03-08 Data Residency

Last updated Aug 17, 2023 Edit Source

The physical or geographic location of where an organization or cloud resources reside.

A regulatory compliance (legal requirement) by a government or organization that describes where data and cloud resources are allowed to reside

Data Sovereignty is the jurisdictional control or legal authority that can be asserted over data because its physical location is within jurisdictional boundaries.

For workloads that need to meet compliance boundaries strictly defining
the data residency of data and cloud resources in AWS you can use:

#aws-service

AWS Config is a Policy as Code service. You can create rules to continuous check AWS resources configuration. If they deviate from your expectations you are alerted or AWS Config can in some cases auto-remediate.

#aws-service

AWS Outposts is physical rack of servers that you can put in your data center. Your data will reside whenever the Outpost Physically resides

#aws-service

IAM Policies can be written to explicitly deny access to specific AWS Regions.

• A Service Control Policy (SCP) are permissions applied organization wide.