Multi-Region keys: A new approach to key replication in AWS Payment Cryptography

AWS has introduced Multi-Region keys for AWS Payment Cryptography, a new feature that enables automatic key replication across multiple regions with two configuration approaches:

• Account-level replication: Automatically synchronizes exportable symmetric keys across specified regions
• Key-level replication: Provides granular control over specific key replication targets

Key benefits include:

• Improved availability and disaster recovery
• Simplified global payment operations
• Consistent key management across regions
• Maintained key IDs across regions

Important considerations include support only for symmetric, exportable keys, potential billing implications, and eventual consistency in key replication. The feature is designed to enhance resilience and management of payment cryptography keys.