon IoT SiteWise asset for each Greengrass core device and for each IP camera connected to each core device. Each asset has properties that you configure to control features, such as live streaming, on-demand upload, and local caching. To specify the URL for each camera, you create a secret in Amazon Secrets Manager that contains the URL of the camera. If the camera requires authentication, you also specify a user name and password in the URL. Then, you specify that secret in an asset property for the IP camera.

This component uploads each camera's video stream to a Kinesis video stream. You specify the name of the destination Kinesis video stream in the Amazon IoT SiteWise asset configuration for each camera. If the Kinesis video stream doesn't exist, this component creates it for you.

Amazon IoT TwinMaker provides a script that you can run to create these Amazon IoT SiteWise assets and Secrets Manager secrets. For more information about how to create these resources, and how to install, configure, and use this component, see Amazon IoT TwinMaker video integration in the Amazon IoT TwinMaker User Guide.

Note

The edge connector for Kinesis Video Streams component is available only in the following Amazon Web Services Regions:

  • US East (N. Virginia)

  • US West (Oregon)

  • Europe (Frankfurt)

  • Europe (Ireland)

  • Asia Pacific (Singapore)

Versions

This component has the following versions:

  • 1.0.x

Type

This component is a generic component (aws.greengrass.generic). The Greengrass nucleus runs the component's lifecycle scripts.

For more information, see Component types.

Operating system

This component can be installed on Linux core devices only.

Requirements

This component has the following requirements:

  • You can deploy this component to only single core devices, because the component configuration must be unique for each core device. You can't deploy this component to groups of core devices.

  • GStreamer 1.18.4 or later installed on the core device. For more information, see Installing GStreamer.

    On a device with apt, you can run the following commands to install GStreamer.

    sudo apt install -y libgstreamer1.0-dev libgstreamer-plugins-base1.0-dev gstreamer1.0-plugins-base-apps sudo apt install -y gstreamer1.0-libav sudo apt install -y gstreamer1.0-plugins-bad gstreamer1.0-plugins-good gstreamer1.0-plugins-ugly gstreamer1.0-tools
  • An Amazon IoT SiteWise asset for each core device. This Amazon IoT SiteWise asset represents the core device. For more information about how to create this asset, see Amazon IoT TwinMaker video integration in the Amazon IoT TwinMaker User Guide.

  • An Amazon IoT SiteWise asset for each IP camera that you connect to each core device. These Amazon IoT SiteWise assets represent the cameras that stream video to each core device. Each camera's asset must be associated to the asset for the core device that connects to the camera. Camera assets have properties that you can configure to specify a Kinesis video stream, an authentication secret, and video streaming parameters. For more information about how to create and configure camera assets, see Amazon IoT TwinMaker video integration in the Amazon IoT TwinMaker User Guide.

  • An Amazon Secrets Manager secret for each IP camera. This secret must define a key-value pair, where the key is RTSPStreamUrl, and the value is the URL for the camera. If the camera requires authentication, include the user name and password in this URL. You can use a script to create a secret when you create the resources that this component requires. For more information, see Amazon IoT TwinMaker video integration in the Amazon IoT TwinMaker User Guide.

    You can also use the Secrets Manager console and API to create additional secrets. For more information, see Create a secret in the Amazon Secrets Manager User Guide.

  • The Greengrass token exchange role must allow the following Amazon Secrets Manager, Amazon IoT SiteWise, and Kinesis Video Streams actions, as shown in the following example IAM policy.

    Note

    This example policy allows the device to get the value of secrets named IPCamera1Url and IPCamera2Url. When you configure each IP camera, you specify a secret that contains the URL for that camera. If the camera requires authentication, you also specify a user name and password in the URL. The core device's token exchange role must allow access to the secret for each IP camera to connect.

    { "Version": "2012-10-17", "Statement": [ { "Action": [ "secretsmanager:GetSecretValue" ], "Effect": "Allow", "Resource": [ "arn:aws-cn:secretsmanager:region:account-id:secret:IPCamera1Url", "arn:aws-cn:secretsmanager:region:account-id:secret:IPCamera2Url" ] }, { "Action": [ "iotsitewise:BatchPutAssetPropertyValue", "iotsitewise:DescribeAsset", "iotsitewise:DescribeAssetModel", "iotsitewise:DescribeAssetProperty", "iotsitewise:GetAssetPropertyValue", "iotsitewise:ListAssetRelationships", "iotsitewise:ListAssets", "iotsitewise:ListAssociatedAssets", "kinesisvideo:CreateStream", "kinesisvideo:DescribeStream", "kinesisvideo:GetDataEndpoint", "kinesisvideo:PutMedia", "kinesisvideo:TagStream" ], "Effect": "Allow", "Resource": [ "*" ] } ] }
    Note

    If you use a customer managed Amazon Key Management Service key to encrypt secrets, the device role must also allow the kms:Decrypt action.

Endpoints and ports

This component must be able to perform outbound requests to the following endpoints and ports, in addition to endpoints and ports required for basic operation. For more information, see Allow device traffic through a proxy or firewall.

Endpoint Port Required Description

kinesisvideo.region.amazonaws.com

443 Yes

Upload data to Kinesis Video Streams.

data.iotsitewise.region.amazonaws.com

443 Yes

Publish video stream metadata to Amazon IoT SiteWise.

secretsmanager.region.amazonaws.com

443 Yes

Download camera URL secrets to the core device.

Dependencies

When you deploy a component, Amazon IoT Greengrass also deploys compatible versions of its dependencies. This means that you must meet the requirements for the component and all of its dependencies to successfully deploy the component. This section lists the dependencies for the released versions of this component and the semantic version constraints that define the component versions for each dependency. You can also view the dependencies for each version of the component in the Amazon IoT Greengrass console. On the component details page, look for the Dependencies list.

The following table lists the dependencies for versions 1.0.0 to 1.0.4 of this component.

Dependency Compatible versions Dependency type
Token exchange service >=2.0.3 Hard
Stream manager >=2.0.9 Hard

For more information about component dependencies, see the component recipe reference.

Configuration

This component provides the following configuration parameters that you can customize when you deploy the component.

SiteWiseAssetIdForHub

The ID of the Amazon IoT SiteWise asset that represents this core device. For more information about how to create this asset and use it to interact with this component, see Amazon IoT TwinMaker video integration in the Amazon IoT TwinMaker User Guide.

Example: Configuration merge update
{ "SiteWiseAssetIdForHub": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111" }

Licenses

This component includes the following third-party software/licensing:

Usage

To configure and interact with this component, you can set properties on the Amazon IoT SiteWise assets that represent the core device and the IP cameras where it connects. You can also visualize and interact with video streams in Grafana dashboards through Amazon IoT TwinMaker. For more information, see Amazon IoT TwinMaker video integration in the Amazon IoT TwinMaker User Guide.

Local log file

This component uses the following log file.

/greengrass/v2/logs/aws.iot.EdgeConnectorForKVS.log
To view this component's logs
  • Run the following command on the core device to view this component's log file in real time. Replace /greengrass/v2 with the path to the Amazon IoT Greengrass root folder.

    sudo tail -f /greengrass/v2/logs/aws.iot.EdgeConnectorForKVS.log

Changelog

The following table describes the changes in each version of the component.

Version

Changes

1.0.4

Bug fixes and improvements
  • Fixes an issue that caused live uploading to stop.

1.0.3

General bug fixes and improvements.

1.0.1

General bug fixes and improvements.

1.0.0

Initial version.

See also