AWS cli documentation change
Summary
Added documentation for Microsoft Smooth Streaming (MSS) manifest configurations, encryption methods (IsmEncryptionMethod), and CMAF DRM metadata exclusion options
Security assessment
Added IsmEncryptionMethod parameter documentation specifying encryption for MSS content delivery protection. Added CmafExcludeSegmentDrmMetadata option to control DRM metadata in segments. These changes document security-related configuration options for content protection but do not indicate a specific vulnerability being patched.
Diff
diff --git a/cli/latest/reference/mediapackagev2/create-origin-endpoint.md b/cli/latest/reference/mediapackagev2/create-origin-endpoint.md index fa263d3a2..027cc6ea9 100644 --- a//cli/latest/reference/mediapackagev2/create-origin-endpoint.md +++ b//cli/latest/reference/mediapackagev2/create-origin-endpoint.md @@ -15 +15 @@ - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) » @@ -77,0 +78 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap + [--mss-manifests <value>] @@ -123,0 +125 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap +> * `ISM` @@ -179,0 +182,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap +>>> +>>> IsmEncryptionMethod -> (string) +>>> +>>>> The encryption method used for Microsoft Smooth Streaming (MSS) content. This specifies how the MSS segments are encrypted to protect the content during delivery to client players. @@ -186,0 +193,19 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap +>> CmafExcludeSegmentDrmMetadata -> (boolean) +>> +>>> Excludes SEIG and SGPD boxes from segment metadata in CMAF containers. +>>> +>>> When set to `true` , MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don’t support these boxes. +>>> +>>> Important considerations: +>>> +>>> * This setting only affects CMAF container formats +>>> * Key rotation can still be handled through media playlist signaling +>>> * PSSH and TENC boxes remain unaffected +>>> * Default behavior is preserved when this setting is disabled +>>> + +>>> +>>> Valid values: `true` | `false` +>>> +>>> Default: `false` +>> @@ -268 +293,2 @@ JSON Syntax: - "CmafEncryptionMethod": "CENC"|"CBCS" + "CmafEncryptionMethod": "CENC"|"CBCS", + "IsmEncryptionMethod": "CENC" @@ -270,0 +297 @@ JSON Syntax: + "CmafExcludeSegmentDrmMetadata": true|false, @@ -804,0 +832,70 @@ JSON Syntax: +`--mss-manifests` (list) + +> A list of Microsoft Smooth Streaming (MSS) manifest configurations for the origin endpoint. You can configure multiple MSS manifests to provide different streaming experiences or to support different client requirements. +> +> (structure) +> +>> Configuration parameters for creating a Microsoft Smooth Streaming (MSS) manifest. MSS is a streaming media format developed by Microsoft that delivers adaptive bitrate streaming content to compatible players and devices. +>> +>> ManifestName -> (string) +>> +>>> A short string that’s appended to the endpoint URL to create a unique path to this MSS manifest. The manifest name must be unique within the origin endpoint and can contain letters, numbers, hyphens, and underscores. +>> +>> ManifestWindowSeconds -> (integer) +>> +>>> The total duration (in seconds) of the manifest window. This determines how much content is available in the manifest at any given time. The manifest window slides forward as new segments become available, maintaining a consistent duration of content. The minimum value is 30 seconds. +>> +>> FilterConfiguration -> (structure) +>> +>>> Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest. +>>> +>>> ManifestFilter -> (string) +>>> +>>>> Optionally specify one or more manifest filters for all of your manifest egress requests. When you include a manifest filter, note that you cannot use an identical manifest filter query parameter for this manifest’s endpoint URL. +>>> +>>> Start -> (timestamp) +>>> +>>>> Optionally specify the start time for all of your manifest egress requests. When you include start time, note that you cannot use start time query parameters for this manifest’s endpoint URL. +>>> +>>> End -> (timestamp) +>>> +>>>> Optionally specify the end time for all of your manifest egress requests. When you include end time, note that you cannot use end time query parameters for this manifest’s endpoint URL. +>>> +>>> TimeDelaySeconds -> (integer) +>>> +>>>> Optionally specify the time delay for all of your manifest egress requests. Enter a value that is smaller than your endpoint’s startover window. When you include time delay, note that you cannot use time delay query parameters for this manifest’s endpoint