Skip to content

/AWS1/CL_MDPSPEKEKEYPROVIDER

A configuration for accessing an external Secure Packager and Encoder Key Exchange (SPEKE) service that will provide encryption keys.

CONSTRUCTOR

IMPORTING

Required arguments:

iv_resourceid TYPE /AWS1/MDP__STRING /AWS1/MDP__STRING

The resource ID to include in key requests.

iv_rolearn TYPE /AWS1/MDP__STRING /AWS1/MDP__STRING

An Amazon Resource Name (ARN) of an IAM role that AWS Elemental MediaPackage will assume when accessing the key provider service.

it_systemids TYPE /AWS1/CL_MDP__LISTOF__STRING_W=>TT___LISTOF__STRING TT___LISTOF__STRING

The system IDs to include in key requests.

iv_url TYPE /AWS1/MDP__STRING /AWS1/MDP__STRING

The URL of the external key provider service.

Optional arguments:

iv_certificatearn TYPE /AWS1/MDP__STRING /AWS1/MDP__STRING

An Amazon Resource Name (ARN) of a Certificate Manager certificate that MediaPackage will use for enforcing secure end-to-end data transfer with the key provider service.

io_encryptioncontractconf TYPE REF TO /AWS1/CL_MDPENCCONTRACTCONF /AWS1/CL_MDPENCCONTRACTCONF

Use encryptionContractConfiguration to configure one or more content encryption keys for your endpoints that use SPEKE 2.0. The encryption contract defines which content keys are used to encrypt the audio and video tracks in your stream. To configure the encryption contract, specify which audio and video encryption presets to use. Note the following considerations when using encryptionContractConfiguration: encryptionContractConfiguration can be used for DASH or CMAF endpoints that use SPEKE 2.0. SPEKE 2.0 relies on the CPIX 2.3 specification. You must disable key rotation for this endpoint by setting keyRotationIntervalSeconds to 0.


Queryable Attributes

CertificateArn

An Amazon Resource Name (ARN) of a Certificate Manager certificate that MediaPackage will use for enforcing secure end-to-end data transfer with the key provider service.

Accessible with the following methods

Method Description
GET_CERTIFICATEARN() Getter for CERTIFICATEARN, with configurable default
ASK_CERTIFICATEARN() Getter for CERTIFICATEARN w/ exceptions if field has no valu
HAS_CERTIFICATEARN() Determine if CERTIFICATEARN has a value

EncryptionContractConfiguration

Use encryptionContractConfiguration to configure one or more content encryption keys for your endpoints that use SPEKE 2.0. The encryption contract defines which content keys are used to encrypt the audio and video tracks in your stream. To configure the encryption contract, specify which audio and video encryption presets to use. Note the following considerations when using encryptionContractConfiguration: encryptionContractConfiguration can be used for DASH or CMAF endpoints that use SPEKE 2.0. SPEKE 2.0 relies on the CPIX 2.3 specification. You must disable key rotation for this endpoint by setting keyRotationIntervalSeconds to 0.

Accessible with the following methods

Method Description
GET_ENCRYPTIONCONTRACTCONF() Getter for ENCRYPTIONCONTRACTCONF

ResourceId

The resource ID to include in key requests.

Accessible with the following methods

Method Description
GET_RESOURCEID() Getter for RESOURCEID, with configurable default
ASK_RESOURCEID() Getter for RESOURCEID w/ exceptions if field has no value
HAS_RESOURCEID() Determine if RESOURCEID has a value

RoleArn

An Amazon Resource Name (ARN) of an IAM role that AWS Elemental MediaPackage will assume when accessing the key provider service.

Accessible with the following methods

Method Description
GET_ROLEARN() Getter for ROLEARN, with configurable default
ASK_ROLEARN() Getter for ROLEARN w/ exceptions if field has no value
HAS_ROLEARN() Determine if ROLEARN has a value

SystemIds

The system IDs to include in key requests.

Accessible with the following methods

Method Description
GET_SYSTEMIDS() Getter for SYSTEMIDS, with configurable default
ASK_SYSTEMIDS() Getter for SYSTEMIDS w/ exceptions if field has no value
HAS_SYSTEMIDS() Determine if SYSTEMIDS has a value

Url

The URL of the external key provider service.

Accessible with the following methods

Method Description
GET_URL() Getter for URL, with configurable default
ASK_URL() Getter for URL w/ exceptions if field has no value
HAS_URL() Determine if URL has a value