ExportTr34KeyBlock ¶

class ExportTr34KeyBlock(TypedDict, closed=True):
    certificate_authority_public_key_identifier: (
        "capo_payment_cryptography.types.key_arn_or_key_alias_type.KeyArnOrKeyAliasType"
    )
    """<p>The <code>KeyARN</code> of the certificate chain that signs the wrapping key certificate during TR-34 key export.</p>"""
    wrapping_key_certificate: (
        "capo_payment_cryptography.types.certificate_type.CertificateType"
    )
    """<p>The <code>KeyARN</code> of the wrapping key certificate. Amazon Web Services Payment Cryptography uses this certificate to wrap the key under export.</p>"""
    export_token: "capo_payment_cryptography.types.export_token_id.ExportTokenId"
    """<p>The export token to initiate key export from Amazon Web Services Payment Cryptography. It also contains the signing key certificate that will sign the wrapped key during TR-34 key block generation. Call <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetParametersForExport.html">GetParametersForExport</a> to receive an export token. It expires after 30 days. You can use the same export token to export multiple keys from the same service account.</p>"""
    signing_key_identifier: NotRequired[
        "capo_payment_cryptography.types.key_arn_or_key_alias_type.KeyArnOrKeyAliasType"
    ]
    """<p>Key Identifier used for signing the export key</p>"""
    signing_key_certificate: NotRequired[
        "capo_payment_cryptography.types.certificate_type.CertificateType"
    ]
    """<p>The certificate used to sign the TR-34 key block.</p>"""
    key_block_format: (
        "capo_payment_cryptography.types.tr34_key_block_format.Tr34KeyBlockFormat"
    )
    """<p>The format of key block that Amazon Web Services Payment Cryptography will use during key export.</p>"""
    random_nonce: NotRequired[
        "capo_payment_cryptography.types.even_hex_length_between16_and32.EvenHexLengthBetween16And32"
    ]
    """<p>A random number value that is unique to the TR-34 key block generated using 2 pass. The operation will fail, if a random nonce value is not provided for a TR-34 key block generated using 2 pass.</p>"""
    key_block_headers: NotRequired[
        "capo_payment_cryptography.types.key_block_headers.KeyBlockHeaders"
    ]
    """<p>Optional metadata for export associated with the key material. This data is signed but transmitted in clear text.</p>"""