News for hackers. Stuff that matters.

A comment on AWS Support able to access any S3 object due to permission change. Parent comment

Re:AWS Support able to access any S3 object due to permissio... by openplatypus on Thursday December 23, 2021 @08:04AM (#29661436)
That's great. It is heart-warming to hear some businesses are taking this threat seriously.

We built are service in similar vain. Nothing can reside under authority on non-EU entity, and nothing can be hosted on servers owned by non-EU entity. This effectively removed AWS, Azure, GCP and Alibaba.

And still, we had plenty of choice.

We specifically picked “boring” cloud provider. No thrills cloud vendor which has core business in building infrastructure rather than snooping on customers.

[ Parent | on HN ]
Re:AWS Support able to access any S3 object due to permissio... by gbrayut on Thursday December 23, 2021 @10:16AM (#29662582)
Curious on your thoughts about the "Sovereign Cloud" features discussed at https://cloud.google.com/blog/products/identity-security/new...

Would having a 3rd party host the services in the EU meet your requirements? Or having data residency restrictions with strict key management, EU based support, and access transparency/approvals?

IMO Google is also taking this seriously, but I am genuinely curious if any off the above would meet your requirements.

[ Parent | on HN ]