def METHOD_NAME(account_name: Optional[str] = None,
                             asset_name: Optional[str] = None,
                             resource_group_name: Optional[str] = None,
                             opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetAssetEncryptionKeyResult:
    """
    Gets the Asset storage encryption keys used to decrypt content created by version 2 of the Media Services API
    Azure REST API version: 2023-01-01.
    :param str account_name: The Media Services account name.
    :param str asset_name: The Asset name.
    :param str resource_group_name: The name of the resource group within the Azure subscription.
    """
    __args__ = dict()
    __args__['accountName'] = account_name
    __args__['assetName'] = asset_name
    __args__['resourceGroupName'] = resource_group_name
    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
    __ret__ = pulumi.runtime.invoke('azure-native:media:getAssetEncryptionKey', __args__, opts=opts, typ=GetAssetEncryptionKeyResult).value
    return AwaitableGetAssetEncryptionKeyResult(
        asset_file_encryption_metadata=pulumi.get(__ret__, 'asset_file_encryption_metadata'),
        key=pulumi.get(__ret__, 'key'))