Your company is migrating from an on-premises data center to the cloud and plans to use Google Kubernetes Engine (GKE) for workload orchestration. Part of the architecture must be PCI DSS-compliant. Which of the following statements is the most accurate?