{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_payment-cryptography.html",
  "name": "AWS Payment Cryptography",
  "prefix": "payment-cryptography",
  "timestamp": "1786363206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_AddKeyReplicationRegions.html",
      "name": "AddKeyReplicationRegions",
      "description": "Grants permission to add replication regions to an existing AWS Payment Cryptography key",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_AssociateMpaTeam.html",
      "name": "AssociateMpaTeam",
      "description": "Grants permission to associate an MPA approval team with a payment cryptography action",
      "access": "Write",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateAlias.html",
      "name": "CreateAlias",
      "description": "Grants permission to create a user-friendly name for a Key",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html",
      "name": "CreateKey",
      "description": "Grants permission to create a unique customer managed key in the caller's AWS account and region",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "payment-cryptography:KeyAlgorithm",
        "payment-cryptography:KeyClass",
        "payment-cryptography:KeyUsage"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_DecryptData.html",
      "name": "DecryptData",
      "description": "Grants permission to decrypt ciphertext data to plaintext using symmetric, asymmetric or DUKPT data encryption key",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DeleteAlias.html",
      "name": "DeleteAlias",
      "description": "Grants permission to delete the specified alias",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DeleteKey.html",
      "name": "DeleteKey",
      "description": "Grants permission to schedule the deletion of a Key",
      "access": "Write",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DeleteResourcePolicy.html",
      "name": "DeleteResourcePolicy",
      "description": "Grants permission to delete the resource-based policy attached to a key",
      "access": "Permissions management",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DisableDefaultKeyReplicationRegions.html",
      "name": "DisableDefaultKeyReplicationRegions",
      "description": "Grants permission to disable default key replication regions for account-level replication",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DisassociateMpaTeam.html",
      "name": "DisassociateMpaTeam",
      "description": "Grants permission to disassociate an MPA approval team from a payment cryptography action",
      "access": "Write",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_EnableDefaultKeyReplicationRegions.html",
      "name": "EnableDefaultKeyReplicationRegions",
      "description": "Grants permission to enable default key replication regions for account-level replication",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_EncryptData.html",
      "name": "EncryptData",
      "description": "Grants permission to encrypt plaintext data to ciphertext using symmetric, asymmetric or DUKPT data encryption key",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ExportKey.html",
      "name": "ExportKey",
      "description": "Grants permission to export a key from the service",
      "access": "Write",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
        "payment-cryptography:RequestAlias",
        "payment-cryptography:WrappingKeyIdentifier"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateAs2805KekValidation.html",
      "name": "GenerateAs2805KekValidation",
      "description": "Grants permission to generate a KekValidationRequest or a KekValidationResponse for node-to-node initialization between payment processing nodes using Australian Standard 2805 (AS2805)",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateCardValidationData.html",
      "name": "GenerateCardValidationData",
      "description": "Grants permission to generate card-related data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2) or Card Security Codes (CSC) that check the validity of a magnetic stripe card",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateMac.html",
      "name": "GenerateMac",
      "description": "Grants permission to generate a MAC (Message Authentication Code) cryptogram",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateMacEmvPinChange.html",
      "name": "GenerateMacEmvPinChange",
      "description": "Grants permission to generate a MAC (Message Authentication Code) cryptogram",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GeneratePinData.html",
      "name": "GeneratePinData",
      "description": "Grants permission to generate pin-related data such as PIN, PIN Verification Value (PVV), PIN Block and PIN Offset during new card issuance or card re-issuance",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetAlias.html",
      "name": "GetAlias",
      "description": "Grants permission to return the keyArn associated with an aliasName",
      "access": "Read",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetCertificateSigningRequest.html",
      "name": "GetCertificateSigningRequest",
      "description": "Grants permission to return the Certificate Signing Request for a public key from a key of class PUBLIC_KEY",
      "access": "Read",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetDefaultKeyReplicationRegions.html",
      "name": "GetDefaultKeyReplicationRegions",
      "description": "Grants permission to retrieve the default key replication regions configured at the account level",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetKey.html",
      "name": "GetKey",
      "description": "Grants permission to return the detailed information about the specified key",
      "access": "Read",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetMpaTeamAssociation.html",
      "name": "GetMpaTeamAssociation",
      "description": "Grants permission to retrieve information about an MPA approval team association for a payment cryptography action",
      "access": "Read",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetParametersForExport.html",
      "name": "GetParametersForExport",
      "description": "Grants permission to get the export token and the signing key certificate to initiate a TR-34 key export",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetParametersForImport.html",
      "name": "GetParametersForImport",
      "description": "Grants permission to get the import token and the wrapping key certificate to initiate a TR-34 key import",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetPublicKeyCertificate.html",
      "name": "GetPublicKeyCertificate",
      "description": "Grants permission to return the public key from a key of class PUBLIC_KEY",
      "access": "Read",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetResourcePolicy.html",
      "name": "GetResourcePolicy",
      "description": "Grants permission to retrieve the resource-based policy attached to a key",
      "access": "Read",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html",
      "name": "ImportKey",
      "description": "Grants permission to imports keys and public key certificates",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
