[btbuilder]

I'm pretty sure Amazon built an isolated region specifically for sensitive government workloads. I don't think public cloud security or regulatory compliance is a given even though the workloads you talk about seem fine for it.

Here it is: https://aws.amazon.com/govcloud-us/

[zrail]

As I understand it there are actually two Us government AWS clouds. GovCloud is for ITAR-regulated stuff that can still connect to the public internet (non-classified or confidential). The CIA stuff is hosted in a separate airgapped facility (called C2S) for the US Intelligence Community with connections to various airgapped networks. One can get their software listed in the marketplace for either or both, but to get listed in the latter you have to do a bunch of extra work.

http://fortune.com/2015/06/29/intelligence-community-loves-i...