AWS Elemental MediaPackage

AWS Elemental MediaPackageUser Guide

AWS Elemental MediaPackage User GuideAWS Elemental MediaPackage: User GuideCopyright Amazon Web Services, Inc. and/or its affiliates. All rights reserved.Amazon's trademarks and trade dress may not be used in connection with any product or service that is notAmazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages ordiscredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who mayor may not be affiliated with, connected to, or sponsored by Amazon.

AWS Elemental MediaPackage User GuideTable of ContentsWhat is AWS Elemental MediaPackage? . 1Are you a first-time user of MediaPackage? . 1Concepts and terminology . 1Live components . 2VOD Components . 3Supported inputs and outputs . 3Live supported codecs and input types . 3Live-to-VOD supported codecs and input types . 5VOD supported codecs and input types . 6How AWS Elemental MediaPackage works . 8Live content processing . 8VOD Content Processing . 11Live and VOD manifest reference . 12Features of AWS Elemental MediaPackage . 13Related services . 14Accessing MediaPackage . 15Pricing for MediaPackage . 15Regions for MediaPackage . 15Setting up . 16Signing up for AWS . 16Creating an admin IAM user . 16Creating a non-admin IAM user . 17Step 1: (Optional) create a policy for Amazon CloudFront . 18Step 2: (Optional) create a policy for AWS Elemental MediaPackage VOD . 18Step 3: Create users . 20Allowing AWS Elemental MediaPackage to access other AWS services . 21Step 1: Create a policy . 21Step 2: Create a role . 25Step 3: Modify the trust relationship . 25(Optional) setting up encryption . 26Getting started . 27Live content delivery . 27Prerequisites . 27Step 1: Access AWS Elemental MediaPackage . 27Step 2: Create a channel . 27Step 3: Create endpoints . 28(Optional) step 4: Monitor AWS Elemental MediaPackage activity . 29Step 5: Clean up . 29Live-to-VOD content delivery . 29Prerequisites . 30Step 1: Access AWS Elemental MediaPackage . 30Step 2: Ingest live content . 30Step 3: Extract a VOD asset . 32Step 4: (Optional) output VOD content . 32(Optional) step 5: Monitor AWS Elemental MediaPackage activity . 35Step 6: Clean up . 35VOD content delivery . 36Prerequisites . 36Step 1: Access AWS Elemental MediaPackage . 37Step 2: Create a packaging group . 37Step 3: Create a packaging configuration . 37Step 4: Create an asset . 38Step 5: Provide playback URLs . 38(Optional) step 6: Monitor AWS Elemental MediaPackage activity . 39iii

AWS Elemental MediaPackage User GuideStep 7: Clean up . 39Delivering live content . 40Working with channels . 40Creating a channel . 40Viewing channel details . 41Editing a channel . 42Rotating credentials on an input URL . 42Deleting a channel . 43Adding an endpoint to a channel . 43Working with endpoints . 44Creating an endpoint . 44Viewing all endpoints associated with a channel . 63Viewing a single endpoint . 63Editing an endpoint . 63Deleting an endpoint . 64Previewing an endpoint . 64Delivering VOD content . 65Working with packaging groups . 65Creating a packaging group . 65Viewing packaging group details . 66Editing a packaging group . 66Deleting a packaging group . 67Adding a packaging configuration to a packaging group . 67Working with packaging configurations . 67Creating a packaging configuration . 68Viewing packaging configuration details . 78Editing a packaging configuration . 79Deleting a packaging configuration . 79Working with assets . 80Ingesting an asset . 80Viewing asset details . 83Editing an asset . 83Deleting an asset . 83Creating live-to-VOD assets . 84Live-to-VOD requirements . 84How live-to-VOD works . 85Working with harvest jobs . 85Creating a harvest job . 86Viewing harvest job details . 88Editing a harvest job . 88Deleting a harvest job . 88MediaPackage features . 89CDN authorization . 89How it works . 89Setting up CDN authorization . 90Rotating the CDN header value . 93Content encryption and DRM . 93Limitations and requirements . 93Choosing the right SPEKE version . 94Deploying SPEKE . 95Preparing and managing certificates for use with content keys . 95Understanding key rotation behavior . 96DASH manifest treatments . 96Multi-period DASH . 97Compacted DASH manifests . 100DASH manifest segment template format . 102Manifest filtering . 106iv

AWS Elemental MediaPackage User GuideWorking with manifest filters .Manifest filter query parameters .Manifest filtering examples .Special conditions for HLS and CMAF manifests .Error conditions .Metadata passthrough .ID3 metadata considerations .KLV metadata considerations .Rendition groups .When to use rendition groups .When not to use rendition groups .SCTE-35 messages .SCTE-35 settings in MediaPackage .How it works .EXT-x-DATERANGE ad markers .Time-shifted viewing .Rules for start and end parameters .Trick-play .Using I-frame playlists to enable trick-play .Using image media playlists to enable trick-play .Security .Data protection .Implementing DRM .Implementing CDN authorization .Identity and Access Management .Audience .Authenticating with identities .Managing access using policies .How AWS Elemental MediaPackage Works with IAM .Identity-Based Policy Examples .Policy examples for secrets in AWS Secrets Manager .Troubleshooting .Learn More .Using Service-Linked Roles .Logging and monitoring .Amazon CloudWatch alarms .AWS CloudTrail logs .AWS Elemental MediaPackage access logs .AWS Trusted Advisor .Compliance validation .Resilience .Infrastructure security .Monitoring with CloudWatch .Monitoring with CloudWatch metrics .Live content metrics .VOD content metrics .Monitoring with CloudWatch Events .AWS Elemental MediaPackage events .Creating event notifications .Logging AWS Elemental MediaPackage API calls with AWS CloudTrail .AWS Elemental MediaPackage information in CloudTrail .Understanding AWS Elemental MediaPackage log file entries .Access logging .Permissions to publish access logs to CloudWatch .Enable access logging .Disable access logging .Access log format 58158159160161161162162

