"Obfuscating commands" isn't a thing. EU employees know if they are retrieving data or not. And they don't blindly run commands like they're dummies or something.

And if they fly American employees over, what makes you think they'd be let in the building, or under what credentials do you think they'd be accessing the system? Legally speaking, those Americans are simply from a partner company. Just because you're doing business with a partner company doesn't mean you let them into your building.

The point is that AWS is intentionally making it so they don't have options.

So yes, US law lets it go. The law is limited in terms of what it can affect outside US borders. If the EU doesn't want to cooperate, and the US isn't willing to engage in sanctions or war against the EU, then yeah the US is out of options.

It will use the same software infrastructure and physical hardware that’s used in the rest of AWS. Hooped confident are you that he partitions are resilient enough ?

Can engineers be dual eu/us citizens ? AWS uses a lot of ex military and US citizens with government clearance levels for their US govcloud. I don’t see an equivalent here

Amazon can promise the moon and the sky but if I wanted digital sovereignty within the eu it would not be with Amazon any more than I would trust tencent

There must already be protocols in place that prevent any random Amazon employee from getting access to sensitive data (like, the folks in the warehouses can’t just walk in to the AWS datacenters, I assume).

That’s who those US employees would be, from the point of view of the EU branch… no reason to assume they’d let them in. Flying people over to do crimes seems like a risky idea.