4c0d7117_ublic_IaaS_Cloud__How_I_Did_It__Description
[Req] 1 [My Summary] Rely on CSP for HW->Hypervisor related compliance. Design the application and communications flows so they can be secured. The state of networking features make cloud “different” than traditional environments. This will have an affect on how you provide isolation for scoping. Currently host-based firewalls or similar hypervisor based technology are the most likely solutions to implement appropriate restrictions. It is what I use. Review/audit regularly to make sure design and implementations have not changed. Since hosts come and go more frequently, so the need for regular review is increased. One nice aspect of the cloud is that since automation is part of the DNA, automation of these reviews is easier. [Description] 
Install and maintain a firewall configuration to protect cardholder data
PCI Compliance in the Public IaaS Cloud: How I Did It
Description