Cloud Resource Authorization

If DRM encryption needs to be enabled for a channel and Interconnection Mode is set to FunctionGraph proxy access, you need to enable FunctionGraph agency in advance by referring to this section.

Procedure

Log in to the Live console.
In the navigation pane, choose Cloud Resource Authorization under Media Live.

You need to enable FunctionGraph Resource Authorization so that Media Live can call functions, workflows, and triggers of users. This agency is used only for DRM encryption. FunctionGraph functions are called to obtain the key for DRM encryption.
Figure 1 Cloud resource authorization
Log in to the IAM console.
In the navigation pane, choose Agencies, as shown in Figure 2.

After FunctionGraph agency is enabled for Media Live, the agency medialive_admin_trust is automatically added.
- This agency name can be used only for Live. If the agency name has been used by another service, the agency and permissions of medialive_admin_trust will be automatically reset when FunctionGraph agency is enabled. This affects the authorization by IAM on other services and their usage.
- The authorization permissions cannot be modified. If FunctionGraph agency is disabled for Media Live, the agency medialive_admin_trust will be automatically deleted. If FunctionGraph agency is enabled again, the agency medialive_admin_trust will be automatically re-created and its permissions will be reset to the default permissions.
  Figure 2 IAM agencies