After all, at a massive scale, having access to industry standard tools for provisionning makes sense: give $$$ to AMZN for their software stack and hw integration cost probably less than building your own...?
AWS GovCloud exist solely for this purpose: http://docs.aws.amazon.com/govcloud-us/latest/UserGuide/what...
A really private AV zone is just a step away: put gov guards at the entrance of DCs, replace all AWS teams by in-house personnel (or have AWS teams sworned in at the relevant level...?)
http://www.theatlantic.com/technology/archive/2014/07/the-de...
> Hard token multi-factor authentication (MFA) devices are not available in the AWS GovCloud (US) region.
The 600 million contract described here is not GovCloud: http://www.informationweek.com/cloud/infrastructure-as-a-ser...?