pulumi-aws-native-kotlin/com.pulumi.awsnative.mediapackagev2.kotlin.inputs/OriginEndpointSpekeKeyProviderArgs

OriginEndpointSpekeKeyProviderArgs

data class OriginEndpointSpekeKeyProviderArgs(val drmSystems: Output<List<OriginEndpointDrmSystem>>, val encryptionContractConfiguration: Output<OriginEndpointEncryptionContractConfigurationArgs>, val resourceId: Output<String>, val roleArn: Output<String>, val url: Output<String>) : ConvertibleToJava<OriginEndpointSpekeKeyProviderArgs>

The parameters for the SPEKE key provider.

Constructors

fun OriginEndpointSpekeKeyProviderArgs(drmSystems: Output<List<OriginEndpointDrmSystem>>, encryptionContractConfiguration: Output<OriginEndpointEncryptionContractConfigurationArgs>, resourceId: Output<String>, roleArn: Output<String>, url: Output<String>)

Functions

toJava

open override fun toJava(): OriginEndpointSpekeKeyProviderArgs

Properties

drmSystems

val drmSystems: Output<List<OriginEndpointDrmSystem>>

The DRM solution provider you're using to protect your content during distribution.

encryptionContractConfiguration

val encryptionContractConfiguration: Output<OriginEndpointEncryptionContractConfigurationArgs>

resourceId

val resourceId: Output<String>

The unique identifier for the content. The service sends this to the key server to identify the current endpoint. How unique you make this depends on how fine-grained you want access controls to be. The service does not permit you to use the same ID for two simultaneous encryption processes. The resource ID is also known as the content ID.

The following example shows a resource ID: MovieNight20171126093045

roleArn

val roleArn: Output<String>

The ARN for the IAM role granted by the key provider that provides access to the key provider API. This role must have a trust policy that allows MediaPackage to assume the role, and it must have a sufficient permissions policy to allow access to the specific key retrieval URL. Get this from your DRM solution provider.

Valid format: arn:aws:iam::{accountID}:role/{name}. The following example shows a role ARN: arn:aws:iam::444455556666:role/SpekeAccess

url

val url: Output<String>

The URL of the API Gateway proxy that you set up to talk to your key server. The API Gateway proxy must reside in the same AWS Region as MediaPackage and must start with https://.

The following example shows a URL: https://1wm2dx1f33.execute-api.us-west-2.amazonaws.com/SpekeSample/copyProtection