---
title: "POST /#X-Amz-Target=PaymentCryptographyControlPlane.DisableDefaultKeyReplicationRegions"
method: POST
path: "/#X-Amz-Target=PaymentCryptographyControlPlane.DisableDefaultKeyReplicationRegions"
---

# POST /#X-Amz-Target=PaymentCryptographyControlPlane.DisableDefaultKeyReplicationRegions

`POST /#X-Amz-Target=PaymentCryptographyControlPlane.DisableDefaultKeyReplicationRegions`

Disables [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) settings for the specified Amazon Web Services Regions in your Amazon Web Services account, preventing new keys from being automatically replicated to those regions.

After disabling Multi-Region key replication for specific regions, new keys created in your account will not be automatically replicated to those regions. You can still manually add replication to those regions for individual keys using the [AddKeyReplicationRegions](https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_AddKeyReplicationRegions.html) operation.

This operation does not affect existing keys or their current replication configuration.

**Cross-account use:** This operation can't be used across different Amazon Web Services accounts.

**Related operations:**

*   [EnableDefaultKeyReplicationRegions](https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_EnableDefaultKeyReplicationRegions.html)
    
*   [GetDefaultKeyReplicationRegions](https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetDefaultKeyReplicationRegions.html)

## Headers

- `X-Amz-Target` 'PaymentCryptographyControlPlane.DisableDefaultKeyReplicationRegions', required

## Request body

- DisableDefaultKeyReplicationRegionsInput — Input parameters for disabling default key replication regions for the account.
  - `ReplicationRegions` Region[], required — <p>The list of Amazon Web Services Regions to remove from the account's default replication regions.</p> <p>New keys created after this operation will not automatically be replicated to these regions, though existing keys with replication to these regions will be unaffected.</p>

## Response `200`

Success

- DisableDefaultKeyReplicationRegionsOutput — Output from disabling default key replication regions for the account.
  - `EnabledReplicationRegions` Region[], required — <p>The remaining list of regions where default key replication is still enabled for the account.</p> <p>This reflects the account's default replication configuration after removing the specified regions.</p>

## Other responses

- `480` — ServiceQuotaExceededException
- `481` — ValidationException
- `482` — ConflictException
- `483` — AccessDeniedException
- `484` — ResourceNotFoundException
- `485` — ThrottlingException
- `486` — InternalServerException

---

[API](https://skmtc.net/aws/apis/payment-cryptography.md) · [All operations](https://skmtc.net/aws/apis/payment-cryptography/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/payment-cryptography/versions/1b0b83160e8d/schema)