payment-cryptography:ImportKey is a Write access-level action in the payment-cryptography service. Grants permission to imports keys and public key certificates
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants payment-cryptography:ImportKey.
Filters access by both the key and value of the tag in the request for the specified operation
Filters access by the tag keys in the request for the specified operation
Filters access by the CertificateAuthorityPublicKeyIdentifier specified in the request or the ImportKey, and ExportKey operations
Filters access by the type of key material being imported [RootCertificatePublicKey, TrustedCertificatePublicKey, Tr34KeyBlock, Tr31KeyBlock, DiffieHellmanTr31KeyBlock, As2805KeyCryptogram, KeyCryptogram] for the ImportKey operation
Filters access by the PrivateKeyIdentifier specified in the request for the ImportKey and ExportKey operations
Filters access by the WrappingKeyIdentifier specified in the request for the ImportKey, and ExportKey operations
A minimal policy that allows payment-cryptography:ImportKey. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowPaymentcryptographyImportKey",
"Effect": "Allow",
"Action": "payment-cryptography:ImportKey",
"Resource": "*"
}
]
}