Skip to content

/AWS1/CL_MD2ENCRYPTION

The parameters for encrypting content.

CONSTRUCTOR

IMPORTING

Required arguments:

io_encryptionmethod TYPE REF TO /AWS1/CL_MD2ENCRYPTIONMETHOD /AWS1/CL_MD2ENCRYPTIONMETHOD

The encryption method to use.

io_spekekeyprovider TYPE REF TO /AWS1/CL_MD2SPEKEKEYPROVIDER /AWS1/CL_MD2SPEKEKEYPROVIDER

The parameters for the SPEKE key provider.

Optional arguments:

iv_constantinitializationv00 TYPE /AWS1/MD2STRING /AWS1/MD2STRING

A 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).

iv_keyrotationintervalsecs TYPE /AWS1/MD2INTEGER /AWS1/MD2INTEGER

The frequency (in seconds) of key changes for live workflows, in which content is streamed real time. The service retrieves content keys before the live content begins streaming, and then retrieves them as needed over the lifetime of the workflow. By default, key rotation is set to 300 seconds (5 minutes), the minimum rotation interval, which is equivalent to setting it to 300. If you don't enter an interval, content keys aren't rotated.

The following example setting causes the service to rotate keys every thirty minutes: 1800

iv_cmafexcludesegmentdrmmet TYPE /AWS1/MD2BOOLEAN /AWS1/MD2BOOLEAN

Excludes SEIG and SGPD boxes from segment metadata in CMAF containers.

When set to true, MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.

Important considerations:

  • This setting only affects CMAF container formats

  • Key rotation can still be handled through media playlist signaling

  • PSSH and TENC boxes remain unaffected

  • Default behavior is preserved when this setting is disabled

Valid values: true | false

Default: false

Queryable Attributes

ConstantInitializationVector

A 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).

Accessible with the following methods

Method Description
GET_CONSTANTINITIALIZATION00() Getter for CONSTANTINITIALIZATIONVECTOR, with configurable d
ASK_CONSTANTINITIALIZATION00() Getter for CONSTANTINITIALIZATIONVECTOR w/ exceptions if fie
HAS_CONSTANTINITIALIZATION00() Determine if CONSTANTINITIALIZATIONVECTOR has a value

EncryptionMethod

The encryption method to use.

Accessible with the following methods

Method Description
GET_ENCRYPTIONMETHOD() Getter for ENCRYPTIONMETHOD

KeyRotationIntervalSeconds

The frequency (in seconds) of key changes for live workflows, in which content is streamed real time. The service retrieves content keys before the live content begins streaming, and then retrieves them as needed over the lifetime of the workflow. By default, key rotation is set to 300 seconds (5 minutes), the minimum rotation interval, which is equivalent to setting it to 300. If you don't enter an interval, content keys aren't rotated.

The following example setting causes the service to rotate keys every thirty minutes: 1800

Accessible with the following methods

Method Description
GET_KEYROTATIONINTERVALSECS() Getter for KEYROTATIONINTERVALSECONDS, with configurable def
ASK_KEYROTATIONINTERVALSECS() Getter for KEYROTATIONINTERVALSECONDS w/ exceptions if field
HAS_KEYROTATIONINTERVALSECS() Determine if KEYROTATIONINTERVALSECONDS has a value

CmafExcludeSegmentDrmMetadata

Excludes SEIG and SGPD boxes from segment metadata in CMAF containers.

When set to true, MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.

Important considerations:

  • This setting only affects CMAF container formats

  • Key rotation can still be handled through media playlist signaling

  • PSSH and TENC boxes remain unaffected

  • Default behavior is preserved when this setting is disabled

Valid values: true | false

Default: false

Accessible with the following methods

Method Description
GET_CMAFEXCLUDESEGMENTDRMMET() Getter for CMAFEXCLUDESEGMENTDRMMET, with configurable defau
ASK_CMAFEXCLUDESEGMENTDRMMET() Getter for CMAFEXCLUDESEGMENTDRMMET w/ exceptions if field h
HAS_CMAFEXCLUDESEGMENTDRMMET() Determine if CMAFEXCLUDESEGMENTDRMMET has a value

SpekeKeyProvider

The parameters for the SPEKE key provider.

Accessible with the following methods

Method Description
GET_SPEKEKEYPROVIDER() Getter for SPEKEKEYPROVIDER