CreateAlias - AWS Payment Cryptography Control Plane


Creates an alias, or a friendly name, for an AWS Payment Cryptography key. You can use an alias to identify a key in the console and when you call cryptographic operations such as EncryptData or DecryptData.

You can associate the alias with any key in the same AWS Region. Each alias is associated with only one key at a time, but a key can have multiple aliases. You can't create an alias without a key. The alias must be unique in the account and AWS Region, but you can create another alias with the same name in a different AWS Region.

To change the key that's associated with the alias, call UpdateAlias. To delete the alias, call DeleteAlias. These operations don't affect the underlying key. To get the alias that you created, call ListAliases.

Cross-account use: This operation can't be used across different AWS accounts.

Related operations:

Request Syntax

{ "AliasName": "string", "KeyArn": "string" }

Request Parameters

The request accepts the following data in JSON format.


A friendly name that you can use to refer to a key. An alias must begin with alias/ followed by a name, for example alias/ExampleAlias. It can contain only alphanumeric characters, forward slashes (/), underscores (_), and dashes (-).


Don't include personal, confidential or sensitive information in this field. This field may be displayed in plaintext in AWS CloudTrail logs and other output.

Type: String

Length Constraints: Minimum length of 7. Maximum length of 256.

Pattern: alias/[a-zA-Z0-9/_-]+

Required: Yes


The KeyARN of the key to associate with the alias.

Type: String

Length Constraints: Minimum length of 70. Maximum length of 150.

Pattern: arn:aws:payment-cryptography:[a-z]{2}-[a-z]{1,16}-[0-9]+:[0-9]{12}:key/[0-9a-zA-Z]{16,64}

Required: No

Response Syntax

{ "Alias": { "AliasName": "string", "KeyArn": "string" } }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


The alias for the key.

Type: Alias object



You do not have sufficient access to perform this action.

HTTP Status Code: 400


This request can cause an inconsistent state for the resource.

HTTP Status Code: 400


The request processing has failed because of an unknown error, exception, or failure.

HTTP Status Code: 500


The request was denied due to an invalid resource error.

HTTP Status Code: 400


This request would cause a service quota to be exceeded.

HTTP Status Code: 400


The service cannot complete the request.

HTTP Status Code: 500


The request was denied due to request throttling.

HTTP Status Code: 400


The request was denied due to an invalid request error.

HTTP Status Code: 400

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: