@aws-cdk/aws-mediapackagev2-alpha 2.256.1-alpha.0 → 2.258.0-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.256.1",
+    "aws-cdk-lib": "^2.258.0",
     "constructs": "^10.5.0"
   },
   "dependencyClosure": {
@@ -525,6 +525,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_awsexternalanthropic": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.AWS.AWSExternalAnthropic"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.awsexternalanthropic"
+            },
+            "python": {
+              "module": "aws_cdk.aws_awsexternalanthropic"
+            }
+          }
+        },
         "aws-cdk-lib.aws_b2bi": {
           "targets": {
             "dotnet": {
@@ -4702,6 +4715,22 @@
             }
           }
         },
+        "aws-cdk-lib.interfaces.aws_awsexternalanthropic": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.Interfaces.AWSExternalAnthropic"
+            },
+            "go": {
+              "packageName": "interfacesawsawsexternalanthropic"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.interfaces.awsexternalanthropic"
+            },
+            "python": {
+              "module": "aws_cdk.interfaces.aws_awsexternalanthropic"
+            }
+          }
+        },
         "aws-cdk-lib.interfaces.aws_b2bi": {
           "targets": {
             "dotnet": {
@@ -8937,7 +8966,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/aws/aws-cdk",
-  "jsiiVersion": "5.9.37 (build 5176c0d)",
+  "jsiiVersion": "5.9.44 (build 150b837)",
   "keywords": [
     "aws",
     "cdk",
@@ -8959,7 +8988,7 @@
   },
   "name": "@aws-cdk/aws-mediapackagev2-alpha",
   "readme": {
-    "markdown": "# AWS::MediaPackageV2 Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## AWS Elemental MediaPackage V2\n\nMediaPackage delivers high-quality video without concern for capacity and makes it easier to implement popular DVR features such as start over, pause, and rewind. Your content will be protected with comprehensive support for DRM. The service seamlessly integrates with other AWS media services as a complete set of tools for cloud-based video processing and delivery.\n\nThis package contains constructs for working with AWS Elemental MediaPackage V2. Allowing you to define AWS Elemental MediaPackage V2 Channel Groups, Channels, Origin Endpoints, Channel Policies and Origin Endpoint Policies.\n\nFor further information on AWS Elemental MediaPackage V2, see [the documentation](https://aws.amazon.com/mediapackage/).\n\nThe following example creates an AWS Elemental MediaPackage V2 Channel Group, Channel and Origin Endpoint:\n\n```ts\ndeclare const stack: Stack;\nconst group = new ChannelGroup(stack, 'MyChannelGroup', {\n    channelGroupName: 'my-test-channel-group',\n});\n\nconst channel = new Channel(stack, 'MyChannel', {\n    channelGroup: group,\n    channelName: 'my-testchannel',\n    input: InputConfiguration.cmaf(),\n});\n\nconst endpoint = new OriginEndpoint(stack, 'MyOriginEndpoint', {\n    channel,\n    originEndpointName: 'my-test-endpoint',\n    segment: Segment.cmaf(),\n    manifests: [Manifest.hls({\n        manifestName: 'index',\n    })],\n});\n```\n\n## Using Factory Methods\n\n```ts\ndeclare const stack: Stack;\n\n// Create a channel group\nconst group = new ChannelGroup(stack, 'MyChannelGroup', {\n  channelGroupName: 'my-channel-group',\n});\n\n// Add a channel using the factory method\nconst channel = group.addChannel('MyChannel', {\n  channelName: 'my-channel',\n  input: InputConfiguration.cmaf(),\n});\n\n// Add an origin endpoint using the factory method\nconst endpoint = channel.addOriginEndpoint('MyEndpoint', {\n  originEndpointName: 'my-endpoint',\n  segment: Segment.cmaf(),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n## Channel Group\n\nA channel group is the top-level resource that consists of channels and origin endpoints associated with it.\n\nThe following code creates a Channel Group:\n\n```ts\ndeclare const stack: Stack;\nconst group = new ChannelGroup(stack, 'MyChannelGroup', {\n    channelGroupName: 'my-test-channel-group',\n});\n```\n\nThe following code imports an existing channel group using the name attribute:\n\n```ts\ndeclare const stack: Stack;\nconst channelGroup = ChannelGroup.fromChannelGroupAttributes(stack, 'ImportedChannelGroup', {\n    channelGroupName: 'MyChannelGroup',\n});\n```\n\nYou can also import from an ARN, which automatically extracts the name and region:\n\n```ts\ndeclare const stack: Stack;\nconst channelGroup = ChannelGroup.fromChannelGroupArn(stack, 'ImportedChannelGroup',\n    'arn:aws:mediapackagev2:us-west-2:123456789012:channelGroup/MyChannelGroup',\n);\n```\n\nFor cross-region imports, pass the `region` parameter to ensure the correct ARN is constructed:\n\n```ts\ndeclare const stack: Stack;\nconst channelGroup = ChannelGroup.fromChannelGroupAttributes(stack, 'ImportedChannelGroup', {\n    channelGroupName: 'MyChannelGroup',\n    region: 'us-west-2',\n});\n```\n\n## Channel\n\nA channel is part of a channel group and represents the entry point for a content stream into MediaPackage.\n\n### Input Configuration\n\nChannels support two input types: HLS and CMAF.\n\n```ts\ndeclare const stack: Stack;\ndeclare const group: ChannelGroup;\n\nconst hlsChannel = new Channel(stack, 'HlsChannel', {\n  channelGroup: group,\n  input: InputConfiguration.hls(),\n});\n\nconst cmafChannel = new Channel(stack, 'CmafChannel', {\n  channelGroup: group,\n  input: InputConfiguration.cmaf({\n    inputSwitchConfiguration: {\n      mqcsInputSwitching: true,\n    },\n    outputHeaders: [HeadersCMSD.MQCS],\n  }),\n});\n\nconst simpleCmafChannel = new Channel(stack, 'SimpleCmafChannel', {\n  channelGroup: group,\n  input: InputConfiguration.cmaf({\n    outputHeaders: [HeadersCMSD.MQCS],\n  }),\n});\n```\n\n### Importing an Existing Channel\n\nThe following code imports an existing channel using the name attributes:\n\n```ts\ndeclare const stack: Stack;\nconst channel = Channel.fromChannelAttributes(stack, 'ImportedChannel', {\n    channelName: 'MyChannel',\n    channelGroupName: 'MyChannelGroup',\n});\n```\n\nYou can also import from an ARN:\n\n```ts\ndeclare const stack: Stack;\nconst channel = Channel.fromChannelArn(stack, 'ImportedChannel',\n    'arn:aws:mediapackagev2:us-west-2:123456789012:channelGroup/MyGroup/channel/MyChannel',\n);\n```\n\nImported channels expose a `region` property, which is parsed from the ARN or falls back to the importing stack's region.\n\n### Channel Resource Policy\n\nThe following code creates a resource policy directly on the channel. This\nwill automatically create a policy on the first call:\n\n```ts\ndeclare const channel: Channel;\nchannel.addToResourcePolicy(new PolicyStatement({\n    sid: 'AllowMediaLiveRoleToAccessEmpChannel',\n    principals: [new ArnPrincipal('arn:aws:iam::AccountID:role/MediaLiveAccessRole')],\n    effect: Effect.ALLOW,\n    actions: ['mediapackagev2:PutObject'],\n    resources: [channel.channelArn],\n}));\n```\n\n## Origin Endpoint\n\n```ts\ndeclare const stack: Stack;\ndeclare const channel: Channel;\nnew OriginEndpoint(stack, 'myendpoint', {\n    channel,\n    originEndpointName: 'my-test-endpoint',\n    segment: Segment.cmaf(),\n    manifests: [\n      Manifest.hls({\n        manifestName: 'index',\n      }),\n    ],\n});\n```\n\nThe following code imports an existing origin endpoint using the name attributes:\n\n```ts\ndeclare const stack: Stack;\nconst originEndpoint = OriginEndpoint.fromOriginEndpointAttributes(stack, 'ImportedOriginEndpoint', {\n    channelGroupName: 'MyChannelGroup',\n    channelName: 'MyChannel',\n    originEndpointName: 'MyExampleOriginEndpoint',\n});\n```\n\nYou can also import from an ARN:\n\n```ts\ndeclare const stack: Stack;\nconst originEndpoint = OriginEndpoint.fromOriginEndpointArn(stack, 'ImportedOriginEndpoint',\n    'arn:aws:mediapackagev2:us-west-2:123456789012:channelGroup/MyGroup/channel/MyChannel/originEndpoint/MyEndpoint',\n);\n```\n\nThe following code creates a resource policy on the origin endpoint. This\nwill automatically create a policy on the first call:\n\n```ts\ndeclare const origin: OriginEndpoint;\n\norigin.addToResourcePolicy(new PolicyStatement({\n    sid: 'AllowRequestsFromCloudFront',\n    principals: [new ServicePrincipal('cloudfront.amazonaws.com')],\n    effect: Effect.ALLOW,\n    actions: ['mediapackagev2:GetHeadObject', 'mediapackagev2:GetObject'],\n    resources: [origin.originEndpointArn],\n    conditions: {\n      StringEquals: {\n        'aws:SourceArn': 'arn:aws:cloudfront::123456789012:distribution/AAAAAAAAA',\n      },\n    },\n}));\n```\n\n## Granting Permissions\n\n### Granting Ingest Access to MediaLive\n\nTo allow AWS Elemental MediaLive to ingest content into a MediaPackage channel, use the `grants.ingest()` method:\n\n```ts\ndeclare const channel: Channel;\ndeclare const mediaLiveRole: iam.IRole;\n\n// Grant MediaLive permission to ingest content\nchannel.grants.ingest(mediaLiveRole);\n```\n\n### CloudFront Integration\n\nMediaPackage origin endpoints are designed to be used with Content Delivery Network (CDN) like Amazon CloudFront distributions. CloudFront provides caching, DDoS protection, and global content delivery for your streaming content.\n\nThe simplest way to connect CloudFront to a MediaPackage V2 endpoint is with `MediaPackageV2Origin`, which automatically creates an Origin Access Control (OAC) and wires the endpoint policy:\n\n```ts\ndeclare const endpoint: OriginEndpoint;\ndeclare const group: ChannelGroup;\n\nnew cloudfront.Distribution(this, 'Distribution', {\n  defaultBehavior: {\n    origin: new MediaPackageV2Origin(endpoint, {\n      channelGroup: group,\n    }),\n  },\n});\n```\n\nThis handles OAC creation, HTTPS-only origin config, and the IAM policy granting CloudFront access to the endpoint (including `GetHeadObject` for MQAR support).