# AWS Security Reference Architecture: A deep dive into PCI DSS compliance

DevFeed: [AWS Security Reference Architecture: A deep dive into PCI DSS compliance](<https://devfeed.tech/articles/aws-security-reference-architecture-a-deep-dive-into-pci-dss-compliance-20819.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/aws-security-reference-architecture-a-deep-dive-into-pci-dss-compliance/>)

Author: Avik Mukherjee

Published: 2026-09-14T17:46:56Z

Content type: article

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Network Segmentation](<https://devfeed.tech/topics/network-segmentation.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Logging](<https://devfeed.tech/topics/logging.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [amazon-web-services](<https://devfeed.tech/tags/amazon-web-services.md>), [announcements](<https://devfeed.tech/tags/announcements.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [foundational-100](<https://devfeed.tech/tags/foundational-100.md>), [logging](<https://devfeed.tech/tags/logging.md>), [network-segmentation](<https://devfeed.tech/tags/network-segmentation.md>), [pci-dss](<https://devfeed.tech/tags/pci-dss.md>), [security](<https://devfeed.tech/tags/security.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>)

## AI overview

AWS announces the AWS Security Reference Architecture (AWS SRA) PCI DSS Deep Dive, a guide that extends the core AWS SRA with prescriptive architecture-level guidance for organizations handling cardholder data on AWS. It explains how AWS SRA patterns address PCI DSS concerns including account scoping, network segmentation, encryption, logging, and access control.

## Source excerpt

Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations that store, process, or transmit cardholder data on AWS. Organizations subject to [...]