URL. +>>> +>>> ClipStartTime -> (timestamp) +>>> +>>>> Optionally specify the clip start time for all of your manifest egress requests. When you include clip start time, note that you cannot use clip start time query parameters for this manifest’s endpoint URL. +>> +>> ManifestLayout -> (string) +>> +>>> Determines the layout format of the MSS manifest. This controls how the manifest is structured and presented to client players, affecting compatibility with different MSS-compatible devices and applications. + +Shorthand Syntax: + + + ManifestName=string,ManifestWindowSeconds=integer,FilterConfiguration={ManifestFilter=string,Start=timestamp,End=timestamp,TimeDelaySeconds=integer,ClipStartTime=timestamp},ManifestLayout=string ... + + +JSON Syntax: + + + [ + { + "ManifestName": "string", + "ManifestWindowSeconds": integer, + "FilterConfiguration": { + "ManifestFilter": "string", + "Start": timestamp, + "End": timestamp, + "TimeDelaySeconds": integer, + "ClipStartTime": timestamp + }, + "ManifestLayout": "FULL"|"COMPACT" + } + ... + ] + + @@ -1032,0 +1130,4 @@ Segment -> (structure) +>>> +>>> IsmEncryptionMethod -> (string) +>>> +>>>> The encryption method used for Microsoft Smooth Streaming (MSS) content. This specifies how the MSS segments are encrypted to protect the content during delivery to client players. @@ -1039,0 +1141,19 @@ Segment -> (structure) +>> CmafExcludeSegmentDrmMetadata -> (boolean) +>> +>>> Excludes SEIG and SGPD boxes from segment metadata in CMAF containers. +>>> +>>> When set to `true` , MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don’t support these boxes. +>>> +>>> Important considerations: +>>> +>>> * This setting only affects CMAF container formats +>>> * Key rotation can still be handled through media playlist signaling +>>> * PSSH and TENC boxes remain unaffected +>>> * Default behavior is preserved when this setting is disabled +>>> + +>>> +>>> Valid values: `true` | `false` +>>> +>>> Default: `false` +>> @@ -1499,0 +1620,48 @@ DashManifests -> (list) +MssManifests -> (list) + +> The Microsoft Smooth Streaming (MSS) manifest configurations that were created for this origin endpoint. +> +> (structure) +> +>> Configuration details for a Microsoft Smooth Streaming (MSS) manifest associated with an origin endpoint. This includes all the settings and properties that define how the MSS content is packaged and delivered. +>> +>> ManifestName -> (string) +>> +>>> The name of the MSS manifest. This name is appended to the origin endpoint URL to create the unique path for accessing this specific MSS manifest. +>> +>> Url -> (string) +>> +>>> The complete URL for accessing the MSS manifest. Client players use this URL to retrieve the manifest and begin streaming the Microsoft Smooth Streaming content. +>> +>> FilterConfiguration -> (structure) +>> +>>> Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest. +>>> +>>> ManifestFilter -> (string) +>>> +>>>> Optionally specify one or more manifest filters for all of your manifest egress requests. When you include a manifest filter, note that you cannot use an identical manifest filter query parameter for this manifest’s endpoint URL. +>>> +>>> Start -> (timestamp) +>>> +>>>> Optionally specify the start time for all of your manifest egress requests. When you include start time, note that you cannot use start time query parameters for this manifest’s endpoint URL. +>>> +>>> End -> (timestamp) +>>> +>>>> Optionally specify the end time for all of your manifest egress requests. When you include end time, note that you cannot use end time query parameters for this manifest’s endpoint URL. +>>> +>>> TimeDelaySeconds -> (integer) +>>> +>>>> Optionally specify the time delay for all of your manifest egress requests. Enter a value that is smaller than your endpoint’s startover window. When you include time delay, note that you cannot use time delay query parameters for this manifest’s endpoint URL. +>>> +>>> ClipStartTime -> (timestamp) +>>> +>>>> Optionally specify the clip start time for all of your manifest egress requests. When you include clip start time, note that you cannot use clip start time query parameters for this manifest’s endpoint URL. +>> +>> ManifestWindowSeconds -> (integer) +>> +>>> The duration (in seconds) of the manifest window. This represents the total amount of content available in the manifest at any given time. +>> +>> ManifestLayout -> (string) +>> +>>> The layout format of the MSS manifest, which determines how the manifest is structured for client compatibility. + @@ -1539 +1707 @@ Tags -> (map) - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) »