Secure Call flow and Secure Data action

[AmeyaP]

Hi Team,

Good Day!!!!!

We are in process to Integrate with a payment gateway which supports only SOAP request, thus we are using Lambda as middle ware to facilitate the REST to SOAP conversion.

We have integrated with Lambda using cross account integration (Lambda data action using ARN) which would be HIPAA/Secure Data enabled. As a flow overview we would be collecting the credit card details from customer over secure flow and same would be passed on to lambda using secure data action.

From security and compliance perspective we would like to understand how the data transition happens between Genesys and AWS Lambda. We know Genesys Cloud as platform is PCI complaint and Lambda too, but here we are looking for an answer for the data which will be in transit between Genesys and Lambda.

1. Is the data encrypted during transition? If yes ,any specific encryption carried out during data transition between Genesys & Lamda ?

2. How data is handled in secure flow ? We understand the secure flow doesn't saves anything in the logs or call recordings, but Genesys does holds data in variables i.e nothing but the buffer memory of Genesys is it correct ? if yes . how is that secured by Genesys ?

3.How data is handled in Secure data action ? Does Genesys holds the data in buffer memory ?

Regards,
Ameya

[tim.smith]

This is being handled via the duplicate Care cased that was opened. Please continue to work with Care on these questions.

[ottoflux]

Any chance the answer will be publicly consumable (via the forum) or should other curious folks open tickets as well? I've gotten questions on this before and it would be nice not to fudge my way through the answer.

[tim.smith]

Please open a case with Care. Generally, requests for answers about security, compliance, and legal matters aren't handled via the forum. Some of the answers to these questions would make good improvements to the documentation, which can also be requested via the Care case.