4 ms·

The US Gov't has their own GOV Cloud Datacenter Regions. It's run by azure and AWS but there are restrictions on who is allowed to use it. It's not really publi

The US Gov't has their own GOV Cloud Datacenter Regions. It's run by azure and AWS but there are restrictions on who is allowed to use it. It's not really public https://aws.amazon.com/govcloud-us/?whats-new.sort-by=item.additionalFields.postDateTime&whats-new.sort-order=desc https://aws.amazon.com/govcloud-us/?whats-new.sort-by=item.a... https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-dod https://learn.microsoft.com/en-us/azure/azure-government/doc...

ocdtrekkie 2y ago
The point is Amazon and Microsoft surely have vested interests in government data they are not supposed to be privy to.
- aprilthird2021 2y ago
  And the government has lots of leverage it can use against Amazon and MS if they use it in a way the government doesn't want. EU govts don't have that
  - _DeadFred_ 2y ago
    US Government leverage: $200,000 fine, appealable.
    - tyre 2y ago
      US Government leverage: FISA secret court, prison time
    - overstay8930 2y ago
      touch the right HSM in one of these facilities and you get to know what it's like to disappear
    - userbinator 2y ago
      Not with this current government.
    - int_19h 2y ago
      "That's a nice little monopoly you have there. Would be a shame if Department of Commerce decided to investigate it."
  - pessimizer 2y ago
    You're assuming the people who handle it for the government weren't working at Amazon and Microsoft a year ago, and won't again be working for Amazon and Microsoft a year from now. The government doesn't have leverage. The government is Amazon and Microsoft's leverage against others.
- losradio 2y ago
  I am sure both companies have NDAs and contractual agreements in place that can be enforced and monitored.
- pclmulqdq 2y ago
  It's not just the corporations as a whole that are an issue. It increases the insider risk footprint of that data to include your cloud provider's employees as well as your own. Amazon, Microsoft, and Google almost certainly employ agents of your adversaries (including US agents working without their knowledge) who have weird attack vectors and now have to be part of your threat model.
deleted 2y ago
[deleted]
deleted 2y ago
[deleted]
locusofself 2y ago
The 4 major cloud vendors (Azure, AWS, GCP and Oracle) all have Air-gapped regions in addition to their "GovCloud" regions.

ocdtrekkie 2y ago

The point is Amazon and Microsoft surely have vested interests in government data they are not supposed to be privy to.

aprilthird2021 2y ago
And the government has lots of leverage it can use against Amazon and MS if they use it in a way the government doesn't want. EU govts don't have that
- _DeadFred_ 2y ago
  US Government leverage: $200,000 fine, appealable.
  - tyre 2y ago
    US Government leverage: FISA secret court, prison time
  - overstay8930 2y ago
    touch the right HSM in one of these facilities and you get to know what it's like to disappear
  - userbinator 2y ago
    Not with this current government.
  - int_19h 2y ago
    "That's a nice little monopoly you have there. Would be a shame if Department of Commerce decided to investigate it."
- pessimizer 2y ago
  You're assuming the people who handle it for the government weren't working at Amazon and Microsoft a year ago, and won't again be working for Amazon and Microsoft a year from now. The government doesn't have leverage. The government is Amazon and Microsoft's leverage against others.
losradio 2y ago
I am sure both companies have NDAs and contractual agreements in place that can be enforced and monitored.
pclmulqdq 2y ago
It's not just the corporations as a whole that are an issue. It increases the insider risk footprint of that data to include your cloud provider's employees as well as your own. Amazon, Microsoft, and Google almost certainly employ agents of your adversaries (including US agents working without their knowledge) who have weird attack vectors and now have to be part of your threat model.

deleted 2y ago

[deleted]

deleted 2y ago

[deleted]

locusofself 2y ago

The 4 major cloud vendors (Azure, AWS, GCP and Oracle) all have Air-gapped regions in addition to their "GovCloud" regions.