BitmovinApiSdk\Models\AnalyticsS3RoleBasedOutput
Synopsis
class AnalyticsS3RoleBasedOutput
extends AnalyticsOutput
{
- // members
- public string $bucketName;
- public string $roleArn;
- public string $externalId;
- public ExternalIdMode $externalIdMode;
- public string $md5MetaTag;
- public AwsCloudRegion $cloudRegion;
- public S3SignatureVersion $signatureVersion;
- // Inherited members from AnalyticsOutput
- public array $acl;
- public static string $discriminatorName;
- public static array $discriminatorMapping;
- // Inherited members from BitmovinResource
- public string $name;
- public string $description;
- public Carbon $createdAt;
- public Carbon $modifiedAt;
- public mixed $customData;
- // Inherited members from BitmovinResponse
- public string $id;
- // methods
- public void __construct()
- public $this bucketName()
- public $this roleArn()
- public $this externalId()
- public $this externalIdMode()
- public $this md5MetaTag()
- public $this cloudRegion()
- public $this signatureVersion()
- // Inherited methods from AnalyticsOutput
- public void __construct()
- public $this acl()
- // Inherited methods from BitmovinResource
- public void __construct()
- public $this name()
- public $this description()
- public $this customData()
- // Inherited methods from BitmovinResponse
- public void __construct()
- // Inherited methods from ApiResource
- public void __construct()
- public static $this create()
- public void toArray()
Hierarchy
Members
public
- $acl — \BitmovinApiSdk\Models\AclEntry[]
- $bucketName — string
- $cloudRegion — BitmovinApiSdk\Models\AwsCloudRegion
- $createdAt — Carbon\Carbon
- $customData — mixed
- $description — string
- $discriminatorMapping
- $discriminatorName
- $externalId — string
- $externalIdMode — BitmovinApiSdk\Models\ExternalIdMode
- $id — string
- $md5MetaTag — string
- $modifiedAt — Carbon\Carbon
- $name — string
- $roleArn — string
- $signatureVersion — BitmovinApiSdk\Models\S3SignatureVersion
Methods
public
- __construct()
- bucketName() — Amazon S3 bucket name (required)
- cloudRegion() — cloudRegion
- externalId() — External ID used together with the IAM role identified by `roleArn` to assume S3 access. This ID is provided by the API if `externalIdMode` is set to `GLOBAL` or `GENERATED`. If present, it has to be added to the trust policy of the IAM role `roleArn` configured above, otherwise the API won't be able to write to the S3 bucket. An appropriate trust policy would look like this: ``` { \"Effect\": \"Allow\", \"Principal\": { \"AWS\": \"arn:aws:iam::630681592166:user/bitmovinCustomerS3Access\" }, \"Action\": \"sts:AssumeRole\", \"Condition\": { \"StringEquals\": { \"sts:ExternalId\": \"{{externalId}}\" } } } ``` where \"{{externalId}}\" is the generated ID. This property is optional but we recommend it as an additional security feature. We will use both the `roleArn` and the `externalId` to access your S3 data. If the Amazon IAM role has an external ID configured but it is not provided in the output configuration Bitmovin won't be able to write to the S3 bucket. Also if the external ID does not match the one configured for the IAM role on AWS side, Bitmovin won't be able to access the S3 bucket. If you need to change the external ID that is used by your IAM role, you need to create a new output, and use the external ID provided by the API to update your IAM role. For more information please visit https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html
- externalIdMode() — externalIdMode
- md5MetaTag() — If set a user defined tag (x-amz-meta-) with that key will be used to store the MD5 hash of the file.
- roleArn() — Amazon ARN of the IAM Role (Identity and Access Management Role) that will be assumed for S3 access. This role has to be created by the owner of the account with the S3 bucket (i.e., you as a customer). For Bitmovin to be able to assume this role, the following has to be added to the trust policy of the role: ``` { \"Effect\": \"Allow\", \"Principal\": { \"AWS\": \"arn:aws:iam::630681592166:user/bitmovinCustomerS3Access\" }, \"Action\": \"sts:AssumeRole\", \"Condition\": { \"StringEquals\": { \"sts:ExternalId\": \"{{externalId}}\" } } } ``` where \"arn:aws:iam::630681592166:user/bitmovinCustomerS3Access\" is the Bitmovin user used for the access. The `Condition` is optional but we highly recommend it, see property `externalId` below for more information. This setup allows Bitmovin assume the provided IAM role and to write data to your S3 bucket. Please note that the IAM role has to have write access to S3. For more information about role creation please visit https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-service.html#roles-creatingrole-service-console (required)
- signatureVersion() — Specifies the method used for authentication
Inherited from BitmovinApiSdk\Models\AnalyticsOutput
public
- acl() — acl
Inherited from BitmovinApiSdk\Models\BitmovinResource
public
- customData() — User-specific meta data. This can hold anything.
- description() — Description of the resource. Can be freely chosen by the user.
- name() — Name of the resource. Can be freely chosen by the user.