Hacker News Reader

Not seeing any issues in aws-us-gov.

TIL of aws-us-gov

usually referred to as gov-cloud.

Has it's own version of everything, physically segmented, even for global systems such as IAM.

You have to be a US Citizen to work on it and you need special security clearances.

You might be getting GovCloud and AWS Secret Region confused. I've been told that I can access GovCloud if I cross the border from Canada, despite not being a US Citizen. (This came up in the context of providing FreeBSD AMIs.)

I believe the secret region is just part of GovCloud. Afaik, GovCloud is just the marketing name for aws-us-gov

GovCloud is a separate partition from Secret. Different regulatory framework alignment and customer onboarding.

GovCloud customers only need be a US person or entity, beyond that any further regulatory alignment is up to the customer. AWS does not audit the IAM user base for nationality or any compliance requirements.

Disclaimer: I am an AWS Public Sector Solutions Architect.

Ah it looks to be aws-iso (c2s.ic.gov, top secret) and aws-iso-b (sc2s.sgov.gov, secret)?

So, just to clarify: if a "customer" who happens to employ tens of thousands of people also employs non-US citizens (such as the DoD's foreign national IT contractors), then non-US citizens would have access to GovCloud.

Secret region is not a part of govcloud.

Reply on news.ycombinator.com