AWS Payment Cryptography
(payment-cryptography)
IAM Changes
Services
2025-12-20
2025-12-20
7 new actions
Additions
Actions
AddKeyReplicationRegions
Description:
Grants permission to add replication regions to an existing AWS Payment Cryptography key
Access:
Write
Resources:
Name: alias
Required: Yes
Name: key
Required: Yes
DisableDefaultKeyReplicationRegions
Description:
Grants permission to disable default key replication regions for account-level replication
Access:
Write
EnableDefaultKeyReplicationRegions
Description:
Grants permission to enable default key replication regions for account-level replication
Access:
Write
GetCertificateSigningRequest
Description:
Grants permission to return the Certificate Signing Request for a public key from a key of class PUBLIC_KEY
Access:
Read
Resources:
Name: alias
Required: Yes
Name: key
Required: Yes
GetDefaultKeyReplicationRegions
Description:
Grants permission to retrieve the default key replication regions configured at the account level
Access:
Read
RemoveKeyReplicationRegions
Description:
Grants permission to remove replication regions from an existing AWS Payment Cryptography key
Access:
Write
Resources:
Name: alias
Required: Yes
Name: key
Required: Yes
TranslateKeyMaterial
Description:
Grants permission to translate wrapping key type for a wrapped key
Access:
Write
Resources:
Name: alias
Required: Yes
Name: key
Required: Yes