I suppose it comes down to the amount of investment available. Amazon can pour resources into security, monitoring and have a large staff actively keeping an ey

I suppose it comes down to the amount of investment available. Amazon can pour resources into security, monitoring and have a large staff actively keeping an eye on such things. They're signed off for PCI compliance Level 1[0] (Any service provider that stores, processes and/or transmits over 300,000 transactions annually) which helps isolate you from a lot of costs around getting your dedicated hardware audited yourself. It's also worth noting that Amazon.com itself is hosted off AWS (since ~2010) though I'm struggling to find a good cite for that [0] http://aws.amazon.com/compliance/pci-dss-level-1-faqs/ http://aws.amazon.com/compliance/pci-dss-level-1-faqs/ [1] http://www.dummies.com/how-to/content/amazoncom-runs-on-amazon-web-services-aws.html http://www.dummies.com/how-to/content/amazoncom-runs-on-amaz...