For customers who need to process credit card data for their customers, follow the PCI DSS (https://www.pcisecuritystandards.org/) compliance standard recommended. Amazon Web Services has a detailed reference architecture and control mapping to help customers set up a PCI DSS-compliant environment available at https://aws.amazon.com/quickstart/architecture/accelerator-pci/.