Resource Access Management (RAM) and Security Token Service (STS) are permission management systems provided by Alibaba Cloud.
RAM is used to control account permissions. RAM enables you to create RAM users within the permissions of your Alibaba Cloud account. Different RAM users can be granted different permissions.
STS is a security token management system that grants temporary access permissions. STS can be used to grant access permissions to temporary accounts. For more information, see STS introduction.
PlayConfig specifies the custom configuration for media playback. The value is a JSON-formatted string. If multiple domain names are configured, you can specify a domain name.
For more information, see PlayConfig.
The AccessKey ID, AccessKey secret, and security token are obtained by using the STS API or ApsaraVideo for VOD SDKs after RAM authorization is enabled. They are used to make playback and download requests. For more information, see SDK Reference - STS.
playAuth specifies the unique credential for video playback. Each playback credential is bound to a user ID. Playback credentials cannot be exchanged among different users. Otherwise, videos cannot be played normally. By default, a playback credential has a limited validity period of 100 seconds. For more information, see Obtain the playAuth.
ApsaraVideo for VOD checks the referer in the request header to determine whether a request is originated from the local site and whether the video can be played. You can set the referer in the ApsaraVideo for VOD or CDN console. For more information, see Hotlinking protection.
Secure download is a process where asymmetric encryption is used to encrypt a video. After the video is downloaded, it is decrypted in ApsaraVideo Player SDKs. This ensures that the offline video is only played by the application with the bundle ID or keystore specified in secure download settings. This feature is available to ApsaraVideo for VOD and ApsaraVideo for Media Processing (MPS) users only.
For more information, see Secure download.