wrappingKeyIdentifier

A key identifier that can be either a key ARN or an alias name. This allows flexible key identification in operations.

When using a key ARN, it must be a fully qualified ARN in the format: arn:aws:payment-cryptography:region:account:key/key-id.

When using an alias, it must begin with alias/ followed by the alias name.

Do not include confidential or sensitive information in this field. This field may be displayed in plaintext in CloudTrail logs and other output.