        "payment-cryptography:ImportKeyMaterial",
        "payment-cryptography:WrappingKeyIdentifier"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ListAliases.html",
      "name": "ListAliases",
      "description": "Grants permission to return a list of aliases created for all keys in the caller's AWS account and Region",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ListKeys.html",
      "name": "ListKeys",
      "description": "Grants permission to return a list of keys created in the caller's AWS account and Region",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to return a list of tags created in the caller's AWS account and Region",
      "access": "Read",
      "resources": [
        {
          "name": "key",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_PutResourcePolicy.html",
      "name": "PutResourcePolicy",
      "description": "Grants permission to attach or replace a resource-based policy on a key",
      "access": "Permissions management",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_ReEncryptData.html",
      "name": "ReEncryptData",
      "description": "Grants permission to re-encrypt ciphertext using DUKPT, Symmetric and Asymmetric Data Encryption Keys",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_RemoveKeyReplicationRegions.html",
      "name": "RemoveKeyReplicationRegions",
      "description": "Grants permission to remove replication regions from an existing AWS Payment Cryptography key",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_RestoreKey.html",
      "name": "RestoreKey",
      "description": "Grants permission to cancel a scheduled key deletion if at any point during the waiting period a Key needs to be revived",
      "access": "Write",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_StartKeyUsage.html",
      "name": "StartKeyUsage",
      "description": "Grants permission to enable a disabled Key",
      "access": "Write",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_StopKeyUsage.html",
      "name": "StopKeyUsage",
      "description": "Grants permission to disable an enabled Key",
      "access": "Write",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to add or overwrites one or more tags for the specified resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_TranslateKeyMaterial.html",
      "name": "TranslateKeyMaterial",
      "description": "Grants permission to translate wrapping key type for a wrapped key",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_TranslatePinData.html",
      "name": "TranslatePinData",
      "description": "Grants permission to translate encrypted PIN block from and to ISO 9564 formats 0,1,3,4",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to remove the specified tag or tags from the specified resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_UpdateAlias.html",
      "name": "UpdateAlias",
      "description": "Grants permission to change the key to which an alias is assigned, or unassign it from its current key",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyAuthRequestCryptogram.html",
      "name": "VerifyAuthRequestCryptogram",
      "description": "Grants permission to verify Authorization Request Cryptogram (ARQC) for a EMV chip payment card authorization",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyCardValidationData.html",
      "name": "VerifyCardValidationData",
      "description": "Grants permission to verify card-related validation data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2) and Card Security Codes (CSC)",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyMac.html",
      "name": "VerifyMac",
      "description": "Grants permission to verify MAC (Message Authentication Code) of input data against a provided MAC",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyPinData.html",
      "name": "VerifyPinData",
      "description": "Grants permission to verify pin-related data such as PIN and PIN Offset using algorithms including VISA PVV and IBM3624",
      "access": "Write",
      "resources": [
        {
          "name": "alias",
          "is_required": true
        },
        {
          "name": "key",
          "is_required": true
        }
      ],
      "conditions": [
        "payment-cryptography:RequestAlias"
      ]
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/${APIReferenceDocPage}API_Alias.html",
      "name": "alias",
      "arn": "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/${Alias}",
      "conditions": [
        "payment-cryptography:ResourceAliases"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
      "name": "approval-team",
      "arn": "arn:${Partition}:mpa:${Region}:${Account}:approval-team/${ApprovalTeamId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/${APIReferenceDocPage}API_Key.html",
      "name": "key",
      "arn": "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/${KeyId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}",
        "payment-cryptography:ResourceAliases"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by both the key and value of the tag in the request for the specified operation",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/security_iam_service-with-iam.html#security_iam_service-with-iam-tags",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by tags assigned to a key for the specified operation",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the tag keys in the request for the specified operation",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
      "description": "Filters access by the CertificateAuthorityPublicKeyIdentifier specified in the request or the ImportKey, and ExportKey operations",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:ImportKeyMaterial",
      "description": "Filters access by the type of key material being imported [RootCertificatePublicKey, TrustedCertificatePublicKey, Tr34KeyBlock, Tr31KeyBlock, DiffieHellmanTr31KeyBlock, As2805KeyCryptogram, KeyCryptogram] for the ImportKey operation",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:KeyAlgorithm",
      "description": "Filters access by KeyAlgorithm specified in the request for the CreateKey operation",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:KeyClass",
      "description": "Filters access by KeyClass specified in the request for the CreateKey operation",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:KeyUsage",
      "description": "Filters access by KeyClass specified in the request or associated with a key for the CreateKey operation",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:RequestAlias",
      "description": "Filters access by aliases in the request for the specified operation",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:ResourceAliases",
      "description": "Filters access by aliases associated with a key for the specified operation",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/{ActionsDocRoot}security-iam.html",
      "name": "payment-cryptography:WrappingKeyIdentifier",
      "description": "Filters access by the WrappingKeyIdentifier specified in the request for the ImportKey, and ExportKey operations",
      "type": "String"
    }
  ]
}