watermarking

Suggest Edits

Version: `v2025-01-13`	Includes use: Yes

Behavior name: Watermarking

Adds watermarking for each valid user's content. Content segments are delivered from different sources using a pattern unique to each user, based on a watermarking token included in each request. If your content is pirated or redistributed, you can forensically analyze the segments to extract the pattern, and identify the user who leaked the content.

Default behavior

These samples reflect the behavior's default settings. You can use these as is in your configurations or make adjustments based on the behavior's available options.

data "akamai_property_rules_builder" "watermarking" {
  rules_v2025_02_18 {
    name     = "Watermarking"
    comments = "Adds watermarking for each valid user's content."
    behavior {
      watermarking {
        signature_verification_enable = true
        verification_public_key2      = ""
        verification_key_id1          = ""
        verification_public_key1      = ""
        ab_variant_location           = "FILENAME_PREFIX"
        use_original_as_a             = false
        enable                        = true
        verification_key_id2          = ""
        pattern_decryption_enable     = false
      }
    }
  }
}

"behaviors": [
  {
    "name": "watermarking",
    "options": {
      "enable": true,
      "signatureVerificationEnable": true,
      "verificationKeyId1": "",
      "verificationPublicKey1": "",
      "verificationKeyId2": "",
      "verificationPublicKey2": "",
      "patternDecryptionEnable": false,
      "useOriginalAsA": false,
      "abVariantLocation": "FILENAME_PREFIX"
    }
  }
]

Options

Option	Description
`enable`	Boolean Enables the watermarking behavior.
`signature_verification_enable`	Boolean When enabled, you can verify the signature in your watermarking token.
`verification_key_id1`	String \| Requires: `signature_verification_enable` is `true` Specifies a unique identifier for the first public key.
`verification_public_key1`	String \| Requires: `signature_verification_enable` is `true` Specifies the first public key in its entirety.
`verification_key_id2`	String \| Requires: `signature_verification_enable` is `true` Specifies a unique identifier for the optional second public key.
`verification_public_key2`	String \| Requires: `signature_verification_enable` is `true` Specifies the optional second public key in its entirety. Specify a second key to enable rotation.
`pattern_decryption_enable`	Boolean If patterns in your watermarking tokens have been encrypted, enabling this allows you to provide values to decrypt them.
`decryption_password_id1`	String \| Requires: `pattern_verification_enable` is `true` Specifies a label that corresponds to the primary password.
`decryption_password1`	String \| Requires: `pattern_verification_enable` is `true` Provides the primary password used to encrypt patterns in your watermarking tokens.
`decryption_password_id2`	String \| Requires: `pattern_verification_enable` is `true` Specifies a label for the secondary password, used in rotation scenarios to identify which password to use for decryption.
`decryption_password2`	String \| Requires: `pattern_verification_enable` is `true` Provides the secondary password you can use to rotate passwords.
`use_original_as_a`	Boolean When you work with your watermarking vendor, you can apply several preprocessing methods to your content. See the AMD help for more information. With the standard filename-prefix AB naming preprocessing method, the watermarking vendor creates two variants of the original segment content and labels them as an `A` and `B` segment in the filename. If you selected the unlabeled A variant preprocessing method, enabling this option tells your configuration to use the original filename segment content as your `A` variant.
`ab_variant_location`	Enum Applies preprocessing methods to your content. Use this option to specify the location of the `A` and `B` variant segments. Value is one of: `FILENAME_PREFIX`. Set for the standard, filename-prefix AB naming preprocessing method, where the variant letter is included in the filename. `PARENT_DIRECTORY_PREFIX`. Set for the directory-prefix AB naming preprocessing method, where variants are located in a subdirectory named after the variants, such as `/B/segment1.ts`. For more information, see AMD help.

Updated about 1 hour ago