AWS Elemental MediaPackage User GuideRead the access logs .Tagging resources .Tag restrictions .Managing tags .Working with CDNs .Creating a Distribution .From AWS Elemental MediaPackage .From Amazon CloudFront .Viewing a Distribution .Editing a Distribution .Deleting a Distribution .Quotas .Live content quotas .Live soft quotas .Live hard quotas .VOD content quotas .VOD soft quotas .VOD hard quotas .Related information .Document history .Earlier updates .AWS glossary 2172173174175180182

AWS Elemental MediaPackage User GuideAre you a first-time user of MediaPackage?What is AWS ElementalMediaPackage?MediaPackage is a just-in-time video packaging and origination service that runs in the AWS Cloud. WithMediaPackage, you can deliver highly secure, scalable, and reliable video streams to a wide variety ofplayback devices and content delivery networks (CDNs).MediaPackage offers a broadcast-grade viewing experience for viewers, while allowing you the flexibilityto control and protect your content. Additionally, the built-in resiliency and scalability of MediaPackagemeans that you have the right amount of resources at the right time, with no manual interventionrequired.Topics Are you a first-time user of MediaPackage? (p. 1) Concepts and terminology (p. 1) Supported inputs and outputs (p. 3) How AWS Elemental MediaPackage works (p. 8) Features of AWS Elemental MediaPackage (p. 13) Related services (p. 14) Accessing MediaPackage (p. 15) Pricing for MediaPackage (p. 15) Regions for MediaPackage (p. 15)Are you a first-time user of MediaPackage?If you are a first-time user of MediaPackage, we recommend that you begin by reading the followingsections: How AWS Elemental MediaPackage works (p. 8) Concepts and terminology (p. 1) Features of AWS Elemental MediaPackage (p. 13) Getting started with AWS Elemental MediaPackage (p. 27)Concepts and terminologyAWS Elemental MediaPackage includes the following components:Just-in-time packagingMediaPackage performs just-in-time packaging (JITP). When a playback device requests content,MediaPackage dynamically customizes the live video streams and creates a manifest in a format thatis compatible with the requesting device.Origination serviceMediaPackage is considered an origination service because it is the point of distribution for mediacontent delivery.1

AWS Elemental MediaPackage User GuideLive componentsPackagerA packager prepares output streams for access by different types of players. The packager typespecifies the streaming format that MediaPackage delivers from the endpoint (either DASH-ISO,Microsoft Smooth Streaming, CMAF, or Apple HLS). Additional packager settings include buffer andupdate durations and manifest tag handling instructions.A packager is a part of an endpoint. Each endpoint must have one, and only one, packager. To usedifferent packager types for the same content, create multiple endpoints on the channel.Source ContentSource contents are live streams and video files that MediaPackage ingests. For live video, source content comes from an upstream encoder, such as AWS Elemental MediaLive.MediaPackage supports HLS source content. For video on demand (VOD), source content resides in an Amazon S3 bucket in your AWS account.MediaPackage supports HLS and MP4 (.smil manifest format) content.StreamA stream refers to the content input and output of AWS Elemental MediaPackage.For live workflows, an upstream encoder sends a live stream as an input to MediaPackage to thechannel. When a downstream device requests playback of the content, MediaPackage dynamicallypackages the stream (including specifying the packager type, adding encryption, and configuringtrack outputs) and delivers it to the requesting device as an output of the endpoint. An endpoint canproduce multiple streams.For VOD workflows, MediaPackage pulls file-based content from Amazon S3. As with live workflows,when a downstream device requests playback of the content, MediaPackage dynamically packagesthe stream and delivers it to the requesting device as an output of the asset resource.TrackTracks make up the output content stream. MediaPackage includes selected video, audio, andsubtitles or captions tracks in the output stream. The stream delivers the tracks to the player (eitherdirectly or through a CDN), and the player plays back the tracks based on player logic or networkconditions (such as available bandwidth).Live componentsThe following components apply to live workflows in MediaPackage:ChannelA channel represents the entry point for a content stream into MediaPackage. Upstream encoderssuch as AWS Elemental MediaLive send content to the channel. When MediaPackage receives acontent stream, it packages the content and outputs the stream from an endpoint that you create onthe channel. There is one channel for each incoming set of ABR streams.EndpointAn endpoint is part of a channel and represents the packaging aspect of MediaPackage. When youcreate an endpoint on a channel, you indicate what streaming format, packaging parameters, andfeatures the output stream will use. Downstream devices request content from the endpoint. Achannel can have multiple endpoints.Harvest JobA harvest job is a task that you create to extract a video on demand (VOD) asset from a live contentstream. A harvest job defines the start and end times of the VOD asset, and where MediaPackageshould store the asset. When the job runs, MediaPackage creates an HLS clip for the times that you2

AWS Elemental MediaPackage User Guide Are you?a first-time user of MediaPackage? What is AWS Elemental MediaPackage MediaPackage is a just-in-time video pack