\n\nFor more control, you can manually configure the policy and OAC:\n\n```ts\ndeclare const originEndpoint: OriginEndpoint;\ndeclare const distribution: cloudfront.Distribution;\n\noriginEndpoint.addToResourcePolicy(new iam.PolicyStatement({\n  sid: 'AllowCloudFrontServicePrincipal',\n  principals: [new iam.ServicePrincipal('cloudfront.amazonaws.com')],\n  effect: iam.Effect.ALLOW,\n  actions: ['mediapackagev2:GetObject', 'mediapackagev2:GetHeadObject'],\n  resources: [originEndpoint.originEndpointArn],\n  conditions: {\n    StringEquals: {\n      'aws:SourceArn': distribution.distributionArn,\n    },\n  },\n}));\n```\n\n> **Graduation plan:** `MediaPackageV2Origin` currently lives in this alpha module. When MediaPackage V2 graduates to stable, it will move to `aws-cloudfront-origins` alongside `S3BucketOrigin` and other origin helpers.\n\n## Manifest Configuration\n\nMediaPackage V2 supports multiple manifest formats: HLS, Low-Latency HLS (LL-HLS), DASH, and Microsoft Smooth Streaming (MSS).\n\n### HLS Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(60),\n      programDateTimeInterval: Duration.seconds(60),\n      scteAdMarkerHls: AdMarkerHls.DATERANGE,\n    }),\n  ],\n});\n```\n\n### Low-Latency HLS Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.lowLatencyHLS({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(30),\n      programDateTimeInterval: Duration.seconds(5),\n      childManifestName: 'child',\n    }),\n  ],\n});\n```\n\n### DASH Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.dash({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(60),\n      minBufferTime: Duration.seconds(30),\n      minUpdatePeriod: Duration.seconds(10),\n      segmentTemplateFormat: SegmentTemplateFormat.NUMBER_WITH_TIMELINE,\n      periodTriggers: [\n        DashPeriodTriggers.AVAILS,\n        DashPeriodTriggers.DRM_KEY_ROTATION,\n      ],\n    }),\n  ],\n});\n```\n\n### MSS Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.ism(),\n  manifests: [\n    Manifest.mss({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(60),\n      manifestLayout: MssManifestLayout.COMPACT,\n    }),\n  ],\n});\n```\n\n### Multiple Manifests\n\nYou can configure multiple manifest formats for a single origin endpoint:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({ manifestName: 'hls' }),\n    Manifest.dash({ manifestName: 'dash' }),\n  ],\n});\n```\n\n| Segment type | Supported manifests |\n|--------|--------|\n| Segment.cmaf() | HLS, LL-HLS, DASH |\n| Segment.ts() | HLS, LL-HLS |\n| Segment.ism() | MSS |\n\nEach origin endpoint has a single segment configuration. If you need segments with different configurations, use multiple origin endpoints on the same channel.\n\n@see https://docs.aws.amazon.com/mediapackage/latest/userguide/endpoints-create.html\n\n## Manifest Filtering\n\nManifest filters control which variants are included in the manifest. Filters are type-safe and validated against the [MediaPackage manifest filtering rules](https://docs.aws.amazon.com/mediapackage/latest/userguide/manifest-filter-query-parameters.html).\n\n| Filter | Method |\n|--------|--------|\n| Audio / video bitrate | `bitrate()`, `bitrateRange()`, `bitrateCombo()` |\n| Audio channels, sample rate, video height, framerate, trickplay height | `numeric()`, `numericList()`, `numericRange()`, `numericCombo()` |\n| Audio codec | `audioCodec()`, `audioCodecList()` |\n| Video codec | `videoCodec()`, `videoCodecList()` |\n| Video dynamic range | `videoDynamicRange()`, `videoDynamicRangeList()` |\n| Trickplay type | `trickplayType()`, `trickplayTypeList()` |\n| Audio / subtitle language | `text()`, `textList()` |\n| Advanced patterns | `custom()` |\n\nThe following example creates an HD streaming endpoint that serves only H.264/H.265 content between 1–5 Mbps with stereo audio in English or French:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      filterConfiguration: {\n        manifestFilter: [\n          ManifestFilter.bitrateRange(BitrateFilterKey.VIDEO_BITRATE, Bitrate.mbps(1), Bitrate.mbps(5)),\n          ManifestFilter.numericRange(NumericFilterKey.VIDEO_HEIGHT, 720, 1080),\n          ManifestFilter.videoCodecList([VideoCodec.H264, VideoCodec.H265]),\n          ManifestFilter.numeric(NumericFilterKey.AUDIO_CHANNELS, 2),\n          ManifestFilter.textList(TextFilterKey.AUDIO_LANGUAGE, ['en-US', 'fr']),\n        ],\n        timeDelay: Duration.seconds(30),\n      },\n    }),\n  ],\n});\n```\n\nFor advanced patterns that combine ranges and single values, use `numericCombo()` or `bitrateCombo()`:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      filterConfiguration: {\n        manifestFilter: [\n          // video_height:240-360,720-1080,1440\n          ManifestFilter.numericCombo(NumericFilterKey.VIDEO_HEIGHT, [\n            NumericExpression.range(240, 360),\n            NumericExpression.range(720, 1080),\n            NumericExpression.value(1440),\n          ]),\n        ],\n      },\n    }),\n  ],\n});\n```\n\n### DRM Settings\n\nYou can exclude session keys from HLS and LL-HLS multivariant playlists using the `drmSettings` filter configuration. This improves compatibility with legacy HLS clients and provides more granular access control:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      filterConfiguration: {\n        drmSettings: [DrmSettingsKey.EXCLUDE_SESSION_KEYS],\n      },\n    }),\n  ],\n});\n```\n\n## Start Tag Configuration\n\nConfigure where playback should start in HLS and LL-HLS manifests using the EXT-X-START tag:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      startTag: StartTag.of(10),\n    }),\n  ],\n});\n```\n\n## Segment Configuration\n\nConfigure segment settings for your origin endpoint.\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'TsEndpoint', {\n  channel,\n  segment: Segment.ts({\n    duration: Duration.seconds(6),\n    name: 'segment',\n    includeDvbSubtitles: true,\n    useAudioRenditionGroup: true,\n    includeIframeOnlyStreams: false,\n    scteFilter: [\n      ScteMessageType.BREAK,\n      ScteMessageType.DISTRIBUTOR_ADVERTISEMENT,\n    ],\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n\nnew OriginEndpoint(this, 'CmafEndpoint', {\n  channel,\n  segment: Segment.cmaf({\n    duration: Duration.seconds(6),\n    name: 'segment',\n    includeIframeOnlyStreams: true,\n    scteFilter: [ScteMessageType.DISTRIBUTOR_ADVERTISEMENT],\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n## Encryption and DRM\n\nProtect your content with encryption using SPEKE (Secure Packager and Encoder Key Exchange). Each container type has its own encryption class with type-safe options:\n\n### CMAF Encryption\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf({\n    encryption: CmafEncryption.speke({\n      method: CmafEncryptionMethod.CBCS,\n      drmSystems: [CmafDrmSystem.FAIRPLAY, CmafDrmSystem.WIDEVINE],\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n      keyRotationInterval: Duration.seconds(300),\n      audioPreset: PresetSpeke20Audio.PRESET_AUDIO_2,\n      videoPreset: PresetSpeke20Video.PRESET_VIDEO_2,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n### TS Encryption\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'TsEndpoint', {\n  channel,\n  segment: Segment.ts({\n    encryption: TsEncryption.speke({\n      method: TsEncryptionMethod.SAMPLE_AES,\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\nTS encryption defaults the DRM system based on the method: FairPlay for `SAMPLE_AES`, Clear Key AES 128 for `AES_128`. You can override this with the `drmSystems` property using `TsDrmSystem`.\n\n### Content Key Encryption\n\nYou can add content key encryption by providing a certificate imported into AWS Certificate Manager. Your DRM key provider must support content key encryption for this to work:\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\ndeclare const certificate: certificatemanager.ICertificate;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf({\n    encryption: CmafEncryption.speke({\n      method: CmafEncryptionMethod.CBCS,\n      drmSystems: [CmafDrmSystem.FAIRPLAY],\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n      certificate,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n### Excluding Segment DRM Metadata\n\nFor CMAF content, you can exclude DRM metadata from segments:\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf({\n    encryption: CmafEncryption.speke({\n      method: CmafEncryptionMethod.CBCS,\n      drmSystems: [CmafDrmSystem.FAIRPLAY],\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n      excludeSegmentDrmMetadata: true,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n### ISM (Smooth Streaming) Encryption\n\nISM endpoints use CENC encryption with PlayReady. Audio and video presets are always `SHARED`, and key rotation is not supported. The DRM system defaults to PlayReady:\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'IsmEndpoint', {\n  channel,\n  segment: Segment.ism({\n    encryption: IsmEncryption.speke({\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n    }),\n  }),\n  manifests: [Manifest.mss({ manifestName: 'index' })],\n});\n```\n\n## CloudWatch Metrics\n\nMediaPackage V2 resources expose CloudWatch metrics for monitoring. You can create alarms and dashboards using these metrics:\n\n```ts\ndeclare const channelGroup: ChannelGroup;\ndeclare const channel: Channel;\ndeclare const endpoint: OriginEndpoint;\n\n// Create a CloudWatch alarm on channel group egress bytes\nconst alarm = channelGroup.metricEgressBytes().createAlarm(this, 'HighEgress', {\n  threshold: 1000,\n  evaluationPeriods: 1,\n});\n\n// Monitor channel ingress response time\nchannel.metricIngressResponseTime().createAlarm(this, 'SlowIngress', {\n  threshold: 1000,\n  evaluationPeriods: 2,\n});\n\n// Track origin endpoint request count\nconst requestMetric = endpoint.metricEgressRequestCount({\n  statistic: 'sum',\n  period: Duration.minutes(5),\n});\n```\n\nAvailable metrics include:\n\n- `metricIngressBytes()` - Bytes ingested\n- `metricEgressBytes()` - Bytes delivered\n- `metricIngressResponseTime()` - Ingress response time (average)\n- `metricEgressResponseTime()` - Egress response time (average)\n- `metricIngressRequestCount()` - Number of ingress requests\n- `metricEgressRequestCount()` - Number of egress requests\n\nAll metrics support standard CloudWatch metric options for customizing period, statistic, and dimensions.\n"
