Mediaconvert Api Speke Key Provider Cmaf Structure

{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-mediaconvert/refs/heads/main/json-structure/mediaconvert-api-speke-key-provider-cmaf-structure.json",
  "name": "SpekeKeyProviderCmaf",
  "type": "object",
  "description": "If your output group type is CMAF, use these settings when doing DRM encryption with a SPEKE-compliant key provider. If your output group type is HLS, DASH, or Microsoft Smooth, use the SpekeKeyProvider settings instead.",
  "properties": {
    "CertificateArn": {
      "allOf": [
        {
          "$ref": "#/components/schemas/__stringPatternArnAwsUsGovAcm"
        },
        {
          "xml": {
            "name": "certificateArn"
          },
          "description": "If you want your key provider to encrypt the content keys that it provides to MediaConvert, set up a certificate with a master key using AWS Certificate Manager. Specify the certificate's Amazon Resource Name (ARN) here."
        }
      ]
    },
    "DashSignaledSystemIds": {
      "allOf": [
        {
          "$ref": "#/components/schemas/__listOf__stringMin36Max36Pattern09aFAF809aFAF409aFAF409aFAF409aFAF12"
        },
        {
          "xml": {
            "name": "dashSignaledSystemIds"
          },
          "description": "Specify the DRM system IDs that you want signaled in the DASH manifest that MediaConvert creates as part of this CMAF package. The DASH manifest can currently signal up to three system IDs. For more information, see https://dashif.org/identifiers/content_protection/."
        }
      ]
    },
    "HlsSignaledSystemIds": {
      "allOf": [
        {
          "$ref": "#/components/schemas/__listOf__stringMin36Max36Pattern09aFAF809aFAF409aFAF409aFAF409aFAF12"
        },
        {
          "xml": {
            "name": "hlsSignaledSystemIds"
          },
          "description": "Specify the DRM system ID that you want signaled in the HLS manifest that MediaConvert creates as part of this CMAF package. The HLS manifest can currently signal only one system ID. For more information, see https://dashif.org/identifiers/content_protection/."
        }
      ]
    },
    "ResourceId": {
      "allOf": [
        {
          "$ref": "#/components/schemas/__stringPatternW"
        },
        {
          "xml": {
            "name": "resourceId"
          },
          "description": "Specify the resource ID that your SPEKE-compliant key provider uses to identify this content."
        }
      ]
    },
    "Url": {
      "allOf": [
        {
          "$ref": "#/components/schemas/__stringPatternHttps"
        },
        {
          "xml": {
            "name": "url"
          },
          "description": "Specify the URL to the key server that your SPEKE-compliant DRM key provider uses to provide keys for encrypting your content."
        }
      ]
    }
  }
}