> Not sure how AWS squares that circle unless they outsource their data centers in China to a third party that can then expose the keys for China to use. This

> Not sure how AWS squares that circle unless they outsource their data centers in China to a third party that can then expose the keys for China to use. This is in fact precisely what they do. The Beijing region is operated by Sinnet and the Ningxia region is operated by NWCD. It's documented here: https://www.amazonaws.cn/en/about-aws/china/ https://www.amazonaws.cn/en/about-aws/china/