4c0d7117_ublic_IaaS_Cloud__How_I_Did_It__Description
[Req] 3 [My Summary] Rely on CSP for HW->Hypervisor related compliance. Gets down to not storing what you don’t need, good crypto selection, and proper key management. For non-DB-based encryption, use of a third party like TrendMicro SecureCloud (or similar) is a big help here. Note: Cloud really is not an issue here, as you have many of the same concerns in a managed hosting environment. The main difference is between owned or third-party infrastructure. [Description] 
Protect stored cardholder data
PCI Compliance in the Public IaaS Cloud: How I Did It
Description