Title

AWS re:Invent 2022 - Navigating sovereignty and data protection with AWS (WPS203)

Summary

Alex Holmes, a senior manager at AWS, and Paul Ahlgren, a principal security strategist, discuss data protection and digital sovereignty.
AWS's Digital Sovereignty Pledge was announced, expanding the scope of the session beyond the EU to include broader topics.
The speakers define digital sovereignty and data protection, emphasizing customer control over data location, access, and encryption.
AWS's approach is "sovereign by design," aiming to provide customers with control without sacrificing the benefits of the cloud.
The shared responsibility model is highlighted, where AWS secures the cloud infrastructure, but customers are responsible for securing their data.
AWS provides tools and certifications to help customers with compliance and data protection.
The Nitro platform is discussed as a key component in ensuring AWS cannot access customer data.
AWS's global infrastructure allows customers to control where their data is stored and processed.
The session concludes with resources for further reading on data protection and an invitation for feedback on AWS's efforts in digital sovereignty.

AWS's Digital Sovereignty Pledge is a commitment to providing customers with control over their data while still benefiting from cloud services.
The shared responsibility model is crucial for understanding the division of security and compliance duties between AWS and its customers.
AWS emphasizes the importance of encryption and offers various key management solutions to ensure data security.
The Nitro platform is a significant innovation that prevents AWS from accessing customer data on the compute layer, enhancing sovereignty and security.
AWS's global infrastructure and control tower features enable customers to maintain data residency and comply with local regulations.
AWS is actively working to expand its services to meet and exceed GDPR requirements, as evidenced by the CISPE certification of 100 AWS services.
AWS encourages a collaborative approach to security and compliance, with a large community of partners and programs like Authority to Operate to assist customers.
AWS provides extensive documentation and resources to help customers navigate data protection and compliance challenges.