Integrating Axinom DRM with AWS MediaPackage (VOD)

Introduction

It is possible to integrate Axinom Key Service with MediaPackage for VOD content. The following article provides you step-by-step guidelines for doing so.

note

This guide outlines the main integration points with Axinom DRM and is intended to support your implementation efforts. For production use, we strongly recommend consulting the official AWS documentation to ensure best practices and a secure, scalable setup are followed.

Pre-Requisites

Before starting, ensure you have the following:

• Setup an API Gateway endpoint to handle SPEKE key requests (Refer: Setting up the AWS API Gateway)
• Setup an IAM role with correct permissions (Refer: Setting up the Identity and Access Management Role)
• S3 Bucket containing your source content. You have to prepare a clear .m3u8 or .smil file since .mp4 is not supported. You can use MediaConvert to create a clear manifest file.

Setting up MediaPackage for VOD Content

This guide explains how to configure AWS MediaPackage for VOD, including creating a packaging group, and ingesting assets.

Creating a Packaging Group

1. Open the AWS MediaPackage console: https://console.aws.amazon.com/mediapackage

2. Navigate to Packaging Groups under Video on demand.

   

3. On the Packaging groups page, Click Create Group.

   

4. In the Create packaging group dialog box:

   1. ID: Enter a name that describes the packaging group.
   2. Enable Egress Access Logs (recommended).
   3. Choose Create.

   

Configure the Packaging Group

1. Open the newly created packaging group.

2. Click Manage Configurations.

   

3. Add ID and Package Type.

4. Enable Encryption to use DRM.

   1. System IDs: System ID is a DRM system-specific identifier, see DRM systems.
   2. URL: use the Invoke URL created in the Setting up the AWS API Gateway
   3. Role ARN: Add the IAM Role ARN value from the Setting up the Identity and Access Management Role
   4. Select the Encryption Method.
   5. Click Save.

   

Ingest Assets

1. Go to Assets and click Ingest Assets.

   

2. S3 Bucket name : Select the S3 Bucket where your prepared content is stored.

3. Choose Use existing role under IAM Role.

4. Select the existing role.(The role you created earlier in the Setting up the Identity and Access Management Role)

5. Under Asset Details:

   1. Filename: Select the source content from the dropdown (must be .m3u8 or .smil, not .mp4).
   2. ID: Provide an ID for your asset.
   3. Resource ID: Provide a Resource ID (mandatory, even though marked optional; without it, ingestion will fail).

6. Select the Packaging Group you created earlier.

7. Click Ingest Asset.

   

Verify the Asset

If ingestion succeeds, the asset’s status will show as Playable.