[Amazon AWS] PCI DSS Level 1 Compliance FAQs

http://aws.amazon.com/security/pci-dss-level-1-compliance-faqs/ Amazon AWS is “PCI DSS 2.0 Level 1 -compliant Shared Hosting Provider”. i.e. you can build your PCI-DSS compliant infrastructure using EC2, S3, EBS and VPC to store and process payment card data

Ask 37signals: How do you process credit cards? - (37signals)

http://www.37signals.com/svn/posts/753-ask-37signals-how-do-you-process-credit-cards useful article and (especially!) comments about ecommerce systems