AWS::PaymentCryptography::Key KeyAttributes

The role of the key, the algorithm it supports, and the cryptographic operations allowed with the key. This data is immutable after the key is created.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON


{
  "KeyAlgorithm" : String,
  "KeyClass" : String,
  "KeyModesOfUse" : KeyModesOfUse,
  "KeyUsage" : String
}

YAML


  KeyAlgorithm: String
  KeyClass: String
  KeyModesOfUse: 
    KeyModesOfUse
  KeyUsage: String

Properties

KeyAlgorithm

The key algorithm to be use during creation of an AWS Payment Cryptography key.

For symmetric keys, AWS Payment Cryptography supports AES and TDES algorithms. For asymmetric keys, AWS Payment Cryptography supports RSA and ECC_NIST algorithms.

Required: Yes

Type: String

Allowed values: TDES_2KEY | TDES_3KEY | AES_128 | AES_192 | AES_256 | RSA_2048 | RSA_3072 | RSA_4096 | ECC_NIST_P256 | ECC_NIST_P384

Update requires: No interruption

KeyClass

The type of AWS Payment Cryptography key to create, which determines the classiﬁcation of the cryptographic method and whether AWS Payment Cryptography key contains a symmetric key or an asymmetric key pair.

Required: Yes

Type: String

Allowed values: SYMMETRIC_KEY | ASYMMETRIC_KEY_PAIR | PRIVATE_KEY | PUBLIC_KEY

Update requires: No interruption

KeyModesOfUse

The list of cryptographic operations that you can perform using the key.

Required: Yes

Type: KeyModesOfUse

Update requires: No interruption

KeyUsage

The cryptographic usage of an AWS Payment Cryptography key as deﬁned in section A.5.2 of the TR-31 spec.

Required: Yes

Type: String

Update requires: No interruption

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS::PaymentCryptography::Key

KeyModesOfUse