Amazon Elastic Transcoder | Security Flashcards
Do your prices include taxes?
Security
Amazon Elastic Transcoder | Media Services
Except as otherwise noted, our prices are exclusive of applicable taxes and duties, including VAT and applicable sales tax. For customers with a Japanese billing address, use of AWS services is subject to Japanese Consumption Tax. Learn more.
Are my media assets secure?
Security
Amazon Elastic Transcoder | Media Services
You are in complete control of your media assets because they are stored in your own Amazon S3 buckets. You use IAM roles to grant us access to your specific Amazon S3 bucket.
Can I set S3 permissions and storage options?
Security
Amazon Elastic Transcoder | Media Services
Amazon Elastic Transcoder enables you to specify which users, groups, and canonical IDs you want to grant access to your transcoded files, thumbnails and playlists, as well as the type of access that you want them to have. You can also specify whether to store transcoded content using Standard or Reduced Redundancy Storage. Please refer to Amazon Elastic Transcoder documentation for further information.
Can I use encrypted input media files or encrypt my output files?
Security
Amazon Elastic Transcoder | Media Services
Yes. You can use encrypted mezzanine files as input to Amazon Elastic Transcoder, or protect your transcoded files by letting the service encrypt the output. Supported options range from fully managed integration with Amazon S3’s Server-Side Encryption, to keys that you manage on your own and protect using AWS Key Management Service (KMS). Furthermore, encryption support is not limited to your video files. You can protect thumbnails, captions, and even watermarks.
Do you support DRM?
Security
Amazon Elastic Transcoder | Media Services
Yes, we support packaging for Microsoft PlayReady DRM. Our Smooth Streaming packaging is compatible with the Microsoft PIFF 1.1, and our HLSv3 packaging is compatible with the Discretix 3.0.1 specification for Microsoft PlayReady.
What are the best practices for securing my media?
Security
Amazon Elastic Transcoder | Media Services
Please refer to our AWS Security Best Practices whitepaper.
Can I get a history of all Amazon Elastic Transcoder API calls made on my account for security, operational or compliance auditing?
Security
Amazon Elastic Transcoder | Media Services
Yes. To start receiving a history of all Elastic Transcoder API calls made on your account, you simply turn on AWS CloudTrail in CloudTrail’s AWS Management Console. For more information, visit the AWS CloudTrail home page.
Do I need to setup AWS KMS before using the Elastic Transcoder encryption and DRM packaging features?
Security
Amazon Elastic Transcoder | Media Services
Yes. You must first create a master AWS KMS key and add the role used by Elastic Transcoder as an authorized user of that key. Elastic Transcoder uses your KMS master key to protect the data encryption keys that it exchanges with you.
Can I save the keys used to encrypt my HLS streams to S3?
Security
Amazon Elastic Transcoder | Media Services
Yes. If you elect to store your keys in S3, Elastic Transcoder will write your keys to the same folders as your playlist files, and your keys will be protected using Server-Side Encryption with Amazon S3-Managed Encryption Keys (SSE-S3).
