We used to call this "NSL-proof". If your provider is architected to be NSL-proof, then the warrant has to get served to you.
This is now possible to achieve in AWS, for example.
This is now possible to achieve in AWS, for example.
https://aws.amazon.com/about-aws/whats-new/2022/11/aws-kms-e...