+    "markdown": "# AWS::MediaPackageV2 Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## AWS Elemental MediaPackage V2\n\nMediaPackage delivers high-quality video without concern for capacity and makes it easier to implement popular DVR features such as start over, pause, and rewind. Your content will be protected with comprehensive support for DRM. The service seamlessly integrates with other AWS media services as a complete set of tools for cloud-based video processing and delivery.\n\nThis package contains constructs for working with AWS Elemental MediaPackage V2. Allowing you to define AWS Elemental MediaPackage V2 Channel Groups, Channels, Origin Endpoints, Channel Policies and Origin Endpoint Policies.\n\nFor further information on AWS Elemental MediaPackage V2, see [the documentation](https://aws.amazon.com/mediapackage/).\n\nThe following example creates an AWS Elemental MediaPackage V2 Channel Group, Channel and Origin Endpoint:\n\n```ts\ndeclare const stack: Stack;\nconst group = new ChannelGroup(stack, 'MyChannelGroup', {\n    channelGroupName: 'my-test-channel-group',\n});\n\nconst channel = new Channel(stack, 'MyChannel', {\n    channelGroup: group,\n    channelName: 'my-testchannel',\n    input: InputConfiguration.cmaf(),\n});\n\nconst endpoint = new OriginEndpoint(stack, 'MyOriginEndpoint', {\n    channel,\n    originEndpointName: 'my-test-endpoint',\n    segment: Segment.cmaf(),\n    manifests: [Manifest.hls({\n        manifestName: 'index',\n    })],\n});\n```\n\n## Using Factory Methods\n\n```ts\ndeclare const stack: Stack;\n\n// Create a channel group\nconst group = new ChannelGroup(stack, 'MyChannelGroup', {\n  channelGroupName: 'my-channel-group',\n});\n\n// Add a channel using the factory method\nconst channel = group.addChannel('MyChannel', {\n  channelName: 'my-channel',\n  input: InputConfiguration.cmaf(),\n});\n\n// Add an origin endpoint using the factory method\nconst endpoint = channel.addOriginEndpoint('MyEndpoint', {\n  originEndpointName: 'my-endpoint',\n  segment: Segment.cmaf(),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n## Channel Group\n\nA channel group is the top-level resource that consists of channels and origin endpoints associated with it.\n\nThe following code creates a Channel Group:\n\n```ts\ndeclare const stack: Stack;\nconst group = new ChannelGroup(stack, 'MyChannelGroup', {\n    channelGroupName: 'my-test-channel-group',\n});\n```\n\nThe following code imports an existing channel group using the name attribute:\n\n```ts\ndeclare const stack: Stack;\nconst channelGroup = ChannelGroup.fromChannelGroupAttributes(stack, 'ImportedChannelGroup', {\n    channelGroupName: 'MyChannelGroup',\n});\n```\n\nYou can also import from an ARN, which automatically extracts the name and region:\n\n```ts\ndeclare const stack: Stack;\nconst channelGroup = ChannelGroup.fromChannelGroupArn(stack, 'ImportedChannelGroup',\n    'arn:aws:mediapackagev2:us-west-2:123456789012:channelGroup/MyChannelGroup',\n);\n```\n\nFor cross-region imports, pass the `region` parameter to ensure the correct ARN is constructed:\n\n```ts\ndeclare const stack: Stack;\nconst channelGroup = ChannelGroup.fromChannelGroupAttributes(stack, 'ImportedChannelGroup', {\n    channelGroupName: 'MyChannelGroup',\n    region: 'us-west-2',\n});\n```\n\n## Channel\n\nA channel is part of a channel group and represents the entry point for a content stream into MediaPackage.\n\n### Input Configuration\n\nChannels support two input types: HLS and CMAF.\n\n```ts\ndeclare const stack: Stack;\ndeclare const group: ChannelGroup;\n\nconst hlsChannel = new Channel(stack, 'HlsChannel', {\n  channelGroup: group,\n  input: InputConfiguration.hls(),\n});\n\nconst cmafChannel = new Channel(stack, 'CmafChannel', {\n  channelGroup: group,\n  input: InputConfiguration.cmaf({\n    inputSwitchConfiguration: {\n      mqcsInputSwitching: true,\n    },\n    outputHeaders: [HeadersCMSD.MQCS],\n  }),\n});\n\nconst simpleCmafChannel = new Channel(stack, 'SimpleCmafChannel', {\n  channelGroup: group,\n  input: InputConfiguration.cmaf({\n    outputHeaders: [HeadersCMSD.MQCS],\n  }),\n});\n```\n\n### Importing an Existing Channel\n\nThe following code imports an existing channel using the name attributes:\n\n```ts\ndeclare const stack: Stack;\nconst channel = Channel.fromChannelAttributes(stack, 'ImportedChannel', {\n    channelName: 'MyChannel',\n    channelGroupName: 'MyChannelGroup',\n});\n```\n\nYou can also import from an ARN:\n\n```ts\ndeclare const stack: Stack;\nconst channel = Channel.fromChannelArn(stack, 'ImportedChannel',\n    'arn:aws:mediapackagev2:us-west-2:123456789012:channelGroup/MyGroup/channel/MyChannel',\n);\n```\n\nImported channels expose a `region` property, which is parsed from the ARN or falls back to the importing stack's region.\n\n### Channel Resource Policy\n\nThe following code creates a resource policy directly on the channel. This\nwill automatically create a policy on the first call:\n\n```ts\ndeclare const channel: Channel;\nchannel.addToResourcePolicy(new PolicyStatement({\n    sid: 'AllowMediaLiveRoleToAccessEmpChannel',\n    principals: [new ArnPrincipal('arn:aws:iam::AccountID:role/MediaLiveAccessRole')],\n    effect: Effect.ALLOW,\n    actions: ['mediapackagev2:PutObject'],\n    resources: [channel.channelArn],\n}));\n```\n\n## Origin Endpoint\n\n```ts\ndeclare const stack: Stack;\ndeclare const channel: Channel;\nnew OriginEndpoint(stack, 'myendpoint', {\n    channel,\n    originEndpointName: 'my-test-endpoint',\n    segment: Segment.cmaf(),\n    manifests: [\n      Manifest.hls({\n        manifestName: 'index',\n      }),\n    ],\n});\n```\n\nThe following code imports an existing origin endpoint using the name attributes:\n\n```ts\ndeclare const stack: Stack;\nconst originEndpoint = OriginEndpoint.fromOriginEndpointAttributes(stack, 'ImportedOriginEndpoint', {\n    channelGroupName: 'MyChannelGroup',\n    channelName: 'MyChannel',\n    originEndpointName: 'MyExampleOriginEndpoint',\n});\n```\n\nYou can also import from an ARN:\n\n```ts\ndeclare const stack: Stack;\nconst originEndpoint = OriginEndpoint.fromOriginEndpointArn(stack, 'ImportedOriginEndpoint',\n    'arn:aws:mediapackagev2:us-west-2:123456789012:channelGroup/MyGroup/channel/MyChannel/originEndpoint/MyEndpoint',\n);\n```\n\nThe following code creates a resource policy on the origin endpoint. This\nwill automatically create a policy on the first call:\n\n```ts\ndeclare const origin: OriginEndpoint;\n\norigin.addToResourcePolicy(new PolicyStatement({\n    sid: 'AllowRequestsFromCloudFront',\n    principals: [new ServicePrincipal('cloudfront.amazonaws.com')],\n    effect: Effect.ALLOW,\n    actions: ['mediapackagev2:GetHeadObject', 'mediapackagev2:GetObject'],\n    resources: [origin.originEndpointArn],\n    conditions: {\n      StringEquals: {\n        'aws:SourceArn': 'arn:aws:cloudfront::123456789012:distribution/AAAAAAAAA',\n      },\n    },\n}));\n```\n\n### CDN Authorization\n\nMediaPackage V2 supports two ways to lock an origin endpoint to your CDN:\n\n- **AWS Signature Version 4 (SigV4)** — the CDN signs requests with an IAM\n  role. For Amazon CloudFront, see [CloudFront Integration](#cloudfront-integration).\n  See the [SigV4 authentication guide][sigv4-auth].\n- **Header-based CDN authorization** — the CDN attaches a shared secret in\n  a request header that MediaPackage validates. Use this when your CDN\n  doesn't support SigV4. See the [CDN authorization guide][cdn-auth].\n\n[sigv4-auth]: https://docs.aws.amazon.com/mediapackage/latest/userguide/sig-v4-authenticating-requests.html\n[cdn-auth]: https://docs.aws.amazon.com/mediapackage/latest/userguide/cdn-auth.html\n\nTo configure header-based authorization, set `cdnAuth` on the `OriginEndpoint`\nprops. The L2 auto-creates the endpoint policy with:\n\n- a `PolicyStatement` requiring the `mediapackagev2:RequestHasMatchingCdnAuthHeader`\n  condition on every `GetObject` request\n- the `CdnAuthConfiguration` block that references the secrets and the read role\n\nIf you don't supply a role, one is created with the needed Secrets Manager\nand KMS permissions.\n\n```ts\nimport * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';\n\ndeclare const channel: Channel;\ndeclare const mySecret: secretsmanager.ISecret;\n\nnew OriginEndpoint(this, 'OriginEndpoint', {\n  channel,\n  segment: Segment.ts(),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n  cdnAuth: {\n    secrets: [mySecret],\n  },\n});\n```\n\nYou can still call `addToResourcePolicy()` to add extra statements (e.g. a\nharvester allow); they're appended to the auto-created policy alongside the\ngating statement.