Class: AWS.PaymentCryptography
- Inherits:
-
AWS.Service
- Object
- AWS.Service
- AWS.PaymentCryptography
- Identifier:
- paymentcryptography
- API Version:
- 2021-09-14
- Defined in:
- (unknown)
Overview
Constructs a service interface object. Each API operation is exposed as a function on service.
Service Description
Amazon Web Services Payment Cryptography Control Plane APIs manage encryption keys for use during payment-related cryptographic operations. You can create, import, export, share, manage, and delete keys. You can also manage Identity and Access Management (IAM) policies for keys. For more information, see Identity and access management in the Amazon Web Services Payment Cryptography User Guide.
To use encryption keys for payment-related transaction processing and associated cryptographic operations, you use the Amazon Web Services Payment Cryptography Data Plane. You can perform actions like encrypt, decrypt, generate, and verify payment-related data.
All Amazon Web Services Payment Cryptography API calls must be signed and transmitted using Transport Layer Security (TLS). We recommend you always use the latest supported TLS version for logging API requests.
Amazon Web Services Payment Cryptography supports CloudTrail for control plane operations, a service that logs Amazon Web Services API calls and related events for your Amazon Web Services account and delivers them to an Amazon S3 bucket you specify. By using the information collected by CloudTrail, you can determine what requests were made to Amazon Web Services Payment Cryptography, who made the request, when it was made, and so on. If you don't configure a trail, you can still view the most recent events in the CloudTrail console. For more information, see the CloudTrail User Guide.
Sending a Request Using PaymentCryptography
var paymentcryptography = new AWS.PaymentCryptography();
paymentcryptography.createAlias(params, function (err, data) {
if (err) console.log(err, err.stack); // an error occurred
else console.log(data); // successful response
});
Locking the API Version
In order to ensure that the PaymentCryptography object uses this specific API, you can
construct the object by passing the apiVersion option to the constructor:
var paymentcryptography = new AWS.PaymentCryptography({apiVersion: '2021-09-14'});
You can also set the API version globally in AWS.config.apiVersions using
the paymentcryptography service identifier:
AWS.config.apiVersions = {
paymentcryptography: '2021-09-14',
// other service API versions
};
var paymentcryptography = new AWS.PaymentCryptography();
Constructor Summary collapse
-
new AWS.PaymentCryptography(options = {}) ⇒ Object
constructor
Constructs a service object.
Property Summary collapse
-
endpoint ⇒ AWS.Endpoint
readwrite
An Endpoint object representing the endpoint URL for service requests.
Properties inherited from AWS.Service
Method Summary collapse
-
createAlias(params = {}, callback) ⇒ AWS.Request
Creates an alias, or a friendly name, for an Amazon Web Services Payment Cryptography key.
-
createKey(params = {}, callback) ⇒ AWS.Request
Creates an Amazon Web Services Payment Cryptography key, a logical representation of a cryptographic key, that is unique in your account and Amazon Web Services Region.
-
deleteAlias(params = {}, callback) ⇒ AWS.Request
Deletes the alias, but doesn't affect the underlying key.
Each key can have multiple aliases.
-
deleteKey(params = {}, callback) ⇒ AWS.Request
Deletes the key material and metadata associated with Amazon Web Services Payment Cryptography key.
Key deletion is irreversible.
-
exportKey(params = {}, callback) ⇒ AWS.Request
Exports a key from Amazon Web Services Payment Cryptography.
Amazon Web Services Payment Cryptography simplifies key exchange by replacing the existing paper-based approach with a modern electronic approach.
-
getAlias(params = {}, callback) ⇒ AWS.Request
Gets the Amazon Web Services Payment Cryptography key associated with the alias.
Cross-account use: This operation can't be used across different Amazon Web Services accounts.
Related operations:
. - getKey(params = {}, callback) ⇒ AWS.Request
-
getParametersForExport(params = {}, callback) ⇒ AWS.Request
Gets the export token and the signing key certificate to initiate a TR-34 key export from Amazon Web Services Payment Cryptography.
The signing key certificate signs the wrapped key under export within the TR-34 key payload.
-
getParametersForImport(params = {}, callback) ⇒ AWS.Request
Gets the import token and the wrapping key certificate in PEM format (base64 encoded) to initiate a TR-34 WrappedKeyBlock or a RSA WrappedKeyCryptogram import into Amazon Web Services Payment Cryptography.
The wrapping key certificate wraps the key under import.
-
getPublicKeyCertificate(params = {}, callback) ⇒ AWS.Request
Gets the public key certificate of the asymmetric key pair that exists within Amazon Web Services Payment Cryptography.
Unlike the private key of an asymmetric key, which never leaves Amazon Web Services Payment Cryptography unencrypted, callers with
GetPublicKeyCertificatepermission can download the public key certificate of the asymmetric key. -
importKey(params = {}, callback) ⇒ AWS.Request
Imports symmetric keys and public key certificates in PEM format (base64 encoded) into Amazon Web Services Payment Cryptography.
Amazon Web Services Payment Cryptography simplifies key exchange by replacing the existing paper-based approach with a modern electronic approach.
-
listAliases(params = {}, callback) ⇒ AWS.Request
Lists the aliases for all keys in the caller's Amazon Web Services account and Amazon Web Services Region.
-
listKeys(params = {}, callback) ⇒ AWS.Request
Lists the keys in the caller's Amazon Web Services account and Amazon Web Services Region.
-
listTagsForResource(params = {}, callback) ⇒ AWS.Request
Lists the tags for an Amazon Web Services resource.
This is a paginated operation, which means that each response might contain only a subset of all the tags.
-
restoreKey(params = {}, callback) ⇒ AWS.Request
Cancels a scheduled key deletion during the waiting period.
-
startKeyUsage(params = {}, callback) ⇒ AWS.Request
Enables an Amazon Web Services Payment Cryptography key, which makes it active for cryptographic operations within Amazon Web Services Payment Cryptography
Cross-account use: This operation can't be used across different Amazon Web Services accounts.
Related operations:
. -
stopKeyUsage(params = {}, callback) ⇒ AWS.Request
Disables an Amazon Web Services Payment Cryptography key, which makes it inactive within Amazon Web Services Payment Cryptography.
You can use this operation instead of DeleteKey to deactivate a key.
-
tagResource(params = {}, callback) ⇒ AWS.Request
Adds or edits tags on an Amazon Web Services Payment Cryptography key.
Note: Tagging or untagging an Amazon Web Services Payment Cryptography key can allow or deny permission to the key.- untagResource(params = {}, callback) ⇒ AWS.Request
Deletes a tag from an Amazon Web Services Payment Cryptography key.
Note: Tagging or untagging an Amazon Web Services Payment Cryptography key can allow or deny permission to the key.- updateAlias(params = {}, callback) ⇒ AWS.Request
Associates an existing Amazon Web Services Payment Cryptography alias with a different key.
- waitFor(state, params = {}, callback) ⇒ AWS.Request
Waits for a given PaymentCryptography resource.
Methods inherited from AWS.Service
makeRequest, makeUnauthenticatedRequest, setupRequestListeners, defineService
Constructor Details
new AWS.PaymentCryptography(options = {}) ⇒ Object
Constructs a service object. This object has one method for each API operation.
- untagResource(params = {}, callback) ⇒ AWS.Request