KAPPAS is a PCI DSS compliant PAN storage framework for Go. It's mainly developed for AWS services, however, it's designed to be extensible and could be used in a variety of other environments. It allows services to store and retrieve PAN information quickly and securely.
Payment Card Industry Data Security Standard (PCI DSS) is described as:
The Payment Card Industry Data Security Standard (PCI DSS) is a set of standards created by major payment card companies to protect consumers and avoid liability by forcing businesses involved in the payment card ecosystem to implement safety measures and processes.
At the moment, this is meant to be used as a framework for developing a PAN storage solution. Everything is documented using godoc, and specification documents can be found in the docs folder.
Contributions are welcome, please make sure you write tests and documentation when modifying code 🙂
- Finish gRPC view
- Package everything up in a docker container
- Package architecture into AWS Cloud Formation
I built this framework while interning at a startup that wanted to process PAN information for their existing platform. They were using an AWS infrastructure, and they needed to become PCI compliant. I then designed this solution that successfully allowed them to quickly spin up a secure system for processing sensitive information. This framework was also designed to be highly extensible and maintainable so that it could provide business value further into the future.
Throughout this project, I learned a lot about compliance, security engineering, and technologies including Go, Docker, gRPC, and AWS.
- Making AWS services PCI compliant: https://cloudacademy.com/blog/how-to-make-your-infrastructure-compliant-with-pci-dss-on-aws/