AWS has a dedicated environment (GovCloud) for US government use. Only US citizens and green card holders are eligible to be granted access to it. They don't (

AWS has a dedicated environment (GovCloud) for US government use. Only US citizens and green card holders are eligible to be granted access to it. They don't (in my personal experience) seem to be concerned about the nationality of the developers – but if the developer is non-US, they won't be able to gain any access to the production instance. They have to hand the app over to a US person who will be responsible for installing/configuring/operating it. Sometimes (especially when there is a problem), the non-US developer may be telling the US SRE/sysadmin/etc what command to type, but still a US person has to be the one doing the typing. And that's just non-classified systems, for classified systems the rules are even tougher. I remember once a colleague was writing some code on a classified project (actually for the Australian government, but this story could just as easily have happened in the US) to call some API, he told me he was having some problems. I asked him if he could show me his code. "Sorry, I can't, it is classified." "How can your code to call that API be classified?" "Everything we write while on-site is automatically classified, and trying to get it declassified is too hard". He agreed he'd go home, and rewrite the problematic code from memory, and then give that to me. In the process of doing so, he worked out what he was doing wrong, he didn't need my help in the end.