# CfnFlowSourceProps

Properties for defining a `CfnFlowSource`.

Extends: CfnFlowSourceProps
Used as props by: CfnFlowSource

- Source: Generated code
- Type last changed: v2.245.0 · 27 Mar 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_mediaconnect as mediaconnect } from 'aws-cdk-lib';
const cfnFlowSourceProps: mediaconnect.CfnFlowSourceProps = {
  description: 'description',
  flowArn: 'flowArn',
  name: 'name',

  // the properties below are optional
  decryption: {
    roleArn: 'roleArn',

    // the properties below are optional
    algorithm: 'algorithm',
    constantInitializationVector: 'constantInitializationVector',
    deviceId: 'deviceId',
    keyType: 'keyType',
    region: 'region',
    resourceId: 'resourceId',
    secretArn: 'secretArn',
    url: 'url',
  },
  entitlementArn: 'entitlementArn',
  gatewayBridgeSource: {
    bridgeArn: 'bridgeArn',

    // the properties below are optional
    vpcInterfaceAttachment: {
      vpcInterfaceName: 'vpcInterfaceName',
    },
  },
  ingestPort: 123,
  maxBitrate: 123,
  maxLatency: 123,
  minLatency: 123,
  protocol: 'protocol',
  senderControlPort: 123,
  senderIpAddress: 'senderIpAddress',
  sourceListenerAddress: 'sourceListenerAddress',
  sourceListenerPort: 123,
  streamId: 'streamId',
  tags: [{
    key: 'key',
    value: 'value',
  }],
  vpcInterfaceName: 'vpcInterfaceName',
  whitelistCidr: 'whitelistCidr',
};
```

## Properties

- `decryption`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnFlowSource.EncryptionProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_mediaconnect.CfnFlowSource.EncryptionProperty.html) — The type of encryption that is used on the content ingested from this source.

  Allowable encryption types: static-key.

- `description`: string (required) — A description for the source.

  This value is not used or seen outside of the current MediaConnect account.

- `entitlementArn`: string — this property has been deprecated

  The entitlement is set by the flow originator, and the ARN is generated as part of the originator's flow.

- `flowArn`: string (required) — The Amazon Resource Name (ARN) of the flow this source is connected to.

  The flow must have Failover enabled to add an additional source.

- `gatewayBridgeSource`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnFlowSource.GatewayBridgeSourceProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_mediaconnect.CfnFlowSource.GatewayBridgeSourceProperty.html) — The bridge's source.

- `ingestPort`: number — The port that the flow listens on for incoming content.

  If the protocol of the source is Zixi, the port must be set to 2088.

- `maxBitrate`: number — The smoothing max bitrate (in bps) for RIST, RTP, and RTP-FEC streams.

- `maxLatency`: number — The maximum latency in milliseconds.

  This parameter applies only to RIST-based and Zixi-based streams.

- `minLatency`: number — The minimum latency in milliseconds for SRT-based streams.

  In streams that use the SRT protocol, this value that you set on your MediaConnect source or output represents the minimal potential latency of that connection. The latency of the stream is set to the highest number between the sender’s minimum latency and the receiver’s minimum latency.

- `name`: string (required) — The name of the source.

- `protocol`: string — The protocol that the source uses to deliver the content to MediaConnect.

  Adding additional sources to an existing flow requires Failover to be enabled. When you enable Failover, the additional source must use the same protocol as the existing source. Only the following protocols support failover: Zixi-push, RTP-FEC, RTP, RIST and SRT protocols.

  If you use failover with SRT caller or listener, the `FailoverMode` property must be set to `FAILOVER` . The `FailoverMode` property is found in the `FailoverConfig` resource of the same flow ARN you used for the source's `FlowArn` property. SRT caller/listener does not support merge mode failover.

- `senderControlPort`: number — this property has been deprecated

- `senderIpAddress`: string — this property has been deprecated

- `sourceListenerAddress`: string — Source IP or domain name for SRT-caller protocol.

- `sourceListenerPort`: number — Source port for SRT-caller protocol.

- `streamId`: string — The stream ID that you want to use for this transport.

  This parameter applies only to Zixi and SRT caller-based streams.

- `tags`: [CfnTag](/cdk/api/v2/docs/aws-cdk-lib.CfnTag.html)[] — Key-value pairs that can be used to tag and organize this flow source.

- `vpcInterfaceName`: string — The name of the VPC interface to use for this source.

- `whitelistCidr`: string — The range of IP addresses that should be allowed to contribute content to your source.

  These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16.