PCI compliance i think, also merchants wouldn't touch you with a barge pole if you don't have dedicated hardware... so no aws/gce.
Also, worth noting, since most places are integrating payments through, e.g., Stripe, the requirements on the gateway server are much lower.