add_key_replication_regions
Replicate an existing key to additional AWS regions to support disaster recovery or bring workloads closer to processors. The key material remains inside APC HSMs, with same ARN and usage restrictions.
Instructions
Call this to make an existing key usable from additional regions — e.g. standing up a DR region, or moving an acquirer workload closer to the processor.
Replication copies the key into the named regions so cryptographic calls can be served there. It does not export key material: the key never leaves APC's HSMs, and the replica keeps the same key ARN semantics and usage restrictions.
Args: key_identifier: ARN or alias of the key replication_regions: Regions to add, e.g. ["us-west-2", "eu-west-1"]
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key_identifier | Yes | ||
| replication_regions | Yes |