AWS has a lot of resources that are not per region.

The GDPR line is about improving our least privilege access story. There's a lot more to GDPR than that, though