AWS Payment Cryptography announces support for cross account key sharing

AWS Payment Cryptography Updates

AWS Payment Cryptography now supports cross-account sharing of keys using resource-based policies (RBP). This new feature allows customers to manage cryptographic keys across multiple accounts, both internal and external to their company, providing more flexibility to manage keys at scale.

With AWS Payment Cryptography, you can simplify cryptography operations in your cloud-hosted payment applications with a service that grows elastically with your business and has been assessed as compliant with PCI PIN Security and Point-to-Point Encryption (P2PE) requirements.

Many customers utilize multiple AWS accounts to delineate different workloads, applications, or use cases for payment processing following AWS PCI DSS Guidance. This feature is available across all AWS Regions where AWS Payment Cryptography is available. To learn more about this feature or to get started with the service, consult the AWS Payment Cryptography user guide.

What to do

• Review the new cross-account key sharing feature using RBP.
• Update your resource-based policies to enable cross-account access.
• Consult the AWS Payment Cryptography user guide for more information.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.