Compliance validation for AWS Payment Cryptography

As with other AWS services, customers require a clear understanding of the shared responsibility model for security and compliance. As a service that specifically supports payments, compliance with applicable PCI standards is particularly important to understand for AWS Payment Cryptography customers. AWS PCI DSS and PCI 3DS assessments include AWS Payment Cryptography. There may be references to the service in the Shared Responsibility Guides, available from AWS Artifact, for these reports. PCI PIN Security and Point-to-Point Encryption (P2PE) assessments are specific to AWS Payment Cryptography.

This section provides information on the status and scope of the service's compliance and information that will be helpful in planning PCI PIN Security and PCI P2PE assessments of your applications.

Topics

• Compliance of the service

• PIN Compliance Planning

• Using the AWS Payment Cryptography Decryption Component in P2PE solutions