AWS Secures NATO Approval for RESTRICTED Workloads
Amazon Web Services is the first cloud provider approved for use by all NATO member nations for NATO RESTRICTED workloads. This authorization establishes a standardized security path, allowing allied nations to host sensitive defense systems in the public cloud.[1][2]
To secure the approval, AWS documented its compliance against NATO D32, the technical directive governing how RESTRICTED information is handled in public cloud environments. Spain's National Cryptographic Centre evaluated these capabilities, and the approval itself is built on the AWS Trusted Secure Enclave - Sensitive Edition.[3][4][5]
Under NATO rules, the accreditation process is delegated to a member nation or the NATO Communications & Information Agency acting as a host nation. Dylan Browne of the NCIA noted that adopting commercial technology is key to building a more resilient and agile Alliance.[6][7]
Allies can deploy these workloads across 15 AWS Regions located in NATO member nations, with 7 located in mainland Europe. By inheriting this pre-assessed security baseline, member nations can reduce their own compliance and accreditation costs.[8][2]
Key takeaways
- The approval process involved compliance documentation against NATO's D32 technical directive, evaluated by Spain's National Cryptographic Centre. 1 source
- NATO members can now utilize 15 AWS Regions located within member nations, including seven in mainland Europe, to host NR-capable systems. 1 source
- The accreditation provides a common security baseline, allowing allies to jump-start their own national accreditation processes for AWS services. 1 source
- Dylan Browne of the NCIA noted that the approval is critical for building a more resilient and agile Alliance by enabling the secure adoption of commercial technology. 1 source
- Defense and national security customers should consult their AWS account teams to understand how the AWS Trusted Secure Enclave - Sensitive Edition applies to their specific NR use cases. 1 source
Notable quotes
“This first-of-its-kind approval is the culmination of a sustained, multi-year effort.”
What’s unresolved
- Specific timelines for individual member nations to complete their national accreditation processes remain dependent on local authorities.
Citations
- [1] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations Amazon Web Services is the first cloud provider approved for use by all NATO member nations for NATO RESTRICTED workloads. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP
- [2] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations NATO members and partners can inherit a common, pre-assessed security baseline from AWS to reduce compliance costs. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP
- [3] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations AWS documented its compliance against NATO D32, the technical directive for handling NR information in the public cloud. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP
- [4] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations Spain's National Cryptographic Centre evaluated AWS capabilities as part of the NATO RESTRICTED approval process. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP
- [5] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations The AWS Trusted Secure Enclave - Sensitive Edition serves as the foundation for the NATO RESTRICTED approval. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP
- [6] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations NATO delegates the NR accreditation process to a NATO member nation or the NATO Communications & Information Agency as a host nation. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP
- [7] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations Dylan Browne of the NCIA states that commercial technology is key to building a more resilient and agile Alliance. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP
- [8] AWS becomes first cloud provider approved for NATO RESTRICTED workloads across all member nations AWS currently operates 15 Regions in NATO member nations, with seven located in mainland Europe. Manifest ID 1790115696962622042 - Amazon Corporate Blog - interrogate via MCP