I am still confused about the potential GDPR issues of using an American company cloud service and the potential American law of needs of the cloud provider to

I am still confused about the potential GDPR issues of using an American company cloud service and the potential American law of needs of the cloud provider to grant access to data. Wasn't this an issue in the EU with Microsoft?