PCI DSS Security Maturity Model·AWS v1.0.0

Changelog

Version history of this maturity model. The model version tracks changes to the content and structure; the PCI DSS version indicates which release of the standard the recommendations are aligned to.

  1. v1.0.0 2026-09-03 PCI DSS 4.0.1
    Initial release
    • 12 PCI DSS requirements mapped across 4 maturity phases, with 51 AWS security control recommendations.
    • Each recommendation includes PCI validation criteria (testing procedures and AWS evidence), shared-responsibility classification, and the customized-approach objective where eligible.
    • Two reference architectures (single-account 3-tier and multi-account with a dedicated PCI OU) with per-control practical implementation guidance.
    • Available in English, Spanish, and Portuguese.
    • Recommendations aligned to PCI DSS v4.0.1.