Protecting card owner information has become very important for e-commerce companies as they have become frequent targets for hackers. In order to safeguard the interests of the card owners, four industry majors, VISA, MasterCard, Discover and American Express, joined hands to create a set of policies and procedures to protect the debit, credit and cash card transactions and to safeguard the personal information of the cardholders. These policies and procedures are collectively known as the Payment Card Industry Data Security Standard (PCI DSS). In simple terms these standards alert companies that they are wholly responsible for the credit card information of their customers. The PCI directs companies to use the information diligently and to store only that information that is required for their business. This white paper provides an overview of architectural features in the AWS cloud that ensure the hosting of e-commerce web applications that are PCI DSS compliant. PCI DSS consists of a set of 12 directives that set industry standards for all companies who directly or indirectly process credit card information.
Some of the key objectives of the PCI DSS are:
PCI DSS has development a set of 12 requirements. Any system or application that intends to use the credit card information must ensure strict compliance to these requirements. The scope of PCI DSS requirements include:
Amazon Web Services (AWS) provides a secure, elastic and compliant hosting environment with the requisite tools to ensure PCI-DSS compliance. The architectural blueprint for hosting applications and data in AWS includes:
StackBuilderTM is an easy to use cloud app store front that allows users to quickly select and operate an AWS cloud hosted website, dev & test, data analytics or ecommerce service. The StackBuilderTM cloud app store allows users to quickly deploy and use their PCI DSS compliant e-commerce website hosted on AWS. StackBuilder’s intelligent cloud deployment engine takes care of instance selection, AWS VPC configuration and software installation.
Step 1: Select E-commerce as the workload profile and click Next
Step 2: Describe the workload environment in terms of size, security by industry and management model
Step 3: Configure environment by selecting stack – PCI DSS Web App
Step 4: Review Hosting Cost inclusive of software and maintenance fees
Step 5: Fill out form and submit request to provision environment. Once, the environment has been provisioned you will get an email with the access URL and a User Name & Password.
Step 6: Login into the e-commerce application
Step 7: You have now successfully launched the standardized architecture for PCI DSS
Ready to get started with your PCI-DSS compliant hosting project ? Send us an email solutions at stackarmor.com or call us at 888-964-1644.
Interested in learning more about Cybersecurity and Compliance in Cloud Hosting?