Payment Cryptography: add control plane support

Author: jerryhxu

docs/docs/services/payment-cryptography.rst

@@ -0,0 +1,48 @@
+.. _implementedservice_payment-cryptography:
+
+====================
+payment-cryptography
+====================
+
+.. autoclass:: moto.paymentcryptography.models.PaymentCryptographyControlPlaneBackend
+
+Implemented features
+--------------------
+
+- [X] add_key_replication_regions
+- [X] associate_mpa_team
+- [X] create_alias
+- [X] create_key
+- [X] delete_alias
+- [X] delete_key
+- [X] delete_resource_policy
+- [X] disable_default_key_replication_regions
+- [X] disassociate_mpa_team
+- [X] enable_default_key_replication_regions
+- [X] export_key
+- [X] get_alias
+- [X] get_certificate_signing_request
+- [X] get_default_key_replication_regions
+- [X] get_key
+- [X] get_mpa_team_association
+- [X] get_parameters_for_export
+- [X] get_parameters_for_import
+- [X] get_public_key_certificate
+- [X] get_resource_policy
+- [X] import_key
+- [X] list_aliases
+- [X] list_keys
+- [X] list_tags_for_resource
+- [X] put_resource_policy
+- [X] remove_key_replication_regions
+- [X] restore_key
+- [X] start_key_usage
+- [X] stop_key_usage
+- [X] tag_resource
+- [X] untag_resource
+- [X] update_alias
+
+The control plane stores key material only to preserve coherent state for future
+data-plane support. Import and export responses are suitable for mocked workflows;
+they do not emulate an AWS hardware security module or provide TR-31/TR-34
+interoperability guarantees.

moto/backend_index.py

@@ -168,6 +168,12 @@
     ("opensearchserverless", re.compile("https?://aoss\\.(.+)\\.amazonaws\\.com")),
     ("organizations", re.compile("https?://organizations\\.(.+)\\.amazonaws\\.com")),
     ("osis", re.compile("https?://osis\\.(.+)\\.amazonaws\\.com")),
+    (
+        "paymentcryptography",
+        re.compile(
+            "https?://controlplane\\.payment-cryptography\\.(.+)\\.amazonaws\\.com"
+        ),
+    ),
     ("personalize", re.compile("https?://personalize\\.(.+)\\.amazonaws\\.com")),
     ("pinpoint", re.compile("https?://pinpoint\\.(.+)\\.amazonaws\\.com")),
     ("pipes", re.compile("https?://pipes\\.(.+)\\.amazonaws\\.com")),

moto/moto_server/werkzeug_app.py

@@ -49,6 +49,7 @@
     "execute-api": "iot",
     "iotdata": "data.iot",
     "mobiletargeting": "pinpoint",
+    "payment-cryptography": "controlplane.payment-cryptography",
 }
 
 # Some services are only recognizable by the version

moto/paymentcryptography/__init__.py

@@ -0,0 +1 @@
+from .models import paymentcryptography_backends  # noqa: F401

moto/paymentcryptography/exceptions.py

@@ -0,0 +1,27 @@
+from moto.core.exceptions import JsonRESTError
+
+
+class PaymentCryptographyError(JsonRESTError):
+    code = 400
+
+    def __init__(self, error_type: str, message: str):
+        super().__init__(error_type, message)
+
+
+class ConflictException(PaymentCryptographyError):
+    code = 409
+
+    def __init__(self, message: str):
+        super().__init__("ConflictException", message)
+
+
+class ResourceNotFoundException(PaymentCryptographyError):
+    code = 404
+
+    def __init__(self, message: str):
+        super().__init__("ResourceNotFoundException", message)
+
+
+class ValidationException(PaymentCryptographyError):
+    def __init__(self, message: str):
+        super().__init__("ValidationException", message)