ta20190717

FWIW AWS basically skirted this by having the chinese companies they contract with be the official "seller of record"/"operator"/"owner" but the regions are de-facto operated by western AWS engineering teams under a complicated contracting scheme.

In addition to the three partitions (global, china and us gov) documented at https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-n... AWS sdks include two additional partitions: us-iso and us-iso-b, which have endpoints in the "c2s.ic.gov" and "sc2s.sgov.gov" dns hierarchy, respectively.

Reposted with a clearer title from https://news.ycombinator.com/item?id=23297872 with permission.

The post was originally called 'List of all 5 AWS partitions (AWS, AWS-cn, AWS-us-gov, AWS-ISO, AWS-ISO-b)', which is surprising, because many might assume there are only one or three -- the last two are only for Secret and Top Secret US Government data.

However, for some reason dang edited the post title, which killed it from the front page really fast.

Does anyone know the technical details of what Google would have needed to comply with in China? From my understanding, a lot of western companies do business in China via (51% local controlled) "Partners" that ostensibly run their infrastructure for them, and obviously have to abide by local regulation. This includes operating an "Information Security Management System" (a euphemism of a sort) that interfaces with the Ministry of Industry and Information Technology for auditable end-user access logs and content blocking.

It seems this is governed by these standards, but I failed to dig up a copy of them. Is it true that any western company offering a mainland Chinese version of their product exposes these interfaces?

YD/T 2248-2015 - 互联网数据中心和互联网接入服务信息安全管理系统技术要求 - Interface requirements of information security management system for Internet data center/Internet service provider

YD/T 2406-2017 - 互联网数据中心和互联网接入服务信息安全管理系统及接口测试方法 - Test specifications of information security management system & interface for Internet data center/Internet service provider

YD/T 3212-2017 - 内容分发网络服务信息安全管理系统接口规范 - Interface standard of information security management system for content delivery network service

YD/T 3213-2017 - 内容分发网络服务信息安全管理系统及接口测试方法 - Test specifications of information security management system for content delivery network service

YD/T 3214-2017 - 互联网资源协作服务信息安全管理系统接口规范 - Interface specification for information security management of Internet resource collaboration service

YD/T 3215-2017 - 互联网资源协作服务信息安全管理系统及接口测试方法 - Test methods of information security management system for Internet resource collaboration service