AWS updates PCI DSS and PCI 3DS compliance packages for Spring 2026

Amazon Web Services (AWS) has announced the availability of its updated Payment Card Industry (PCI) Data Security Standard (DSS) and Three Domain Secure (3DS) compliance packages, valid through Spring 2026. These updates reinforce AWS's commitment to providing a secure cloud environment for customers handling payment card data.

The new packages expand the scope of AWS compliance to include three additional services: Amazon Bedrock AgentCore, AWS Parallel Computing Service, and AWS Skill Builder. Furthermore, support has been extended to a new AWS Region: Asia Pacific – New Zealand. These additions provide customers with increased flexibility when deploying regulated workloads.

AWS's refreshed certifications mean that customers can utilize these services while maintaining PCI DSS and PCI 3DS compliance. This enables innovation without compromising security. A comprehensive list of services in scope is available on the AWS website.

The validation was conducted by Coalfire, an independent Qualified Security Assessor (QSA). Customers can access the PCI DSS and PCI 3DS report packages through AWS Artifact, a self-service portal that provides on-demand access to AWS compliance reports, streamlining audit processes and reducing administrative burden for clients.