AWS Payment Cryptography announces support for cross account key sharing

Amazon Web Services has announced that its Payment Cryptography service now supports cross-account key sharing through resource-based policies, enabling organizations to manage cryptographic keys across multiple AWS accounts more efficiently. The enhancement allows companies to maintain a single copy of key material while providing granular, per-resource access controls for cross-account access, eliminating the need for complex import/export workflows that were previously required for multi-account payment processing environments. The new capability addresses a common challenge for enterprises using multiple AWS accounts to separate different payment processing workloads in compliance with PCI DSS guidance. Previously, organizations often had to duplicate cryptographic material across accounts, which complicated key lineage tracking and access management. AWS Payment Cryptography is designed for cloud-hosted payment applications and maintains compliance with PCI PIN Security and Point-to-Point Encryption requirements. The cross-account sharing feature is now available in all AWS regions where the Payment Cryptography service operates.