AWS Payment Cryptography

aws Key managementaws-payment-cryptography

Managed payment HSM service for PIN, EMV and card-data keys and cryptographic operations.

Provider: aws
Kind: Key management
Category: Security
Official docs: https://docs.aws.amazon.com/payment-cryptography/latest/userguide/data-protection.html

Properties · 4 set by this component

property	type	values	required	kind default	this component
enabledOnCreate · component property	boolean	—	no	true	inherited
envelopeEncryption	boolean	—	no	false	▸ true
exportable · component property	boolean	—	no	—	inherited
hsm	boolean	—	no	false	▸ true
keyAlgorithm · component property	enum	tdes-2key \| tdes-3key \| aes-128 \| aes-192 \| aes-256 \| rsa-2048 \| rsa-3072 \| rsa-4096 \| ecc-nist-p256 \| ecc-nist-p384 \| ecc-nist-p521	no	—	inherited
keyClass · component property	enum	symmetric-key \| asymmetric-key-pair \| public-key \| private-key	no	—	inherited
managed	boolean	—	no	true	▸ true
multiRegionReplication · component property	boolean	—	no	false	inherited
rotationAutomated	boolean	—	no	false	▸ false
rotationDays	integer	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "payment-cryptography", component: "aws-payment-cryptography" }

Other Key management products · 53

Certificate Management Servicealibaba-certificate-managementalibabacloudkey-management Data Encryption Servicealibaba-data-encryption-servicealibabacloudkey-management AWS Certificate Manageraws-acmawskey-management AWS KMSaws-kmsawskey-management AWS Private Certificate Authorityaws-private-caawskey-management AWS Secrets Manageraws-secrets-managerawskey-management AWS Signeraws-signerawskey-management AWS Systems Manager Parameter Storeaws-ssm-parameter-storeawskey-management AWS CloudHSMcloudhsmawskey-management Artifact Signingazure-artifact-signingazurekey-management Azure Cloud HSMazure-cloud-hsmazurekey-management Azure Dedicated HSMazure-dedicated-hsmazurekey-management Azure Key Vaultazure-key-vaultazurekey-management Azure Key Vault Managed HSMazure-managed-hsmazurekey-management Advanced Certificate Managercloudflare-advanced-certificate-managercloudflarekey-management Cloudflare Geo Key Managercloudflare-geo-key-managercloudflarekey-management Cloudflare Keyless SSLcloudflare-keyless-sslcloudflarekey-management Cloudflare mTLS client certificatescloudflare-mtlscloudflarekey-management Cloudflare Origin CAcloudflare-origin-cacloudflarekey-management Cloudflare Secrets Storecloudflare-secrets-storecloudflarekey-management Cloudflare Universal SSLcloudflare-ssl-tlscloudflarekey-management Bitwardenbitwardenkey-management cert-managercert-managerkey-management CyberArk Conjurconjurkey-management Dopplerdopplerkey-management EJBCAejbcakey-management Entrust nShield HSMentrust-nshieldkey-management HashiCorp Vaulthashicorp-vaultkey-management HCP Vault Dedicatedhcp-vaultkey-management Infisicalinfisicalkey-management Generic key managementkey-managementkey-management 1Password Connectonepassword-connectkey-management OpenBaoopenbaokey-management Sealed Secretssealed-secretskey-management Smallstep step-castep-cakey-management Thales Luna HSMthales-luna-hsmkey-management Certificate Authority Servicegoogle-certificate-authority-servicegcpkey-management Certificate Managergoogle-certificate-managergcpkey-management Cloud External Key Managergoogle-cloud-ekmgcpkey-management Cloud HSMgoogle-cloud-hsmgcpkey-management

and 13 more → Key management page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Payment Cryptography: managed PIN, EMV and card-data key management and cryptographic
3# operations. "Data protection in AWS Payment Cryptography": key material is generated in PCI PTS
4# listed HSMs, never leaves them in plaintext, and encryption of key material is handled entirely
5# by the service. CreateKey: a key is enabled by default and Exportable must be stated explicitly.
6schemaVersion: "1"
7type: "component"
8id: "aws-payment-cryptography"
9kind: "key-management"
10provider: "aws"
11docs: "https://docs.aws.amazon.com/payment-cryptography/latest/userguide/data-protection.html"
12defaults:
13  managed: true
14  hsm: true
15  rotationAutomated: false
16  envelopeEncryption: true
17properties:
18  keyClass:
19    type: "enum"
20    values: ["symmetric-key", "asymmetric-key-pair", "public-key", "private-key"]
21  keyAlgorithm:
22    type: "enum"
23    values: ["tdes-2key", "tdes-3key", "aes-128", "aes-192", "aes-256", "rsa-2048", "rsa-3072", "rsa-4096", "ecc-nist-p256", "ecc-nist-p384", "ecc-nist-p521"]
24  exportable:
25    type: "boolean"
26  enabledOnCreate:
27    type: "boolean"
28    default: true
29  multiRegionReplication:
30    type: "boolean"
31    default: false

The same page as markdown, for an agent: /catalogue/components/aws-payment-cryptography.md