Amazon Web Services (AWS) has re-published the whitepaper Architecting for PCI DSS Scoping and Segmentation on AWS to provide guidance on how to properly define the scope of your Payment Card Industry (PCI) Data Security Standard (DSS) workloads that are running in the AWS Cloud. The whitepaper has been refreshed to include updated AWS best practices and technologies, and updates that are applicable to the new PCI DSS v4.0 requirements. The whitepaper looks at how to define segmentation boundaries between your in-scope and out-of-scope resources by using cloud-based AWS services.

 <p>The whitepaper is intended for engineers and solution builders, but it also serves as a guide for Qualified Security Assessors (QSAs) and internal security assessors (ISAs) to better understand the different segmentation controls that are available within AWS products and services, along with associated scoping considerations.</p> <p>Compared to on-premises environments, software-defined networking on AWS transforms the scoping process for applications by providing additional segmentation controls beyond network segmentation. Thoughtful design of your applications and selection of security-impacting services for implementing your required controls can reduce the number of systems and services in your cardholder data environment (CDE). </p> <p>The whitepaper is based on the PCI Council’s <a href="https://docs-prv.pcisecuritystandards.org/Guidance%20Document/PCI%20DSS%20General/Guidance-PCI-DSS-Scoping-and-Segmentation_v1_1.pdf" target="_blank" rel="noopener">Information Supplement: Guidance for PCI DSS Scoping and Network Segmentation</a>.</p> <p> <br>If you have questions or want to learn more, contact your account representative, or leave a comment below.</p> <p><strong>Want more AWS Security how-to content, news, and feature announcements? Follow us on </strong><a href="https://twitter.com/AWSsecurityinfo" target="_blank" rel="noopener"><strong>Twitter</strong></a>.</p> <!-- '"` -->