AWS Payment Cryptography
Cryptography for card payments
A managed payment cryptography service that performs operations such as generating/verifying PINs and CVVs and encrypting card data to PCI standards, replacing physical payment HSMs.
- Cost$$ Medium
- Difficulty●●●●●
- Costs money when idle?A little
- Serverless
Think of it asLike renting a bank's dedicated vault room instead of buying your own safe.
When to use it
✓ Use it when
Card transaction processing that needs PCI-standard payment cryptography operations.
✗ Avoid it when
General data encryption → KMS; general-purpose HSM → CloudHSM.
Common uses
- PIN and CVV verification
- Exchange keys between parties in a payment network
- Migrate payment HSM systems to the cloud
What does it cost?
- Pricing model: Charged by the number of keys stored each month plus the number of cryptographic API calls.
