Encryption
The parameters for encrypting content.
Contents
- EncryptionMethod
-
The encryption method to use.
Type: EncryptionMethod object
Required: Yes
- SpekeKeyProvider
-
The parameters for the SPEKE key provider.
Type: SpekeKeyProvider object
Required: Yes
- CmafExcludeSegmentDrmMetadata
-
Excludes SEIG and SGPD boxes from segment metadata in CMAF containers.
When set to
true, MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.Important considerations:
-
This setting only affects CMAF container formats
-
Key rotation can still be handled through media playlist signaling
-
PSSH and TENC boxes remain unaffected
-
Default behavior is preserved when this setting is disabled
Valid values:
true|falseDefault:
falseType: Boolean
Required: No
-
- ConstantInitializationVector
-
A 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).
Type: String
Length Constraints: Fixed length of 32.
Pattern:
[0-9a-fA-F]+Required: No
- KeyRotationIntervalSeconds
-
The frequency (in seconds) of key changes for live workflows, in which content is streamed real time. The service retrieves content keys before the live content begins streaming, and then retrieves them as needed over the lifetime of the workflow. By default, key rotation is set to 300 seconds (5 minutes), the minimum rotation interval, which is equivalent to setting it to 300. If you don't enter an interval, content keys aren't rotated.
The following example setting causes the service to rotate keys every thirty minutes:
1800Type: Integer
Valid Range: Minimum value of 300. Maximum value of 31536000.
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
