Responsibility is on the AWS customer to abide by data sovereignty laws that may apply to them.