Remix.run Logo
t0mas88 5 hours ago

AWS had announced a sovereign European cloud, probably to avoid a loss of business in the long term due to these initiatives. But it's questionable whether this would survive strong political pressure from the US government.

ttkari 5 hours ago | parent | next [-]

I'm not sure I understand how an American company would be able to provide any service that could be "sovereign European".

vander_elst 3 hours ago | parent | next [-]

How I can imagine it works: Amazon only provides the packaged software, the infra and the ops are officially driven by a 100% European company. AWS probably provides support, but they don't have the encryption keys not any access to the installation.

Vespasian 5 hours ago | parent | prev | next [-]

In theory Amazon could license the stack to a European Operator while having no operative access themselves.

I think this is already done in some cases altough the political reliability has not yet been tested.

WJW 5 hours ago | parent | next [-]

I guess the question then becomes: what happens if some future US government pressures Amazon to revoke the license. Unless and until there's a good answer to that, it'd still be better to develop something locally.

Muromec 3 hours ago | parent | prev | next [-]

If I run your software, you can have no operational control, but you can sneak a root kit or some kind of stuff I dont want to have there

nemomarx 5 hours ago | parent | prev [-]

They must have something like this for China, right?

cmckn 5 hours ago | parent [-]

Sort of. AWS operates the China regions more or less like any other region, with oversight by the Chinese holding companies.

The EUSC will be more restricted, similar to GovCloud. Only EU citizens can access/operate it.

Specific example: an alarm fires for your service. If it’s in China, anyone on the team can go look at the logs. If it’s in GovCloud, only teammates who are American can look at the logs. In the EUSC, only Europeans can.

Balinares 5 hours ago | parent | prev [-]

By providing the software to be installed in clusters owned and operated by European companies.

The sovereign cloud spec designed by the folks at France's ANSSI agency is tight.

kenjackson 5 hours ago | parent | prev | next [-]

And it certainly would not survive strong political pressure from the EU and US governments. Local governments still can be adversely impacted.

p2detar 4 hours ago | parent | prev | next [-]

Is this new? Microsoft already offer that and I think already for quite a while.

saubeidl 5 hours ago | parent | prev [-]

As long as there's any American ownership in the chain, this is not to be trusted.

I'm assuming AWS wouldn't fully divest from this European business unit and split it off as a completely separate entity?

hedora 5 hours ago | parent [-]

The US CLOUD Act says that if Amazon has the technical ability to access those machines, they must do so if the US government asks them to.

So, unless it’s a separate legal entity, and also shares no authentication, software deployment, or related infrastructure with the US part of Amazon, it’s either not providing sovereignty or is being offered in violation of US law.

It’s unclear to me if they’d have to comply with requests to (for example) backdoor their IAM service backend and push the binaries to Europe, or not. (I’m not a lawyer.)