2025/09/12 - 1 new 2 updated api methods
Changes Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export
2025/09/10 - 5 new 9 updated api methods
Changes AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions.
2025/06/19 - 11 updated api methods
Changes Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export
2025/03/28 - 11 updated api methods
Changes The service adds support for transferring AES-256 and other keys between the service and other service providers and HSMs. This feature uses ECDH to derive a one-time key transport key to enable these secure key exchanges.
2024/11/12 - 1 updated api methods
Changes Updated ListAliases API with KeyArn filter.
2024/10/23 - 10 updated api methods
Changes Add support for ECC P-256 and P-384 Keys.
2024/04/22 - 1 updated api methods
Changes Adding support to TR-31/TR-34 exports for optional headers, allowing customers to add additional metadata (such as key version and KSN) when exporting keys from the service.
2024/01/16 - 11 updated api methods
Changes Provide an additional option for key exchange using RSA wrap/unwrap in addition to tr-34/tr-31 in ImportKey and ExportKey operations. Added new key usage (type) TR31_M1_ISO_9797_1_MAC_KEY, for use with Generate/VerifyMac dataplane operations with ISO9797 Algorithm 1 MAC calculations.
2023/12/06 - 1 updated api methods
Changes AWS Payment Cryptography IPEK feature release