---
type: resource-type
title: Key
description: aws resource type AWS::PaymentCryptography::Key
name: Key
lexicon: aws
resource_type: AWS::PaymentCryptography::Key
---
`AWS::PaymentCryptography::Key`, a resource type of the aws lexicon.

## Properties

- `Exportable` (`boolean`, required)
- `KeyAttributes` (`Key_KeyAttributes`, required)
- `DeriveKeyUsage` (`Key_DeriveKeyUsage`, optional)
- `Enabled` (`boolean`, optional)
- `KeyCheckValueAlgorithm` (`Key_KeyCheckValueAlgorithm`, optional)
- `KeyIdentifier` (`string`, optional)
- `KeyOrigin` (`Key_KeyOrigin`, optional)
- `KeyState` (`Key_KeyState`, optional)
- `Policy` (`string`, optional): The resource-based policy attached to the key, in JSON format.
- `ReplicationRegions` (`string[]`, optional)
- `ReplicationStatus` (`Record<string, unknown>`, optional)
- `Tags` (`Key_Tag[]`, optional)

## Attributes

- `KeyIdentifier`
- `KeyOrigin`
- `KeyState`
- `ReplicationStatus`

## Governed by

- [WAW024](/rules/WAW024.md): Application Load Balancer does not have access logging enabled
- [WAW043](/rules/WAW043.md): KMS customer-managed key does not have automatic key rotation enabled