AWS announces 'European Sovereign Cloud' for government and regulated industries
The first sovereign cloud services will be rolled out in Germany
Amazon Web Services (AWS) is set to unveil a new sovereign cloud solution in the European Union (EU) specifically tailored to cater to government entities and industries with stringent regulatory requirements.
The move comes in response to the increasing demand for cloud solutions that adhere to Europe's stringent data privacy rules and the concept of "digital sovereignty," which emphasises European control over data and technology.
Named the Amazon Web Services European Sovereign Cloud, this new infrastructure will operate separately from Amazon's other cloud services, exclusively using servers located within the EU.
Notably, only AWS employees who are residents of EU member states will be granted access and control over the operations of this cloud service, as well as providing customer support, ensuring a heightened level of data security and regulatory compliance.
AWS will be rolling out its sovereign cloud services in Germany as its first launch location, with subsequent expansion planned to serve all European customers. This expansion will provide clients with a range of cloud computing services, including storage, processing, and secure data management, all under the stringent regulatory compliance of the EU.
The new sovereign cloud service is designed to meet the growing need for strong, region-specific data security and management. This will let government agencies and industries with strict rules about data sovereignty and privacy use cloud technology.
One of the key features of this cloud service is its data storage capabilities, allowing customers to retain all metadata generated within the EU. Furthermore, it will introduce its billing and usage metering systems, providing transparency and control to its users, AWS says.
In a statement, Amazon stressed its commitment to data privacy and sovereignty: "Customers will have the control and assurance that AWS will not access or use customer data for any purpose without their agreement, as well as access to the strongest sovereignty controls among leading cloud providers."
Data privacy is a priority in Europe
Transatlantic data protection has become a growing concern since the EU's top court invalidated the Privacy Shield data sharing agreement in 2020. The court's decision was based on concerns that the agreement did not adequately protect user data from potential surveillance by the US government.
In light of the EU's commitment to stringent privacy and security regulations, the bloc's privacy watchdog EDPB initiated a comprehensive investigation last year, scrutinising the public sector's reliance on cloud-based services. The purpose of the inquiry was to ensure compliance with EU privacy safeguards, given the increasing dependence on the cloud infrastructure for sensitive data storage and processing.
The move by AWS aligns with the broader trend of both business and government customers turning to established tech companies for public cloud solutions rather than constructing their own data centres.
Major US tech giants, including Google and Microsoft, have responded to the EU's call for "sovereign" clouds by introducing features that enhance data control within the bloc.
For example, Google Cloud introduced features limiting access to European data by EU residents, and Microsoft released its "Cloud for Sovereignty" features last year, to bolster data control for customers.