AWS has several different levels of region isolation. There are aws region partitions - general, china, us gov cloud (public), us gov secret and us gov top-sec

AWS has several different levels of region isolation. There are aws region partitions - general, china, us gov cloud (public), us gov secret and us gov top-secret. Inside a partition, there can be some regions that are opt-in - see https://docs.aws.amazon.com/general/latest/gr/rande-manage.html#rande-manage-enable https://docs.aws.amazon.com/general/latest/gr/rande-manage.h... My understanding is that opt-in regions are even more isolated inside a specific partition for partition-global services like IAM and maybe some other stuff.