\n\n## Granting Permissions\n\n### Granting Ingest Access to MediaLive\n\nTo allow AWS Elemental MediaLive to ingest content into a MediaPackage channel, use the `grants.ingest()` method:\n\n```ts\ndeclare const channel: Channel;\ndeclare const mediaLiveRole: iam.IRole;\n\n// Grant MediaLive permission to ingest content\nchannel.grants.ingest(mediaLiveRole);\n```\n\n### CloudFront Integration\n\nMediaPackage origin endpoints are designed to be used with Content Delivery Network (CDN) like Amazon CloudFront distributions. CloudFront provides caching, DDoS protection, and global content delivery for your streaming content.\n\nThe simplest way to connect CloudFront to a MediaPackage V2 endpoint is with `MediaPackageV2Origin`, which automatically creates an Origin Access Control (OAC) and wires the endpoint policy:\n\n```ts\ndeclare const endpoint: OriginEndpoint;\ndeclare const group: ChannelGroup;\n\nnew cloudfront.Distribution(this, 'Distribution', {\n  defaultBehavior: {\n    origin: new MediaPackageV2Origin(endpoint, {\n      channelGroup: group,\n    }),\n  },\n});\n```\n\nThis handles OAC creation, HTTPS-only origin config, and the IAM policy granting CloudFront access to the endpoint (including `GetHeadObject` for MQAR support).\n\nFor more control, you can manually configure the policy and OAC:\n\n```ts\ndeclare const originEndpoint: OriginEndpoint;\ndeclare const distribution: cloudfront.Distribution;\n\noriginEndpoint.addToResourcePolicy(new iam.PolicyStatement({\n  sid: 'AllowCloudFrontServicePrincipal',\n  principals: [new iam.ServicePrincipal('cloudfront.amazonaws.com')],\n  effect: iam.Effect.ALLOW,\n  actions: ['mediapackagev2:GetObject', 'mediapackagev2:GetHeadObject'],\n  resources: [originEndpoint.originEndpointArn],\n  conditions: {\n    StringEquals: {\n      'aws:SourceArn': distribution.distributionArn,\n    },\n  },\n}));\n```\n\n> **Graduation plan:** `MediaPackageV2Origin` currently lives in this alpha module. When MediaPackage V2 graduates to stable, it will move to `aws-cloudfront-origins` alongside `S3BucketOrigin` and other origin helpers.\n\n## Manifest Configuration\n\nMediaPackage V2 supports multiple manifest formats: HLS, Low-Latency HLS (LL-HLS), DASH, and Microsoft Smooth Streaming (MSS).\n\n### HLS Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(60),\n      programDateTimeInterval: Duration.seconds(60),\n      scteAdMarkerHls: AdMarkerHls.DATERANGE,\n    }),\n  ],\n});\n```\n\n### Low-Latency HLS Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.lowLatencyHLS({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(30),\n      programDateTimeInterval: Duration.seconds(5),\n      childManifestName: 'child',\n    }),\n  ],\n});\n```\n\n### DASH Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.dash({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(60),\n      minBufferTime: Duration.seconds(30),\n      minUpdatePeriod: Duration.seconds(10),\n      segmentTemplateFormat: SegmentTemplateFormat.NUMBER_WITH_TIMELINE,\n      periodTriggers: [\n        DashPeriodTriggers.AVAILS,\n        DashPeriodTriggers.DRM_KEY_ROTATION,\n      ],\n    }),\n  ],\n});\n```\n\n### MSS Manifests\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.ism(),\n  manifests: [\n    Manifest.mss({\n      manifestName: 'index',\n      manifestWindow: Duration.seconds(60),\n      manifestLayout: MssManifestLayout.COMPACT,\n    }),\n  ],\n});\n```\n\n### Multiple Manifests\n\nYou can configure multiple manifest formats for a single origin endpoint:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({ manifestName: 'hls' }),\n    Manifest.dash({ manifestName: 'dash' }),\n  ],\n});\n```\n\n| Segment type | Supported manifests |\n|--------|--------|\n| Segment.cmaf() | HLS, LL-HLS, DASH |\n| Segment.ts() | HLS, LL-HLS |\n| Segment.ism() | MSS |\n\nEach origin endpoint has a single segment configuration. If you need segments with different configurations, use multiple origin endpoints on the same channel.\n\n@see https://docs.aws.amazon.com/mediapackage/latest/userguide/endpoints-create.html\n\n## Manifest Filtering\n\nManifest filters control which variants are included in the manifest. Filters are type-safe and validated against the [MediaPackage manifest filtering rules](https://docs.aws.amazon.com/mediapackage/latest/userguide/manifest-filter-query-parameters.html).\n\n| Filter | Method |\n|--------|--------|\n| Audio / video bitrate | `bitrate()`, `bitrateRange()`, `bitrateCombo()` |\n| Audio channels, sample rate, video height, framerate, trickplay height | `numeric()`, `numericList()`, `numericRange()`, `numericCombo()` |\n| Audio codec | `audioCodec()`, `audioCodecList()` |\n| Video codec | `videoCodec()`, `videoCodecList()` |\n| Video dynamic range | `videoDynamicRange()`, `videoDynamicRangeList()` |\n| Trickplay type | `trickplayType()`, `trickplayTypeList()` |\n| Audio / subtitle language | `text()`, `textList()` |\n| Advanced patterns | `custom()` |\n\nThe following example creates an HD streaming endpoint that serves only H.264/H.265 content between 1–5 Mbps with stereo audio in English or French:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      filterConfiguration: {\n        manifestFilter: [\n          ManifestFilter.bitrateRange(BitrateFilterKey.VIDEO_BITRATE, Bitrate.mbps(1), Bitrate.mbps(5)),\n          ManifestFilter.numericRange(NumericFilterKey.VIDEO_HEIGHT, 720, 1080),\n          ManifestFilter.videoCodecList([VideoCodec.H264, VideoCodec.H265]),\n          ManifestFilter.numeric(NumericFilterKey.AUDIO_CHANNELS, 2),\n          ManifestFilter.textList(TextFilterKey.AUDIO_LANGUAGE, ['en-US', 'fr']),\n        ],\n        timeDelay: Duration.seconds(30),\n      },\n    }),\n  ],\n});\n```\n\nFor advanced patterns that combine ranges and single values, use `numericCombo()` or `bitrateCombo()`:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      filterConfiguration: {\n        manifestFilter: [\n          // video_height:240-360,720-1080,1440\n          ManifestFilter.numericCombo(NumericFilterKey.VIDEO_HEIGHT, [\n            NumericExpression.range(240, 360),\n            NumericExpression.range(720, 1080),\n            NumericExpression.value(1440),\n          ]),\n        ],\n      },\n    }),\n  ],\n});\n```\n\n### DRM Settings\n\nYou can exclude session keys from HLS and LL-HLS multivariant playlists using the `drmSettings` filter configuration. This improves compatibility with legacy HLS clients and provides more granular access control:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      filterConfiguration: {\n        drmSettings: [DrmSettingsKey.EXCLUDE_SESSION_KEYS],\n      },\n    }),\n  ],\n});\n```\n\n## Start Tag Configuration\n\nConfigure where playback should start in HLS and LL-HLS manifests using the EXT-X-START tag:\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [\n    Manifest.hls({\n      manifestName: 'index',\n      startTag: StartTag.of(10),\n    }),\n  ],\n});\n```\n\n## Segment Configuration\n\nConfigure segment settings for your origin endpoint.\n\n```ts\ndeclare const channel: Channel;\n\nnew OriginEndpoint(this, 'TsEndpoint', {\n  channel,\n  segment: Segment.ts({\n    duration: Duration.seconds(6),\n    name: 'segment',\n    includeDvbSubtitles: true,\n    useAudioRenditionGroup: true,\n    includeIframeOnlyStreams: false,\n    scteFilter: [\n      ScteMessageType.BREAK,\n      ScteMessageType.DISTRIBUTOR_ADVERTISEMENT,\n    ],\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n\nnew OriginEndpoint(this, 'CmafEndpoint', {\n  channel,\n  segment: Segment.cmaf({\n    duration: Duration.seconds(6),\n    name: 'segment',\n    includeIframeOnlyStreams: true,\n    scteFilter: [ScteMessageType.DISTRIBUTOR_ADVERTISEMENT],\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf(),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n## Encryption and DRM\n\nProtect your content with encryption using SPEKE (Secure Packager and Encoder Key Exchange). Each container type has its own encryption class with type-safe options:\n\n### CMAF Encryption\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf({\n    encryption: CmafEncryption.speke({\n      method: CmafEncryptionMethod.CBCS,\n      drmSystems: [CmafDrmSystem.FAIRPLAY, CmafDrmSystem.WIDEVINE],\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n      keyRotationInterval: Duration.seconds(300),\n      audioPreset: PresetSpeke20Audio.PRESET_AUDIO_2,\n      videoPreset: PresetSpeke20Video.PRESET_VIDEO_2,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n### TS Encryption\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'TsEndpoint', {\n  channel,\n  segment: Segment.ts({\n    encryption: TsEncryption.speke({\n      method: TsEncryptionMethod.SAMPLE_AES,\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\nTS encryption defaults the DRM system based on the method: FairPlay for `SAMPLE_AES`, Clear Key AES 128 for `AES_128`. You can override this with the `drmSystems` property using `TsDrmSystem`.