I'm new to the PCI world, but need to research ETL (extract-transform-load) solutions for my team to move data from one place to another. I looked in amazon's list of PCI DSS compliant resources, and I noticed Glue is not there. Does this mean Glue should not be used when there is a need for PCI DSS compliance? or does it not need to be because its not storing data, just transforming the data and loading data into an RDS data store?
As per the PCI tab in AWS Services in Scope by Compliance Program Glue is not PCI compliant.
I'm not an auditor but I assume processing credit card data on non-PCI-compliant service is not permitted, even if it's not stored there. I guess in cases like this better be safe than sorry and use only compliant services to cover your back side.
That's what I would do anyway ;)