Help Center/ Live/ Media Live/ Cloud Resource Authorization
Updated on 2026-04-27 GMT+08:00
View PDF

Cloud Resource Authorization

If DRM encryption needs to be enabled for a channel and Interconnection Mode is set to FunctionGraph proxy access, you need to enable FunctionGraph agency in advance by referring to this section.

Procedure

  1. Log in to the Live console.
  2. In the navigation pane on the left, choose Media Live > Cloud Resource Authorization. The Cloud Resource Authorization page is displayed, as shown in Figure 1.

    You need to enable FunctionGraph Agency so that Media Live can invoke functions, workflows, and triggers of users. This agency is used only for DRM encryption. FunctionGraph functions are called to obtain the key for DRM encryption.
    Figure 1 Cloud resource authorization

  3. Enable FunctionGraph Agency. The IAM Agency dialog box is displayed, as shown in Figure 2.

    You can view the detailed agency information, authorization, and policy content.
    Figure 2 IAM agency

  4. Click OK.
  5. Go to the IAM console.
  6. In the navigation pane, choose Agencies, as shown in Figure 3.

    After FunctionGraph agency is enabled for Media Live, the agency medialive_admin_trust is automatically added.

    • This agency name can be used only for Live. If the agency name has been used by another service, the delegated party and permissions of medialive_admin_trust will be automatically reset when FunctionGraph agency is enabled. This affects the authorization by IAM on other services and their usage.
    • The granted permissions cannot be modified. If FunctionGraph agency is disabled for Media Live, the agency medialive_admin_trust will be automatically deleted. If FunctionGraph agency is enabled again, medialive_admin_trust will be automatically re-created and its permissions will be reset to the default permissions.
      Figure 3 IAM agencies