[aws.payment-cryptography] Missing MultiRegionKeyType and Primary Region details in ListKeys

Author: algobarbCreated Jul 17, 2026Updated Aug 11, 2026

Labelsbugservice-apip2payment-cryptography

Describe the bug

The Payment Cryptography docs mentioned the "MultiRegionKeyType" and "PrimaryRegion" fields should be in the response for ListKeys: https://docs.aws.amazon.com/boto3/latest/reference/services/payment-cryptography/client/list_keys.html

I created several payment cryptography keys with replication and these fields do not get returned by list_keys. Please fix.

Regression Issue

Select this option if this issue appears to be a regression.

Expected Behavior

I expect payment_cryptography.list_keys to return "MultiRegionKeyType" and "PrimaryRegion" fields if the key has replication enabled. It should fit the documentation.

Current Behavior

The other fields are returned except for "MultiRegionKeyType" and "PrimaryRegion" fields for replicated payment cryptography keys.

[
            {
                "KeyArn": "arn:aws:payment-cryptography:us-east-1:xxx:key/xxx",
                "KeyState": "CREATE_COMPLETE",
                "KeyAttributes": {
                    "KeyUsage": "TR31_P0_PIN_ENCRYPTION_KEY",
                    "KeyClass": "SYMMETRIC_KEY",
                    "KeyAlgorithm": "TDES_3KEY",
                    "KeyModesOfUse": {
                        "Encrypt": true,
                        "Decrypt": true,
                        "Wrap": true,
                        "Unwrap": true,
                        "Generate": false,
                        "Sign": false,
                        "Verify": false,
                        "DeriveKey": false,
                        "NoRestrictions": false
                    }
                },
                "KeyCheckValue": "1BCEBA",
                "Exportable": true,
                "Enabled": true
            },
            {
                "KeyArn": "arn:aws:payment-cryptography:us-east-1:xxxx:key/xxx",
                "KeyState": "CREATE_COMPLETE",
                "KeyAttributes": {
                    "KeyUsage": "TR31_C0_CARD_VERIFICATION_KEY",
                    "KeyClass": "SYMMETRIC_KEY",
                    "KeyAlgorithm": "TDES_2KEY",
                    "KeyModesOfUse": {
                        "Encrypt": false,
                        "Decrypt": false,
                        "Wrap": false,
                        "Unwrap": false,
                        "Generate": true,
                        "Sign": false,
                        "Verify": true,
                        "DeriveKey": false,
                        "NoRestrictions": false
                    }
                },
                "KeyCheckValue": "786C13",
                "Exportable": true,
                "Enabled": true
            }
        ]

Reproduction Steps

create a payment cryptography key with replication in another region.
Use boto3 to list_keys

Possible Solution

Add missing fields "MultiRegionKeyType" and "PrimaryRegion" from get_key in list_keys

Additional Information/Context

No response

SDK version used

Tested with both. 1.43.47 and 1.43.51

Environment details (OS name and version, etc.)

MAC OS 2023

Source: boto/boto3

View original on GitHub View discussion on GitHub