Summary of how CloudNation designed the architecture and migrated a mobility transaction provider platform that processes cardholder data with VISA to AWS. To adhere to the many requirements of PCI-DSS, we used a combination of Amazon Payment Cryptography, restricted networking in a hub-spoke setup, centralized governance with AWS Landing Zone Accelerator and several other security controls.