\n\n### Content Key Encryption\n\nYou can add content key encryption by providing a certificate imported into AWS Certificate Manager. Your DRM key provider must support content key encryption for this to work:\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\ndeclare const certificate: certificatemanager.ICertificate;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf({\n    encryption: CmafEncryption.speke({\n      method: CmafEncryptionMethod.CBCS,\n      drmSystems: [CmafDrmSystem.FAIRPLAY],\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n      certificate,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n### Excluding Segment DRM Metadata\n\nFor CMAF content, you can exclude DRM metadata from segments:\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'Endpoint', {\n  channel,\n  segment: Segment.cmaf({\n    encryption: CmafEncryption.speke({\n      method: CmafEncryptionMethod.CBCS,\n      drmSystems: [CmafDrmSystem.FAIRPLAY],\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n      excludeSegmentDrmMetadata: true,\n    }),\n  }),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n});\n```\n\n### ISM (Smooth Streaming) Encryption\n\nISM endpoints use CENC encryption with PlayReady. Audio and video presets are always `SHARED`, and key rotation is not supported. The DRM system defaults to PlayReady:\n\n```ts\ndeclare const channel: Channel;\ndeclare const spekeRole: iam.IRole;\n\nnew OriginEndpoint(this, 'IsmEndpoint', {\n  channel,\n  segment: Segment.ism({\n    encryption: IsmEncryption.speke({\n      resourceId: 'my-content-id',\n      url: 'https://example.com/speke',\n      role: spekeRole,\n    }),\n  }),\n  manifests: [Manifest.mss({ manifestName: 'index' })],\n});\n```\n\n## CloudWatch Metrics\n\nMediaPackage V2 resources expose CloudWatch metrics for monitoring. You can create alarms and dashboards using these metrics:\n\n```ts\ndeclare const channelGroup: ChannelGroup;\ndeclare const channel: Channel;\ndeclare const endpoint: OriginEndpoint;\n\n// Create a CloudWatch alarm on channel group egress bytes\nconst alarm = channelGroup.metricEgressBytes().createAlarm(this, 'HighEgress', {\n  threshold: 1000,\n  evaluationPeriods: 1,\n});\n\n// Monitor channel ingress response time\nchannel.metricIngressResponseTime().createAlarm(this, 'SlowIngress', {\n  threshold: 1000,\n  evaluationPeriods: 2,\n});\n\n// Track origin endpoint request count\nconst requestMetric = endpoint.metricEgressRequestCount({\n  statistic: 'sum',\n  period: Duration.minutes(5),\n});\n```\n\nAvailable metrics include:\n\n- `metricIngressBytes()` - Bytes ingested\n- `metricEgressBytes()` - Bytes delivered\n- `metricIngressResponseTime()` - Ingress response time (average)\n- `metricEgressResponseTime()` - Egress response time (average)\n- `metricIngressRequestCount()` - Number of ingress requests\n- `metricEgressRequestCount()` - Number of egress requests\n\nAll metrics support standard CloudWatch metric options for customizing period, statistic, and dimensions.\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-mediapackagev2-alpha",
@@ -9074,7 +9103,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 24
+        "line": 25
       },
       "members": [
         {
@@ -9127,7 +9156,7 @@
         },
         "locationInModule": {
           "filename": "lib/endpoint.ts",
-          "line": 239
+          "line": 240
         },
         "parameters": [
           {
@@ -9163,7 +9192,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 224
+        "line": 225
       },
       "methods": [
         {
@@ -9173,7 +9202,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 235
+            "line": 236
           },
           "name": "range",
           "parameters": [
@@ -9204,7 +9233,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 228
+            "line": 229
           },
           "name": "value",
           "parameters": [
@@ -9242,7 +9271,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 168
+        "line": 169
       },
       "members": [
         {
@@ -9272,9 +9301,9 @@
         "see": "https://docs.aws.amazon.com/mediapackage/latest/userguide/cdn-auth.html",
         "stability": "experimental",
         "summary": "Options for configuring CDN Authorization Configuration.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as mediapackagev2_alpha from '@aws-cdk/aws-mediapackagev2-alpha';\nimport { aws_iam as iam } from 'aws-cdk-lib';\nimport { aws_secretsmanager as secretsmanager } from 'aws-cdk-lib';\n\ndeclare const role: iam.Role;\ndeclare const secret: secretsmanager.Secret;\nconst cdnAuthConfiguration: mediapackagev2_alpha.CdnAuthConfiguration = {\n  secrets: [secret],\n\n  // the properties below are optional\n  role: role,\n};",
+        "example": "import * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';\n\ndeclare const channel: Channel;\ndeclare const mySecret: secretsmanager.ISecret;\n\nnew OriginEndpoint(this, 'OriginEndpoint', {\n  channel,\n  segment: Segment.ts(),\n  manifests: [Manifest.hls({ manifestName: 'index' })],\n  cdnAuth: {\n    secrets: [mySecret],\n  },\n});",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
+          "exampleMetadata": "infused"
         }
       },
       "fqn": "@aws-cdk/aws-mediapackagev2-alpha.CdnAuthConfiguration",
@@ -9288,13 +9317,14 @@
         {
           "abstract": true,
           "docs": {
+            "remarks": "Each secret must be a JSON object with a `MediaPackageV2CDNIdentifier` key whose\nvalue is the CDN-Identifier header value. See the\n{@link https://docs.aws.amazon.com/mediapackage/latest/userguide/cdn-auth-setup.html MediaPackage CDN authorization docs}.",
             "stability": "experimental",
             "summary": "Secrets to use for CDN authorization."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/origin-endpoint-policy.ts",
-            "line": 20
+            "line": 24
           },
           "name": "secrets",
           "type": {
@@ -9317,7 +9347,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/origin-endpoint-policy.ts",
-            "line": 29
+            "line": 33
           },
           "name": "role",
           "optional": true,
@@ -11130,7 +11160,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 1900
+        "line": 1929
       },
       "members": [
         {
@@ -11181,7 +11211,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2155
+        "line": 2184
       },
       "methods": [
         {
@@ -11191,7 +11221,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2159
+            "line": 2188
           },
           "name": "speke",
           "parameters": [
@@ -11227,7 +11257,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 791
+        "line": 792
       },
       "members": [
         {
@@ -11329,7 +11359,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2453
+        "line": 2482
       },
       "name": "CmafSegmentProps",
       "properties": [
@@ -11344,7 +11374,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2475
+            "line": 2504
           },
           "name": "encryption",
           "optional": true,
@@ -11362,7 +11392,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2459
+            "line": 2488
           },
           "name": "scteFilter",
           "optional": true,
@@ -11385,7 +11415,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2466
+            "line": 2495
           },
           "name": "scteInSegments",
           "optional": true,
@@ -11411,7 +11441,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2001
+        "line": 2030
       },
       "name": "CmafSpekeEncryptionProps",
       "properties": [
@@ -11425,7 +11455,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2013
+            "line": 2042
           },
           "name": "drmSystems",
           "type": {
@@ -11446,7 +11476,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2005
+            "line": 2034
           },
           "name": "method",
           "type": {
@@ -11463,7 +11493,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1958
+            "line": 1987
           },
           "name": "resourceId",
           "type": {
@@ -11480,7 +11510,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1966
+            "line": 1995
           },
           "name": "role",
           "type": {
@@ -11496,7 +11526,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1971
+            "line": 2000
           },
           "name": "url",
           "type": {
@@ -11513,7 +11543,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1988
+            "line": 2017
           },
           "name": "audioPreset",
           "optional": true,
@@ -11532,7 +11562,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1981
+            "line": 2010
           },
           "name": "certificate",
           "optional": true,
@@ -11551,7 +11581,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2023
+            "line": 2052
           },
           "name": "constantInitializationVector",
           "optional": true,
@@ -11569,7 +11599,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2037
+            "line": 2066
           },
           "name": "excludeSegmentDrmMetadata",
           "optional": true,
@@ -11587,7 +11617,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2030
+            "line": 2059
           },
           "name": "keyRotationInterval",
           "optional": true,
@@ -11605,7 +11635,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1995
+            "line": 2024
           },
           "name": "videoPreset",
           "optional": true,
@@ -11627,7 +11657,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 773
+        "line": 774
       },
       "members": [
         {
@@ -12712,7 +12742,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2118
+        "line": 2147
       },
       "name": "EncryptionConfiguration",
       "symbolId": "lib/endpoint:EncryptionConfiguration"
@@ -12727,7 +12757,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 898
+        "line": 899
       },
       "members": [
         {
@@ -13982,7 +14012,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 979
+        "line": 980
       },
       "methods": [
         {
@@ -14006,17 +14036,6 @@
               "type": {
                 "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
               }
-            },
-            {
-              "docs": {
