watermarking

Version: v2025-01-13Includes use: Yes

Behavior name: Watermarking

Adds watermarking for each valid user's content. Content segments are delivered from different sources using a pattern unique to each user, based on a watermarking token included in each request. If your content is pirated or redistributed, you can forensically analyze the segments to extract the pattern, and identify the user who leaked the content.

Default behavior

These samples reflect the behavior's default settings. You can use these as is in your configurations or make adjustments based on the behavior's available options.

data "akamai_property_rules_builder" "watermarking" {
  rules_v2025_02_18 {
    name     = "Watermarking"
    comments = "Adds watermarking for each valid user's content."
    behavior {
      watermarking {
        signature_verification_enable = true
        verification_public_key2      = ""
        verification_key_id1          = ""
        verification_public_key1      = ""
        ab_variant_location           = "FILENAME_PREFIX"
        use_original_as_a             = false
        enable                        = true
        verification_key_id2          = ""
        pattern_decryption_enable     = false
      }
    }
  }
}
"behaviors": [
  {
    "name": "watermarking",
    "options": {
      "enable": true,
      "signatureVerificationEnable": true,
      "verificationKeyId1": "",
      "verificationPublicKey1": "",
      "verificationKeyId2": "",
      "verificationPublicKey2": "",
      "patternDecryptionEnable": false,
      "useOriginalAsA": false,
      "abVariantLocation": "FILENAME_PREFIX"
    }
  }
]

Options

Option Description
enable
Enables the watermarking behavior.
signature_verification_enable
When enabled, you can verify the signature in your watermarking token.
verification_key_id1
Specifies a unique identifier for the first public key.
verification_public_key1
Specifies the first public key in its entirety.
verification_key_id2
Specifies a unique identifier for the optional second public key.
verification_public_key2
Specifies the optional second public key in its entirety. Specify a second key to enable rotation.
pattern_decryption_enable
If patterns in your watermarking tokens have been encrypted, enabling this allows you to provide values to decrypt them.
decryption_password_id1
Specifies a label that corresponds to the primary password.
decryption_password1
Provides the primary password used to encrypt patterns in your watermarking tokens.
decryption_password_id2
Specifies a label for the secondary password, used in rotation scenarios to identify which password to use for decryption.
decryption_password2
Provides the secondary password you can use to rotate passwords.
use_original_as_a
When you work with your watermarking vendor, you can apply several preprocessing methods to your content. See the AMD help for more information. With the standard filename-prefix AB naming preprocessing method, the watermarking vendor creates two variants of the original segment content and labels them as an A and B segment in the filename. If you selected the unlabeled A variant preprocessing method, enabling this option tells your configuration to use the original filename segment content as your A variant.
ab_variant_location
Applies preprocessing methods to your content. Use this option to specify the location of the A and B variant segments. Value is one of:
  • FILENAME_PREFIX. Set for the standard, filename-prefix AB naming preprocessing method, where the variant letter is included in the filename.
  • PARENT_DIRECTORY_PREFIX. Set for the directory-prefix AB naming preprocessing method, where variants are located in a subdirectory named after the variants, such as /B/segment1.ts.
For more information, see AMD help.