If complying with the GDPR was that easy an entire industry wouldn't be needed.

Use of AWS availability zones as it applies to Article 5?

https://gdpr-info.eu/chapter-5/