Building PCI-compliant real-time payment processing with AsapCard

on YouTube ↗16m

" summary

AsapCard is a cloud-native card processor that builds a cloud-native authorizer and connector with no on-prem HSMs, claiming live PCI DSS and PCIP compliance and using AWS Payment Cryptography, CloudHSM, KMS, PrivateLink, EKS, Secrets Manager + Lambda, ELB, WAF/Shield, CloudTrail, Security Hub, GuardDuty, Inspector and Detective. Architecture uses segregated PCI accounts and VPC endpoints, targets real-time authorizations to avoid batch jobs, aims to migrate processors without downtime, and reports the platform is certified and operating.

AI-written summary · about

" chapters (4)

1. 0:00Introduction to ASAP card
2. 2:38Cloud architecture strategy
3. 13:32Security and compliance
4. 16:11Conclusion

" related talks

• 34mPCI and PoliticsNicholas Klick · ChefConf 2018
• 05mAchieving PCI Compliance On a Single FoundationTom Gillis · SpringOne Platform 2017
• 34mA House of Cards (of Credit) in the CloudMatteo Castellani · IDI Incontro DevOps Italia 2020
• 40mInfrastructure as Code in the WildJonathan Lima · THE CONF 2017
• 40mSecurely Modernize Payment Systems with AWSAbderrahim Benazza, Rim Zaafouri, Nicolas Bordes · AWS Summit Paris 2024
• 24mPCI Compliance using Cloud Foundry and BOSH Add-onsMark DCunha, Slawek Ligus · Cloud Foundry Summit Silicon Valley 2017
• 46mCard payments 101 - from swipe to settlementPritee Tembhekar · fintech_devcon 2021
• 24mBuilding Planet-Scale Payment PlatformsTapan Vijay · Conf42 Platform Engineering 2025