AWS::PaymentCryptography::Key KeyModesOfUse

The list of cryptographic operations that you can perform using the key. The modes of use are defined in section A.5.3 of the TR-31 spec.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "Decrypt" : Boolean,
  "DeriveKey" : Boolean,
  "Encrypt" : Boolean,
  "Generate" : Boolean,
  "NoRestrictions" : Boolean,
  "Sign" : Boolean,
  "Unwrap" : Boolean,
  "Verify" : Boolean,
  "Wrap" : Boolean
}

YAML

  Decrypt: Boolean
  DeriveKey: Boolean
  Encrypt: Boolean
  Generate: Boolean
  NoRestrictions: Boolean
  Sign: Boolean
  Unwrap: Boolean
  Verify: Boolean
  Wrap: Boolean

Properties

Decrypt

Specifies whether an AWS Payment Cryptography key can be used to decrypt data.

Required: No

Type: Boolean

Update requires: No interruption

DeriveKey

Specifies whether an AWS Payment Cryptography key can be used to derive new keys.

Required: No

Type: Boolean

Update requires: No interruption

Encrypt

Specifies whether an AWS Payment Cryptography key can be used to encrypt data.

Required: No

Type: Boolean

Update requires: No interruption

Generate

Specifies whether an AWS Payment Cryptography key can be used to generate and verify other card and PIN verification keys.

Required: No

Type: Boolean

Update requires: No interruption

NoRestrictions

Specifies whether an AWS Payment Cryptography key has no special restrictions other than the restrictions implied by KeyUsage.

Required: No

Type: Boolean

Update requires: No interruption

Sign

Specifies whether an AWS Payment Cryptography key can be used for signing.

Required: No

Type: Boolean

Update requires: No interruption

Unwrap

Property description not available.

Required: No

Type: Boolean

Update requires: No interruption

Verify

Specifies whether an AWS Payment Cryptography key can be used to verify signatures.

Required: No

Type: Boolean

Update requires: No interruption

Wrap

Specifies whether an AWS Payment Cryptography key can be used to wrap other keys.

Required: No

Type: Boolean

Update requires: No interruption