payment-cryptography:CreateKey is a Write access-level action in the payment-cryptography service. Grants permission to create a unique customer managed key in the caller's AWS account and region
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants payment-cryptography:CreateKey.
Filters access by both the key and value of the tag in the request for the specified operation
Filters access by the tag keys in the request for the specified operation
Filters access by the DeriveKeyUsage specified in the request for the CreateKey operation
Filters access by KeyAlgorithm specified in the request for the CreateKey operation
Filters access by KeyClass specified in the request for the CreateKey operation
Filters access by KeyUsage specified in the request or associated with a key for the CreateKey operation
A minimal policy that allows payment-cryptography:CreateKey. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowPaymentcryptographyCreateKey",
"Effect": "Allow",
"Action": "payment-cryptography:CreateKey",
"Resource": "*"
}
]
}