-                "remarks": "Only the first CDN auth configuration is used if provided multiple times.",
-                "summary": "- Optional CDN authorization configuration."
-              },
-              "name": "cdnAuth",
-              "optional": true,
-              "type": {
-                "fqn": "@aws-cdk/aws-mediapackagev2-alpha.CdnAuthConfiguration"
-              }
             }
           ],
           "returns": {
@@ -14240,7 +14259,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 985
+            "line": 986
           },
           "name": "channelGroupName",
           "type": {
@@ -14259,7 +14278,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 992
+            "line": 993
           },
           "name": "channelName",
           "type": {
@@ -14278,7 +14297,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1006
+            "line": 1007
           },
           "name": "originEndpointArn",
           "type": {
@@ -14297,7 +14316,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 999
+            "line": 1000
           },
           "name": "originEndpointName",
           "type": {
@@ -14316,7 +14335,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1013
+            "line": 1014
           },
           "name": "createdAt",
           "optional": true,
@@ -14336,7 +14355,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1041
+            "line": 1042
           },
           "name": "dashManifestUrls",
           "optional": true,
@@ -14361,7 +14380,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1027
+            "line": 1028
           },
           "name": "hlsManifestUrls",
           "optional": true,
@@ -14386,7 +14405,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1034
+            "line": 1035
           },
           "name": "lowLatencyHlsManifestUrls",
           "optional": true,
@@ -14411,7 +14430,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1020
+            "line": 1021
           },
           "name": "modifiedAt",
           "optional": true,
@@ -14431,7 +14450,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1048
+            "line": 1049
           },
           "name": "mssManifestUrls",
           "optional": true,
@@ -14702,7 +14721,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 1940
+        "line": 1969
       },
       "members": [
         {
@@ -14732,7 +14751,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2279
+        "line": 2308
       },
       "methods": [
         {
@@ -14742,7 +14761,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2283
+            "line": 2312
           },
           "name": "speke",
           "parameters": [
@@ -14782,7 +14801,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2481
+        "line": 2510
       },
       "name": "IsmSegmentProps",
       "properties": [
@@ -14797,7 +14816,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2489
+            "line": 2518
           },
           "name": "encryption",
           "optional": true,
@@ -14824,7 +14843,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2081
+        "line": 2110
       },
       "name": "IsmSpekeEncryptionProps",
       "properties": [
@@ -14837,7 +14856,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2092
+            "line": 2121
           },
           "name": "resourceId",
           "type": {
@@ -14853,7 +14872,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2097
+            "line": 2126
           },
           "name": "role",
           "type": {
@@ -14869,7 +14888,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2102
+            "line": 2131
           },
           "name": "url",
           "type": {
@@ -14886,7 +14905,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2110
+            "line": 2139
           },
           "name": "certificate",
           "optional": true,
@@ -14904,7 +14923,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2087
+            "line": 2116
           },
           "name": "drmSystems",
           "optional": true,
@@ -15111,7 +15130,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 427
+        "line": 428
       },
       "methods": [
         {
@@ -15122,7 +15141,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 454
+            "line": 455
           },
           "name": "dash",
           "parameters": [
@@ -15148,7 +15167,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 444
+            "line": 445
           },
           "name": "hls",
           "parameters": [
@@ -15174,7 +15193,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 434
+            "line": 435
           },
           "name": "lowLatencyHLS",
           "parameters": [
@@ -15200,7 +15219,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 464
+            "line": 465
           },
           "name": "mss",
           "parameters": [
@@ -15240,7 +15259,7 @@
         },
         "locationInModule": {
           "filename": "lib/endpoint.ts",
-          "line": 409
+          "line": 410
         },
         "parameters": [
           {
@@ -15258,7 +15277,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 252
+        "line": 253
       },
       "methods": [
         {
@@ -15268,7 +15287,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 315
+            "line": 316
           },
           "name": "audioCodec",
           "parameters": [
@@ -15293,7 +15312,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 322
+            "line": 323
           },
           "name": "audioCodecList",
           "parameters": [
@@ -15323,7 +15342,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 256
+            "line": 257
           },
           "name": "bitrate",
           "parameters": [
@@ -15355,7 +15374,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 394
+            "line": 395
           },
           "name": "bitrateCombo",
           "parameters": [
@@ -15391,7 +15410,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 265
+            "line": 266
           },
           "name": "bitrateRange",
           "parameters": [
@@ -15428,7 +15447,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 402
+            "line": 403
           },
           "name": "custom",
           "parameters": [
@@ -15453,7 +15472,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 276
+            "line": 277
           },
           "name": "numeric",
           "parameters": [
@@ -15486,7 +15505,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 380
+            "line": 381
           },
           "name": "numericCombo",
           "parameters": [
@@ -15522,7 +15541,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 284
+            "line": 285
           },
           "name": "numericList",
           "parameters": [
@@ -15558,7 +15577,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 292
+            "line": 293
           },
           "name": "numericRange",
           "parameters": [
@@ -15595,7 +15614,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 301
+            "line": 302
           },
           "name": "text",
           "parameters": [
@@ -15626,7 +15645,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 308
+            "line": 309
           },
           "name": "textList",
           "parameters": [
@@ -15662,7 +15681,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 357
+            "line": 358
           },
           "name": "trickplayType",
           "parameters": [
@@ -15687,7 +15706,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 364
+            "line": 365
           },
           "name": "trickplayTypeList",
           "parameters": [
@@ -15717,7 +15736,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 329
+            "line": 330
           },
           "name": "videoCodec",
           "parameters": [
@@ -15742,7 +15761,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 336
+            "line": 337
           },
           "name": "videoCodecList",
           "parameters": [
@@ -15772,7 +15791,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 343
+            "line": 344
           },
           "name": "videoDynamicRange",
           "parameters": [
@@ -15797,7 +15816,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 350
+            "line": 351
           },
           "name": "videoDynamicRangeList",
           "parameters": [
@@ -15831,7 +15850,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 409
+            "line": 410
           },
           "name": "filterString",
           "type": {
@@ -15858,7 +15877,7 @@
         },
         "locationInModule": {
           "filename": "lib/cloudfront-origin.ts",
-          "line": 71
+          "line": 58
         },
         "parameters": [
           {
@@ -15878,7 +15897,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/cloudfront-origin.ts",
-        "line": 66
+        "line": 54
       },
       "methods": [
         {
@@ -15889,7 +15908,7 @@
           },
           "locationInModule": {
             "filename": "lib/cloudfront-origin.ts",
-            "line": 91
+            "line": 77
           },
           "name": "bind",
           "overrides": "aws-cdk-lib.aws_cloudfront.OriginBase",
@@ -15919,7 +15938,7 @@
           },
           "locationInModule": {
             "filename": "lib/cloudfront-origin.ts",
-            "line": 84
+            "line": 70
           },
           "name": "renderCustomOriginConfig",
           "overrides": "aws-cdk-lib.aws_cloudfront.OriginBase",
@@ -15953,7 +15972,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/cloudfront-origin.ts",
-        "line": 14
+        "line": 13
       },
       "name": "MediaPackageV2OriginProps",
       "properties": [
@@ -15967,32 +15986,13 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/cloudfront-origin.ts",
-            "line": 20
+            "line": 19
           },
           "name": "channelGroup",
           "type": {
             "fqn": "@aws-cdk/aws-mediapackagev2-alpha.IChannelGroup"
           }
         },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "- no CDN authorization",
-            "remarks": "If you need CDN auth on this endpoint, provide it here so it is configured\non the first `addToResourcePolicy` call. If CDN auth is added separately\nafter this origin is bound, it will be ignored.",
-            "stability": "experimental",
-            "summary": "Optional CDN authorization configuration."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/cloudfront-origin.ts",
-            "line": 38
-          },
-          "name": "cdnAuth",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-mediapackagev2-alpha.CdnAuthConfiguration"
-          }
-        },
         {
           "abstract": true,
           "docs": {
@@ -16003,7 +16003,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/cloudfront-origin.ts",
-            "line": 27
+            "line": 26
           },
           "name": "originAccessControl",
           "optional": true,
@@ -16160,7 +16160,7 @@
         },
         "locationInModule": {
           "filename": "lib/endpoint.ts",
-          "line": 210
+          "line": 211
         },
         "parameters": [
           {
@@ -16196,7 +16196,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 195
+        "line": 196
       },
       "methods": [
         {
@@ -16206,7 +16206,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 206
+            "line": 207
           },
           "name": "range",
           "parameters": [
@@ -16237,7 +16237,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 199
+            "line": 200
           },
           "name": "value",
           "parameters": [
@@ -16275,7 +16275,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 89
+        "line": 90
       },
       "members": [
         {
@@ -16340,7 +16340,7 @@
         },
         "locationInModule": {
           "filename": "lib/endpoint.ts",
-          "line": 2886
+          "line": 2900
         },
         "parameters": [
           {
@@ -16369,7 +16369,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2834
+        "line": 2848
       },
       "methods": [
         {
@@ -16380,7 +16380,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2555
+            "line": 2584
           },
           "name": "fromOriginEndpointArn",
           "parameters": [
@@ -16417,7 +16417,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2584
+            "line": 2613
           },
           "name": "fromOriginEndpointAttributes",
           "parameters": [
@@ -16449,13 +16449,13 @@
         },
         {
           "docs": {
-            "remarks": "You can only add 1 OriginEndpointPolicy to an OriginEndpoint.\nIf you have already defined one, it will append to the policy already created.",
+            "remarks": "You can only add 1 OriginEndpointPolicy to an OriginEndpoint. If you have already\ndefined one, this will append to the policy already created.\n\nTo configure CDN authentication, set `cdnAuth` on the construct's props instead.",
             "stability": "experimental",
             "summary": "Configure origin endpoint policy."
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2680
+            "line": 2699
           },
           "name": "addToResourcePolicy",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16468,17 +16468,6 @@
               "type": {
                 "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
               }
-            },
-            {
-              "docs": {
-                "remarks": "If provided, the policy will be\n  created with CDN authentication enabled using secrets from AWS Secrets Manager.\n  If cdnAuth is provided multiple times, only the first configuration is used.",
-                "summary": "- Optional CDN authorization configuration."
-              },
-              "name": "cdnAuth",
-              "optional": true,
-              "type": {
-                "fqn": "@aws-cdk/aws-mediapackagev2-alpha.CdnAuthConfiguration"
-              }
             }
           ],
           "returns": {
@@ -16494,7 +16483,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2733
+            "line": 2747
           },
           "name": "metric",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16533,7 +16522,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2765
+            "line": 2779
           },
           "name": "metricEgressBytes",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16560,7 +16549,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2807
+            "line": 2821
           },
           "name": "metricEgressRequestCount",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16587,7 +16576,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2793
+            "line": 2807
           },
           "name": "metricEgressResponseTime",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16614,7 +16603,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2751
+            "line": 2765
           },
           "name": "metricIngressBytes",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16641,7 +16630,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2821
+            "line": 2835
           },
           "name": "metricIngressRequestCount",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16668,7 +16657,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2779
+            "line": 2793
           },
           "name": "metricIngressResponseTime",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16694,7 +16683,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2704
+            "line": 2718
           },
           "name": "segmentValidation",
           "parameters": [
@@ -16732,7 +16721,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2837
+            "line": 2851
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -16748,7 +16737,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2839
+            "line": 2853
           },
           "name": "channelGroupName",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16764,7 +16753,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2840
+            "line": 2854
           },
           "name": "channelName",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16780,7 +16769,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2842
+            "line": 2856
           },
           "name": "originEndpointArn",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16796,7 +16785,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2841
+            "line": 2855
           },
           "name": "originEndpointName",
           "overrides": "@aws-cdk/aws-mediapackagev2-alpha.IOriginEndpoint",
@@ -16813,7 +16802,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2629
+            "line": 2658
           },
           "name": "originEndpointRef",
           "overrides": "aws-cdk-lib.interfaces.aws_mediapackagev2.IOriginEndpointRef",
@@ -16829,7 +16818,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2847
+            "line": 2861
           },
           "name": "createdAt",
           "optional": true,
@@ -16846,7 +16835,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2867
+            "line": 2881
           },
           "name": "dashManifestUrls",
           "optional": true,
@@ -16868,7 +16857,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2862
+            "line": 2876
           },
           "name": "hlsManifestUrls",
           "optional": true,
@@ -16890,7 +16879,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2857
+            "line": 2871
           },
           "name": "lowLatencyHlsManifestUrls",
           "optional": true,
@@ -16912,7 +16901,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2852
+            "line": 2866
           },
           "name": "modifiedAt",
           "optional": true,
@@ -16929,7 +16918,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2871
+            "line": 2885
           },
           "name": "mssManifestUrls",
           "optional": true,
@@ -16950,7 +16939,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2879
+            "line": 2893
           },
           "name": "autoCreatePolicy",
           "protected": true,
@@ -16964,7 +16953,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2882
+            "line": 2896
           },
           "name": "dashManifests",
           "protected": true,
@@ -16983,7 +16972,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2880
+            "line": 2894
           },
           "name": "hlsManifests",
           "protected": true,
@@ -17002,7 +16991,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2881
+            "line": 2895
           },
           "name": "llHlsManifests",
           "protected": true,
@@ -17021,7 +17010,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2883
+            "line": 2897
           },
           "name": "mssManifests",
           "protected": true,
@@ -17034,6 +17023,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Set by subclass constructors when `cdnAuth` is provided in props.",
+            "stability": "experimental",
+            "summary": "CDN authorization configuration to be applied when the policy is created."
