AWS cli documentation change
Summary
Added documentation for MSS manifest configurations, encryption methods (including IsmEncryptionMethod), and DRM metadata exclusion options in CMAF segments
Security assessment
Added documentation for encryption methods (CENC) and DRM metadata handling (CmafExcludeSegmentDrmMetadata) which relate to content protection. However, there's no evidence this addresses a specific security vulnerability - rather it documents existing security features.
Diff
diff --git a/cli/latest/reference/mediapackagev2/update-origin-endpoint.md b/cli/latest/reference/mediapackagev2/update-origin-endpoint.md index 415270957..d57bb5c2d 100644 --- a//cli/latest/reference/mediapackagev2/update-origin-endpoint.md +++ b//cli/latest/reference/mediapackagev2/update-origin-endpoint.md @@ -15 +15 @@ - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) » @@ -78,0 +79 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap + [--mss-manifests <value>] @@ -124,0 +126 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap +> * `ISM` @@ -180,0 +183,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap +>>> +>>> IsmEncryptionMethod -> (string) +>>> +>>>> The encryption method used for Microsoft Smooth Streaming (MSS) content. This specifies how the MSS segments are encrypted to protect the content during delivery to client players. @@ -187,0 +194,19 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mediap +>> CmafExcludeSegmentDrmMetadata -> (boolean) +>> +>>> Excludes SEIG and SGPD boxes from segment metadata in CMAF containers. +>>> +>>> When set to `true` , MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don’t support these boxes. +>>> +>>> Important considerations: +>>> +>>> * This setting only affects CMAF container formats +>>> * Key rotation can still be handled through media playlist signaling +>>> * PSSH and TENC boxes remain unaffected +>>> * Default behavior is preserved when this setting is disabled +>>> + +>>> +>>> Valid values: `true` | `false` +>>> +>>> Default: `false` +>> @@ -269 +294,2 @@ JSON Syntax: - "CmafEncryptionMethod": "CENC"|"CBCS" + "CmafEncryptionMethod": "CENC"|"CBCS", + "IsmEncryptionMethod": "CENC" @@ -271,0 +298 @@ JSON Syntax: + "CmafExcludeSegmentDrmMetadata": true|false, @@ -801,0 +829,70 @@ JSON Syntax: +`--mss-manifests` (list) + +> A list of Microsoft Smooth Streaming (MSS) manifest configurations to update for the origin endpoint. This replaces the existing MSS manifest configurations. +> +> (structure) +> +>> Configuration parameters for creating a Microsoft Smooth Streaming (MSS) manifest. MSS is a streaming media format developed by Microsoft that delivers adaptive bitrate streaming content to compatible players and devices. +>> +>> ManifestName -> (string) +>> +>>> A short string that’s appended to the endpoint URL to create a unique path to this MSS manifest. The manifest name must be unique within the origin endpoint and can contain letters, numbers, hyphens, and underscores. +>> +>> ManifestWindowSeconds -> (integer) +>> +>>> The total duration (in seconds) of the manifest window. This determines how much content is available in the manifest at any given time. The manifest window slides forward as new segments become available, maintaining a consistent duration of content. The minimum value is 30 seconds. +>> +>> FilterConfiguration -> (structure) +>> +>>> Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest. +>>> +>>> ManifestFilter -> (string) +>>> +>>>> Optionally specify one or more manifest filters for all of your manifest egress requests. When you include a manifest filter, note that you cannot use an identical manifest filter query parameter for this manifest’s endpoint URL. +>>> +>>> Start -> (timestamp) +>>> +>>>> Optionally specify the start time for all of your manifest egress requests. When you include start time, note that you cannot use start time query parameters for this manifest’s endpoint URL. +>>> +>>> End -> (timestamp) +>>> +>>>> Optionally specify the end time for all of your manifest egress requests. When you include end time, note that you cannot use end time query parameters for this manifest’s endpoint URL. +>>> +>>> TimeDelaySeconds -> (integer) +>>> +>>>> Optionally specify the time delay for all of your manifest egress requests. Enter a value that is smaller than your endpoint’s startover window. When you include time delay, note that you cannot use time delay query parameters for this manifest’s endpoint URL. +>>> +>>> ClipStartTime -> (timestamp) +>>> +>>>> Optionally specify the clip