Doesn't the CLOUD Act state that companies operating under US jurisdiction are legally required to hand over data outside US borders if the US Government was to ask for it?

https://aws.amazon.com/compliance/cloud-act/