payment-cryptography:ExportKey is a Write access-level action in the payment-cryptography service. Grants permission to export a key from the service
ARNs that payment-cryptography:ExportKey can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants payment-cryptography:ExportKey.
Filters access by the CertificateAuthorityPublicKeyIdentifier specified in the request or the ImportKey, and ExportKey operations
Filters access by whether the request is to export a DUKPT initial key for the ExportKey operation
Filters access by the type of key material being exported [Tr34KeyBlock, Tr31KeyBlock, DiffieHellmanTr31KeyBlock, As2805KeyCryptogram, KeyCryptogram] for the ExportKey operation
Filters access by the PrivateKeyIdentifier specified in the request for the ImportKey and ExportKey operations
Filters access by aliases in the request for the specified operation
Filters access by the SigningKeyIdentifier specified in the request for the ExportKey operation
Filters access by the WrappingKeyIdentifier specified in the request for the ImportKey, and ExportKey operations
Filters access by tags assigned to a key for the specified operation
Filters access by aliases associated with a key for the specified operation
A minimal policy that allows payment-cryptography:ExportKey. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowPaymentcryptographyExportKey",
"Effect": "Allow",
"Action": "payment-cryptography:ExportKey",
"Resource": "*"
}
]
}