AWS European Sovereign Cloud (aws-esc)
This page describes the Landing Zone catalogue aws-esc as shipped with SWAO: the provider and its sovereignty model, the regions with their residency and certifications, how the catalogue is refreshed and how to use it as a target.
Provider and sovereignty model
The AWS European Sovereign Cloud is a separate AWS partition located in the EU and operated by AWS legal entities established in the EU, independent of the global AWS regions. The catalogue holds its region eusc-de-east-1 in Germany and is generated from the same AWS SDK endpoint data as aws, so its service list can be compared directly with AWS Frankfurt (eu-central-1).
Sovereignty model: the catalogue records an EU-entity operator, no extraterritorial exposure and the certifications BSI C5 and ISO/IEC 27001. A framework such as BSI C5 can therefore be satisfied by this region, provided the required services are available.
Summary
| Property | Value |
|---|---|
| Provider ID (for targets) | aws-esc |
| Catalogue name | AWS European Sovereign Cloud service catalogue |
| Regions | 1 |
| Distinct services | 113 |
| Operator jurisdiction | EU entity (EU-entity) |
| Extraterritorial exposure | none recorded |
| Certifications recorded | BSI_C5 (1 region), ISO_27001 (1 region) |
| Refresh mode | Automated: swao lz catalogue update --provider aws-esc (Consultant and above) reads AWS SDK endpoint data (botocore) |
| Confidence | high |
| Last updated | 2026-09-04 |
| Schema version | 0.1 |
Default region for Europe | aws-esc:eusc-de-east-1 |
Default region for Germany | aws-esc:eusc-de-east-1 |
| Catalogue file in the public repository | lz-catalogues/aws-esc.json |
Regions
All 1 regions of the catalogue:
| Region ID | Name | Residency country | Operator jurisdiction | Extraterritorial exposure | Certifications | Services | Geographies |
|---|---|---|---|---|---|---|---|
eusc-de-east-1 | AWS European Sovereign Cloud (Germany) | Germany (DE) | EU entity (EU-entity) | none | BSI_C5, ISO_27001 | 113 | germany, eu, europe |
Certifications
| Certification | Regions holding it |
|---|---|
BSI_C5 | eusc-de-east-1 |
ISO_27001 | eusc-de-east-1 |
Certifications are compared without regard to case or separators; C5 and BSI_C5 count as the same BSI C5 attestation. They are facts recorded in the catalogue, not verified by SWAO.
Using this catalogue
Name a region of this catalogue as a target of the Landing Zone Catalog Assessment, on the command line or in the app .swao.yml:
swao lz catalogue show aws-esc
swao assess --type landing-zone-catalog --app <app-id> --lz-cat-targets "aws-esc:eusc-de-east-1"assessment:
landing_zone:
targets:
- aws-esc:eusc-de-east-1A geography such as aws-esc:Europe instead of a region ID resolves to the default region shown in the summary.
To correct or extend the facts for one engagement, copy the catalogue into the workspace with swao lz catalogue copy aws-esc and edit wsp/inputs/catalogs/lz-catalogues/aws-esc/index.json; the workspace copy then takes precedence. See Adapting LZ catalogues.
Catalogue facts are point-in-time and are not legal advice. Check the date and confidence above and review the provider's contracts before you rely on a verdict.