This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::PaymentCryptography::Key KeyModesOfUse
<a name="aws-properties-paymentcryptography-key-keymodesofuse"></a>

The list of cryptographic operations that you can perform using the key. The modes of use are defined in section A.5.3 of the TR-31 spec.

## Syntax
<a name="aws-properties-paymentcryptography-key-keymodesofuse-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-paymentcryptography-key-keymodesofuse-syntax.json"></a>

```
{
  "[Decrypt](#cfn-paymentcryptography-key-keymodesofuse-decrypt)" : Boolean,
  "[DeriveKey](#cfn-paymentcryptography-key-keymodesofuse-derivekey)" : Boolean,
  "[Encrypt](#cfn-paymentcryptography-key-keymodesofuse-encrypt)" : Boolean,
  "[Generate](#cfn-paymentcryptography-key-keymodesofuse-generate)" : Boolean,
  "[NoRestrictions](#cfn-paymentcryptography-key-keymodesofuse-norestrictions)" : Boolean,
  "[Sign](#cfn-paymentcryptography-key-keymodesofuse-sign)" : Boolean,
  "[Unwrap](#cfn-paymentcryptography-key-keymodesofuse-unwrap)" : Boolean,
  "[Verify](#cfn-paymentcryptography-key-keymodesofuse-verify)" : Boolean,
  "[Wrap](#cfn-paymentcryptography-key-keymodesofuse-wrap)" : Boolean
}
```

### YAML
<a name="aws-properties-paymentcryptography-key-keymodesofuse-syntax.yaml"></a>

```
  [Decrypt](#cfn-paymentcryptography-key-keymodesofuse-decrypt): Boolean
  [DeriveKey](#cfn-paymentcryptography-key-keymodesofuse-derivekey): Boolean
  [Encrypt](#cfn-paymentcryptography-key-keymodesofuse-encrypt): Boolean
  [Generate](#cfn-paymentcryptography-key-keymodesofuse-generate): Boolean
  [NoRestrictions](#cfn-paymentcryptography-key-keymodesofuse-norestrictions): Boolean
  [Sign](#cfn-paymentcryptography-key-keymodesofuse-sign): Boolean
  [Unwrap](#cfn-paymentcryptography-key-keymodesofuse-unwrap): Boolean
  [Verify](#cfn-paymentcryptography-key-keymodesofuse-verify): Boolean
  [Wrap](#cfn-paymentcryptography-key-keymodesofuse-wrap): Boolean
```

## Properties
<a name="aws-properties-paymentcryptography-key-keymodesofuse-properties"></a>

`Decrypt`  <a name="cfn-paymentcryptography-key-keymodesofuse-decrypt"></a>
Specifies whether an AWS Payment Cryptography key can be used to decrypt data.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`DeriveKey`  <a name="cfn-paymentcryptography-key-keymodesofuse-derivekey"></a>
Specifies whether an AWS Payment Cryptography key can be used to derive new keys.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Encrypt`  <a name="cfn-paymentcryptography-key-keymodesofuse-encrypt"></a>
Specifies whether an AWS Payment Cryptography key can be used to encrypt data.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Generate`  <a name="cfn-paymentcryptography-key-keymodesofuse-generate"></a>
Specifies whether an AWS Payment Cryptography key can be used to generate and verify other card and PIN verification keys.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`NoRestrictions`  <a name="cfn-paymentcryptography-key-keymodesofuse-norestrictions"></a>
Specifies whether an AWS Payment Cryptography key has no special restrictions other than the restrictions implied by `KeyUsage`.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Sign`  <a name="cfn-paymentcryptography-key-keymodesofuse-sign"></a>
Specifies whether an AWS Payment Cryptography key can be used for signing.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Unwrap`  <a name="cfn-paymentcryptography-key-keymodesofuse-unwrap"></a>
Property description not available.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Verify`  <a name="cfn-paymentcryptography-key-keymodesofuse-verify"></a>
Specifies whether an AWS Payment Cryptography key can be used to verify signatures.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Wrap`  <a name="cfn-paymentcryptography-key-keymodesofuse-wrap"></a>
Specifies whether an AWS Payment Cryptography key can be used to wrap other keys.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)