如何使 Google App Engine 符合 PCI 标准？
我读过几篇文章，其中提到为了拥有符合 PCI 标准的云解决方案，您需要拥有私有云环境并且不能使用 google 应用引擎。是否可以创建一个符合 PCI 标准的网站，专门在 Google 应用引擎应用程序中存储信用卡信息和个人用户数据。请列出事实、非深奥的原因，说明为什么这可能不可能，或者应用程序引擎开发人员需要且可以完成的高级任务指令列表。
I have read a few articles that say in order to have a PCI compliant cloud solution you need to have a private cloud environment and cannot use google app engine. Is it possible to create a PCI compliant website that specifically stores credit card information and personal user data in a google app engine application. Please list factual, non esoteric reasons why this may not be possible or a list of high level tasks directives that would need to and can be done by an app engine developer.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
“但是，无论您做什么，您的托管提供商都必须声明支持 PCI 合规性。”...根据 @maple_shaft
"No matter what you do however, your hosting provider has to claim support of PCI compliance."... per @maple_shaft
独自完成 PCI 合规性是非常困难的。详细信息可在此处获取。
App Engine 上最常见的支付模式是利用承担 PCI 合规性责任的支付网关。
通常，这些服务会为您提供授权令牌，以与您可以用来创建付款的用户相关联。
流行的 Python 网关
以下是一些支付网关的链接，可帮助您入门。
Doing PCI compliance all by yourself is woefully difficult. The details are available here.
The most common pattern for payments on App Engine is to utilize a payment gateway which bears the onus of PCI compliance.
Typically, these services provide you with an authorization token to correlate with users that you can use in order to create payments.
Popular Python Gateways
Here are some links to payment gateways to get you started.
了解 Google Cloud Platform 可能会很有趣 最近成为 PCI DSS 认证。由于 Google App Engine 是在其基础上构建的，我认为使用它也应该是“安全”的。
It might be interesting to know that Google Cloud Platform has recently became PCI DSS certification. Since Google App Engine is build on it I assume it should be "safe" to use it as well.