remove_key_replication_regions
Remove replication regions from a payment key to decommission a region or narrow blast radius. Confirm no active traffic depends on the region first; the key stops working there immediately.
Instructions
Call this when decommissioning a region or narrowing a key's blast radius.
Removing a region makes the key unusable there. Confirm nothing is still authorizing against it in that region first — in-flight PIN or ARQC traffic will start failing as soon as the replica is gone.
Args: key_identifier: ARN or alias of the key replication_regions: Regions to remove, e.g. ["eu-west-1"]
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key_identifier | Yes | ||
| replication_regions | Yes |