class Aws::MediaConvert::Types::InputDecryptionSettings

Settings for decrypting any input files that you encrypt before you upload them to Amazon S3. MediaConvert can decrypt files only when you use AWS Key Management Service (KMS) to encrypt the data key that you use to encrypt your content.

@note When making an API call, you may pass InputDecryptionSettings

data as a hash:

    {
      decryption_mode: "AES_CTR", # accepts AES_CTR, AES_CBC, AES_GCM
      encrypted_decryption_key: "__stringMin24Max512PatternAZaZ0902",
      initialization_vector: "__stringMin16Max24PatternAZaZ0922AZaZ0916",
      kms_key_region: "__stringMin9Max19PatternAZ26EastWestCentralNorthSouthEastWest1912",
    }

@!attribute [rw] decryption_mode

Specify the encryption mode that you used to encrypt your input
files.
@return [String]

@!attribute [rw] encrypted_decryption_key

Warning! Don't provide your encryption key in plaintext. Your job
settings could be intercepted, making your encrypted content
vulnerable. Specify the encrypted version of the data key that you
used to encrypt your content. The data key must be encrypted by AWS
Key Management Service (KMS). The key can be 128, 192, or 256 bits.
@return [String]

@!attribute [rw] initialization_vector

Specify the initialization vector that you used when you encrypted
your content before uploading it to Amazon S3. You can use a 16-byte
initialization vector with any encryption mode. Or, you can use a
12-byte initialization vector with GCM or CTR. MediaConvert accepts
only initialization vectors that are base64-encoded.
@return [String]

@!attribute [rw] kms_key_region

Specify the AWS Region for AWS Key Management Service (KMS) that you
used to encrypt your data key, if that Region is different from the
one you are using for AWS Elemental MediaConvert.
@return [String]

@see docs.aws.amazon.com/goto/WebAPI/mediaconvert-2017-08-29/InputDecryptionSettings AWS API Documentation

Constants

SENSITIVE