start time for all of your manifest egress requests. When you include clip start time, note that you cannot use clip start time query parameters for this manifest’s endpoint URL. +>> +>> ManifestLayout -> (string) +>> +>>> Determines the layout format of the MSS manifest. This controls how the manifest is structured and presented to client players, affecting compatibility with different MSS-compatible devices and applications. + +Shorthand Syntax: + + + ManifestName=string,ManifestWindowSeconds=integer,FilterConfiguration={ManifestFilter=string,Start=timestamp,End=timestamp,TimeDelaySeconds=integer,ClipStartTime=timestamp},ManifestLayout=string ... + + +JSON Syntax: + + + [ + { + "ManifestName": "string", + "ManifestWindowSeconds": integer, + "FilterConfiguration": { + "ManifestFilter": "string", + "Start": timestamp, + "End": timestamp, + "TimeDelaySeconds": integer, + "ClipStartTime": timestamp + }, + "ManifestLayout": "FULL"|"COMPACT" + } + ... + ] + + @@ -1008,0 +1106,4 @@ Segment -> (structure) +>>> +>>> IsmEncryptionMethod -> (string) +>>> +>>>> The encryption method used for Microsoft Smooth Streaming (MSS) content. This specifies how the MSS segments are encrypted to protect the content during delivery to client players. @@ -1015,0 +1117,19 @@ Segment -> (structure) +>> CmafExcludeSegmentDrmMetadata -> (boolean) +>> +>>> Excludes SEIG and SGPD boxes from segment metadata in CMAF containers. +>>> +>>> When set to `true` , MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don’t support these boxes. +>>> +>>> Important considerations: +>>> +>>> * This setting only affects CMAF container formats +>>> * Key rotation can still be handled through media playlist signaling +>>> * PSSH and TENC boxes remain unaffected +>>> * Default behavior is preserved when this setting is disabled +>>> + +>>> +>>> Valid values: `true` | `false` +>>> +>>> Default: `false` +>> @@ -1264,0 +1385,48 @@ LowLatencyHlsManifests -> (list) +MssManifests -> (list) + +> The updated Microsoft Smooth Streaming (MSS) manifest configurations for this origin endpoint. +> +> (structure) +> +>> Configuration details for a Microsoft Smooth Streaming (MSS) manifest associated with an origin endpoint. This includes all the settings and properties that define how the MSS content is packaged and delivered. +>> +>> ManifestName -> (string) +>> +>>> The name of the MSS manifest. This name is appended to the origin endpoint URL to create the unique path for accessing this specific MSS manifest. +>> +>> Url -> (string) +>> +>>> The complete URL for accessing the MSS manifest. Client players use this URL to retrieve the manifest and begin streaming the Microsoft Smooth Streaming content. +>> +>> FilterConfiguration -> (structure) +>> +>>> Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest. +>>> +>>> ManifestFilter -> (string) +>>> +>>>> Optionally specify one or more manifest filters for all of your manifest egress requests. When you include a manifest filter, note that you cannot use an identical manifest filter query parameter for this manifest’s endpoint URL. +>>> +>>> Start -> (timestamp) +>>> +>>>> Optionally specify the start time for all of your manifest egress requests. When you include start time, note that you cannot use start time query parameters for this manifest’s endpoint URL. +>>> +>>> End -> (timestamp) +>>> +>>>> Optionally specify the end time for all of your manifest egress requests. When you include end time, note that you cannot use end time query parameters for this manifest’s endpoint URL. +>>> +>>> TimeDelaySeconds -> (integer) +>>> +>>>> Optionally specify the time delay for all of your manifest egress requests. Enter a value that is smaller than your endpoint’s startover window. When you include time delay, note that you cannot use time delay query parameters for this manifest’s endpoint URL. +>>> +>>> ClipStartTime -> (timestamp) +>>> +>>>> Optionally specify the clip start time for all of your manifest egress requests. When you include clip start time, note that you cannot use clip start time query parameters for this manifest’s endpoint URL. +>> +>> ManifestWindowSeconds -> (integer) +>> +>>> The duration (in seconds) of the manifest window. This represents the total amount of content available in the manifest at any given time. +>> +>> ManifestLayout -> (string) +>> +>>> The layout format of the MSS manifest, which determines how the manifest is structured for client compatibility. + @@ -1515 +1683 @@ DashManifests -> (list) - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) »