AWS Payment Cryptography adds integration to Multi-party approval for sensitive operations

This article announces that AWS Payment Cryptography now supports Multi-party approval (MPA) for importing root certificates, enhancing governance over key management operations.

• Requires two or more authorized individuals to approve root certificate imports
• Prevents single individuals from making unilateral changes to certificate trust anchors
• Supports X.509 and PKI certificates with asymmetric keys (RSA and ECC)
• Integrates natively with AWS IAM Identity Center for managed approval portal
• No additional charges beyond standard per-API rates
• Available across all AWS Regions where Payment Cryptography operates

This feature adds distributed approval governance to AWS Payment Cryptography, strengthening security controls for critical certificate management operations.