AWS Community Day NL 2026

23 September · Utrecht · Main Stage · 14:10 · 18 min

AWS European Sovereign Cloud:
A Builder's Guide

Decision framework first — then what breaks in migration

Martin Mueller · AWS Community Builder · martinmueller.dev

Spine

Start with the question procurement asks

Is eu-central-1 enough — or do you need partition aws-eusc?

  • ESC GA Jan 2026 · region eusc-de-east-1 (Brandenburg)
  • SCHUFA, ITZBund, SAP on it — but most builders still on standard AWS
  • Wrong answer costs months; right answer is workload-specific

Decision framework

Three buckets

1 · eu-central-1

EU residency enough · full catalog · most customers

2 · ESC workloads

Sovereign partition required · hybrid phased migration

3 · Full sovereign stack

ESC + on-prem / national cloud — deliberate, rare

Regulation → bucket

Four frameworks, one architecture question

RegulationTypical pushOften lands in
NIS2Critical entities, supply chainBucket 1 or 2
DORAFinancial ICT resilienceBucket 2
GDPRResidency & processorsBucket 1
EU AI ActHigh-risk AI + data govBucket 1 or 2

ESC enables Bucket 2 — it does not auto-satisfy any regulation alone.

Context

What ESC adds beyond an EU region

aws vs aws-eusc

Data residency ≠ sovereign partition · EU-resident operations · ~90 services at GA

For builders

What breaks in migration

  • IAM — new identities, no 1:1 copy
  • ARNs — partition aws-eusc
  • Route 53 — common pain point
  • Billing — partition-scoped
  • CI/CD — separate creds/pipelines
  • Services — verify matrix first

CDK migration

Concrete steps · pre-recorded demo

Migration flow
  1. Region → eusc-de-east-1 · partition-aware ARNs
  2. Fix Route 53 · redeploy pilot stack

▶ Embedded demo clip here (shared laptop rule)

Honest take

CLOUD Act — ~3 min

  • ESC addresses
  • Isolated EU infra · EU-only ops · EU governance
  • Still your job
  • Contracts · support paths · data classification

eu-central-1 = EU hosting, partition still aws.

Close the loop

Takeaway: pick your bucket, then migrate

  • Bucket 1 — stop here; eu-central-1 is fine
  • Bucket 2 — readiness → landing zone → pilot → hybrid rollout
  • Bucket 3 — architecture review, not a feature flag

martinmueller.dev/aws-esc · office@martinmueller.dev

Questions?

Slides: mmuller88.github.io/presentations/aws-community-day-nl-2026/