+          },
+          "locationInModule": {
+            "filename": "lib/endpoint.ts",
+            "line": 2687
+          },
+          "name": "cdnAuthConfig",
+          "optional": true,
+          "protected": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-mediapackagev2-alpha.CdnAuthConfiguration"
+          }
+        },
         {
           "docs": {
             "remarks": "If `autoCreatePolicy` is true, an `OriginEndpointPolicy` will be created upon the\nfirst call to addToResourcePolicy(s).",
@@ -17042,7 +17048,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2878
+            "line": 2892
           },
           "name": "policy",
           "optional": true,
@@ -17056,7 +17062,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2884
+            "line": 2898
           },
           "name": "segment",
           "optional": true,
@@ -17083,7 +17089,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 1862
+        "line": 1891
       },
       "name": "OriginEndpointAttributes",
       "properties": [
@@ -17100,7 +17106,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1868
+            "line": 1897
           },
           "name": "channelGroupName",
           "type": {
@@ -17120,7 +17126,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1875
+            "line": 1904
           },
           "name": "channelName",
           "type": {
@@ -17139,7 +17145,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1882
+            "line": 1911
           },
           "name": "originEndpointName",
           "type": {
@@ -17157,7 +17163,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1891
+            "line": 1920
           },
           "name": "region",
           "optional": true,
@@ -17229,13 +17235,15 @@
           "abstract": true,
           "docs": {
             "default": "undefined - Not configured on endpoint",
+            "remarks": "Use this when your CDN doesn't support AWS Signature Version 4 (SigV4)\nauthentication. For SigV4-based access with Amazon CloudFront, see\n`MediaPackageV2Origin`.\n\nSetting `cdnAuth` auto-creates the following policy on the OriginEndpoint:\n\n```json\n{\n  \"Version\":\"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Sid\": \"AllowGetObjectAccessForAuthorizedRequest\",\n      \"Effect\": \"Allow\",\n      \"Principal\": \"*\",\n      \"Action\": \"mediapackagev2:GetObject\",\n      \"Resource\": \"arn:aws:mediapackagev2:us-east-1:111122223333:channelGroup/channelGroupName/channel/channelName/originEndpoint/originEndpointName\",\n      \"Condition\": {\n        \"Bool\": {\n          \"mediapackagev2:RequestHasMatchingCdnAuthHeader\": \"true\"\n        }\n      }\n    }\n  ]\n}\n```",
+            "see": "https://docs.aws.amazon.com/mediapackage/latest/userguide/cdn-auth-setup.html",
             "stability": "experimental",
             "summary": "Provide access to MediaPackage V2 Origin Endpoint via secret header."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1834
+            "line": 1863
           },
           "name": "cdnAuth",
           "optional": true,
@@ -17313,7 +17321,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1846
+            "line": 1875
           },
           "name": "removalPolicy",
           "optional": true,
@@ -17385,7 +17393,7 @@
         },
         "locationInModule": {
           "filename": "lib/origin-endpoint-policy.ts",
-          "line": 87
+          "line": 91
         },
         "parameters": [
           {
@@ -17411,7 +17419,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/origin-endpoint-policy.ts",
-        "line": 77
+        "line": 81
       },
       "name": "OriginEndpointPolicy",
       "properties": [
@@ -17424,7 +17432,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/origin-endpoint-policy.ts",
-            "line": 80
+            "line": 84
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -17440,7 +17448,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/origin-endpoint-policy.ts",
-            "line": 85
+            "line": 89
           },
           "name": "document",
           "type": {
@@ -17465,7 +17473,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/origin-endpoint-policy.ts",
-        "line": 35
+        "line": 39
       },
       "name": "OriginEndpointPolicyProps",
       "properties": [
@@ -17478,7 +17486,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/origin-endpoint-policy.ts",
-            "line": 39
+            "line": 43
           },
           "name": "originEndpoint",
           "type": {
@@ -17495,7 +17503,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/origin-endpoint-policy.ts",
-            "line": 53
+            "line": 57
           },
           "name": "cdnAuth",
           "optional": true,
@@ -17513,7 +17521,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/origin-endpoint-policy.ts",
-            "line": 46
+            "line": 50
           },
           "name": "policyDocument",
           "optional": true,
@@ -17542,7 +17550,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 1852
+        "line": 1881
       },
       "name": "OriginEndpointProps",
       "properties": [
@@ -17555,7 +17563,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1856
+            "line": 1885
           },
           "name": "channel",
           "type": {
@@ -17579,7 +17587,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 819
+        "line": 820
       },
       "members": [
         {
@@ -17636,7 +17644,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 848
+        "line": 849
       },
       "members": [
         {
@@ -17723,7 +17731,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 962
+        "line": 963
       },
       "members": [
         {
@@ -17755,7 +17763,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 920
+        "line": 921
       },
       "members": [
         {
@@ -17844,7 +17852,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2495
+        "line": 2524
       },
       "methods": [
         {
@@ -17855,7 +17863,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2520
+            "line": 2549
           },
           "name": "cmaf",
           "parameters": [
@@ -17882,7 +17890,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2537
+            "line": 2566
           },
           "name": "ism",
           "parameters": [
@@ -17909,7 +17917,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2501
+            "line": 2530
           },
           "name": "ts",
           "parameters": [
@@ -17947,7 +17955,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2325
+        "line": 2354
       },
       "name": "SegmentConfiguration",
       "properties": [
@@ -17960,7 +17968,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2329
+            "line": 2358
           },
           "name": "containerType",
           "type": {
@@ -17977,7 +17985,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2379
+            "line": 2408
           },
           "name": "encryption",
           "optional": true,
@@ -17995,7 +18003,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2335
+            "line": 2364
           },
           "name": "includeIframeOnlyStreams",
           "optional": true,
@@ -18014,7 +18022,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2343
+            "line": 2372
           },
           "name": "scteFilter",
           "optional": true,
@@ -18037,7 +18045,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2349
+            "line": 2378
           },
           "name": "scteInSegments",
           "optional": true,
@@ -18055,7 +18063,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2355
+            "line": 2384
           },
           "name": "segmentDuration",
           "optional": true,
@@ -18073,7 +18081,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2361
+            "line": 2390
           },
           "name": "segmentName",
           "optional": true,
@@ -18091,7 +18099,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2367
+            "line": 2396
           },
           "name": "tsIncludeDvbSubtitles",
           "optional": true,
@@ -18109,7 +18117,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2373
+            "line": 2402
           },
           "name": "tsUseAudioRenditionGroup",
           "optional": true,
@@ -18135,7 +18143,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2385
+        "line": 2414
       },
       "name": "SegmentPropsBase",
       "properties": [
@@ -18149,7 +18157,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2398
+            "line": 2427
           },
           "name": "duration",
           "optional": true,
@@ -18167,7 +18175,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2391
+            "line": 2420
           },
           "name": "includeIframeOnlyStreams",
           "optional": true,
@@ -18185,7 +18193,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2405
+            "line": 2434
           },
           "name": "name",
           "optional": true,
@@ -18406,7 +18414,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 146
+        "line": 147
       },
       "members": [
         {
@@ -18440,7 +18448,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 70
+        "line": 71
       },
       "members": [
         {
@@ -18479,7 +18487,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 1924
+        "line": 1953
       },
       "members": [
         {
@@ -18516,7 +18524,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2218
+        "line": 2247
       },
       "methods": [
         {
@@ -18526,7 +18534,7 @@
           },
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2222
+            "line": 2251
           },
           "name": "speke",
           "parameters": [
@@ -18562,7 +18570,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 805
+        "line": 806
       },
       "members": [
         {
@@ -18601,7 +18609,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2411
+        "line": 2440
       },
       "name": "TsSegmentProps",
       "properties": [
@@ -18616,7 +18624,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2447
+            "line": 2476
           },
           "name": "encryption",
           "optional": true,
@@ -18634,7 +18642,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2431
+            "line": 2460
           },
           "name": "includeDvbSubtitles",
           "optional": true,
@@ -18652,7 +18660,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2417
+            "line": 2446
           },
           "name": "scteFilter",
           "optional": true,
@@ -18675,7 +18683,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2424
+            "line": 2453
           },
           "name": "scteInSegments",
           "optional": true,
@@ -18693,7 +18701,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2438
+            "line": 2467
           },
           "name": "useAudioRenditionGroup",
           "optional": true,
@@ -18719,7 +18727,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 2043
+        "line": 2072
       },
       "name": "TsSpekeEncryptionProps",
       "properties": [
@@ -18732,7 +18740,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2047
+            "line": 2076
           },
           "name": "method",
           "type": {
@@ -18749,7 +18757,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1958
+            "line": 1987
           },
           "name": "resourceId",
           "type": {
@@ -18766,7 +18774,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1966
+            "line": 1995
           },
           "name": "role",
           "type": {
@@ -18782,7 +18790,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1971
+            "line": 2000
           },
           "name": "url",
           "type": {
@@ -18799,7 +18807,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1988
+            "line": 2017
           },
           "name": "audioPreset",
           "optional": true,
@@ -18818,7 +18826,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1981
+            "line": 2010
           },
           "name": "certificate",
           "optional": true,
@@ -18837,7 +18845,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2064
+            "line": 2093
           },
           "name": "constantInitializationVector",
           "optional": true,
@@ -18855,7 +18863,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2054
+            "line": 2083
           },
           "name": "drmSystems",
           "optional": true,
@@ -18878,7 +18886,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 2071
+            "line": 2100
           },
           "name": "keyRotationInterval",
           "optional": true,
@@ -18896,7 +18904,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/endpoint.ts",
-            "line": 1995
+            "line": 2024
           },
           "name": "videoPreset",
           "optional": true,
@@ -18949,7 +18957,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 40
+        "line": 41
       },
       "members": [
         {
@@ -18988,7 +18996,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/endpoint.ts",
-        "line": 54
+        "line": 55
       },
       "members": [
         {
@@ -19024,6 +19032,6 @@
       "symbolId": "lib/endpoint:VideoDynamicRange"
     }
   },
-  "version": "2.256.1-alpha.0",
+  "version": "2.258.0-alpha.0",
   "fingerprint": "**********"
 }