This is about as grifty and mckinseyian as the AI Data Centres in space hype.
AWS European Sovereign Cloud
31–40 of 76 posts
Re: AWS European Sovereign Cloud
#32Microsoft admitted that it 'cannot guarantee' data sovereignty [0] "on June 18 before a [French] Senate inquiry into public procurement and the role it plays in European digital sovereignty" as the CLOUD Act "gives the US government authority to obtain digital data held by US-based tech corporations irrespective of whether that data is stored on servers at home or on foreign soil." It'd be great if they could clarify…
It would seem like the problem is one of the business layout and technical layout.
Organize your business and your tech correctly and you can have an owned foreign subsidiary that can comply with local laws. But things would have to be quite separate.
Re: AWS European Sovereign Cloud
#33I would love to see a US specific version of this as well. Something similar to GovCloud with the same security controls and employee vetting but accessible to commercial customers.
Re: AWS European Sovereign Cloud
#34> The AWS European Sovereign Cloud is the only fully-featured, independently operated sovereign cloud, backed by strong technical controls, sovereign assurances and legal protections. independently OPERATED, not independently owned therefore: still under the jurisdiction of the US regime
Wait, how does this work? If it is owned by a US company but operated by people inside the EU, I would expect the actual laws in effect to be the EU ones. I mean, that’s who can actually send police to stomp around and physically take the hard drives if they really want to.
The US can of course command the US owners to instruct their EU based employees to do something illegal in the EU, but if your boss tells you do do something illegal, you are still breaking the law if you do it…
Re: AWS European Sovereign Cloud
#35I worked on a team deploying a service to European Sovereign Cloud (ESC). Disclaimer - I am a low level SDE and all opinions are my own. AWS has set up proper boundaries between ESC and global AWS. Since I'm based out of the US I can't see anything going on in ECS even in the service we develop. To fix an issue there we have to play telephone with an engineer in ESC where they give us a summary of the issue or debug…
Sure, but what really prevents
>To fix an issue there we have to play telephone with an engineer in ESC where they give us a all the data we need or get fired.
?
Re: AWS European Sovereign Cloud
#36> The AWS European Sovereign Cloud is the only fully-featured, independently operated sovereign cloud, backed by strong technical controls, sovereign assurances and legal protections. independently OPERATED, not independently owned therefore: still under the jurisdiction of the US regime
Also "legal protections" provided by the US regime, for what that exactly entails anymore I'm not sure, probably depends on the situation.
Congress as it is are cowards incapable of protecting the law, it is merely a regime based law until Congress can prove and rebuild trust that it has a backbone.
Re: AWS European Sovereign Cloud
#37Earlier quoted context omitted.
What if the software is developed and potentially backdoored in the US and deployed by the EU team in the sovereign region? Or did they rewrite the entire AWS stack?
If the EU employees can look around the code, it would then get quite interesting if they were to point out a backdoor. which they would of course raise with an EU based CERT. In a way that protects US customers as well having a set that can't be stopped from doing that.
Assuming EU employees get to see the sources, let alone own their building process.
Re: AWS European Sovereign Cloud
#38"AWS" and "European Sovereign" - that's a contradiction in terms.
Just stop using clouds run your own computers.
Re: AWS European Sovereign Cloud
#39Microsoft admitted that it 'cannot guarantee' data sovereignty [0] "on June 18 before a [French] Senate inquiry into public procurement and the role it plays in European digital sovereignty" as the CLOUD Act "gives the US government authority to obtain digital data held by US-based tech corporations irrespective of whether that data is stored on servers at home or on foreign soil." It'd be great if they could clarify…
It would seem like the problem is one of the business layout and technical layout. Organize your business and your tech correctly and you can have an owned foreign subsidiary that can comply with local laws. But things would have to be quite separate.
> Organize your business and your tech correctly and you can have an owned foreign subsidiary that can comply with local laws.
I doubt it, a majority owned subsidiary is usually passed through for many legal purposes.
Re: AWS European Sovereign Cloud
#40Sovereign-by-design but still runs a software stack that is largely written and maintained by a US staff... All of these isolation sovereignty iniatives are window dressing to the bigger problem that the EU and other countries are massively dependent on proprietaey US-centric software stacks.
Sovereign-by-design but still runs a software stack that is largely written and maintained by a US staff... Not as much as you might think. The most important component -- Nitro -- basically runs out of Germany.
The AWS EC2 virtualization team invented and maintains the Nitro system. And that team is overwhelmingly based in Seattle, WA USA.