AWS said this week it is the first cloud provider approved to handle NATO RESTRICTED information across all 32 member states, and the approval came from an EU government’s security service. Spain’s National Cryptographic Center evaluated Amazon against NATO’s D32 security directive and signed off, which means any AWS region located inside a NATO member country- and Amazon has 15 of them, with seven in mainland Europe alone- can now host classified NATO workloads without each government running its own accreditation from scratch. NATO’s communications and information agency framed it as removing time and cost for defense and public-sector customers that want to move to the commercial cloud. That’s a real, useful thing to have solved. It’s also strange to watch this happen in the same month European officials are still arguing about whether their own governments should be allowed to do exactly this.

European AI sovereignty was the conversation nobody at last month’s TechBBQ conference in Copenhagen could stay away from, on stage and off it, and the argument at the center of it, whether Europe can resist outside power over the infrastructure it depends on, is precisely the question a NATO-wide classified-cloud approval answers before Brussels finishes debating it. Officials from several member states, mostly in the east and the Nordics, are reportedly pushing back internally on the European Commission’s own proposed Cloud and AI Development Act, specifically the part that would force sensitive public-sector workloads onto EU-only cloud tiers. Their stated worry is that walling off NATO-adjacent workloads from US hyperscaler infrastructure complicates alliance interoperability and cuts allied militaries off from AI capability they still need. AWS getting a NATO RESTRICTED green light this week turns that worry into an actual decision rather than a hypothetical one.

The jurisdictional problem underneath this doesn’t go away just because the workload is classified rather than commercial. The US CLOUD Act lets American law enforcement compel a US-headquartered company to hand over data stored anywhere on earth, and that obligation attaches to the corporate entity, not to which physical building the servers sit in. A NATO RESTRICTED workload sitting in an AWS region in Germany or Poland is still, legally, sitting inside a company Washington can reach through its own courts. The European Data Protection Board has flagged this collision for years without resolving it, because it isn’t a misconfiguration anyone can patch; it’s two legal systems claiming the same data. Approving AWS for the alliance’s most sensitive commercial-cloud tier doesn’t make that tension disappear. It just moves it from a debate happening in Brussels conference rooms into production, running underneath actual defense infrastructure across 32 countries.

I don’t think NATO or Spain’s cryptographic authority got this wrong on the merits. A pre-assessed baseline that lets a smaller member state skip years of redundant accreditation work is a genuine efficiency gain, and AWS has real, audited security infrastructure behind the claim. InfoWorld’s reporting on the internal EU pushback this week put it plainly: officials worry the sovereignty rules Brussels is writing for itself outrun what its own governments are actually prepared to give up. NATO just gave a concrete answer to that question for the alliance’s classified tier, and the answer was convenience over the sovereignty framing, not the other way around.

I wrote a couple of weeks ago that everyone’s definition of sovereignty conveniently excludes whichever dependency they’ve already decided to live with, in that case Mistral leaning on Samsung and ASML capital while still calling itself Europe’s sovereign AI champion. NATO’s classified cloud just extended the same logic one tier further. The gap between the sovereignty pitch and the sovereignty that actually gets funded has been the same gap all year, whether the customer is an insurer routing policyholder health data through Microsoft’s semantic index or now an alliance routing RESTRICTED-level defense data through Amazon’s regions. The infrastructure decision always lands before the policy debate finishes, and this week it landed on the side that treats who can host this fastest as more urgent than whose jurisdiction actually holds it.

Sources