Enforcing data sovereignty policies in a cloud environment

A system comprising:

• one or more processors;
• and
• a computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to:
• receive, by a cloud provider, device security data corresponding to a plurality of nodes associated with the cloud provider, wherein the device security data includes data that corresponds to a respective node of the plurality of nodes, and wherein the data that corresponds to the respective node comprises a deployment domain identity attribute identifying a physical location of the respective node;
• create a data sovereignty policy for one or more customers of the cloud provider, the data sovereignty policy specifying that data associated with a policy of a government entity be stored on nodes located within a geographic area associated with the government entity;
• based on the device security data, verify those of the plurality of nodes that comply with the data sovereignty policy;
• and
• store the data associated with the policy of the government entity on those of the plurality of nodes verified to comply with the data sovereignty policy.

A non-transitory computer-readable storage medium comprising:

• instructions stored therein which, when executed by one or more processors, cause the one or more processors to:
• receive, by a cloud provider, device security data corresponding to a plurality of nodes associated with the cloud provider, wherein the device security data includes data that corresponds to a respective node of the plurality of nodes, and wherein the data that corresponds to the respective node comprises a deployment domain identity attribute identifying a physical location of the respective node;
• create a data sovereignty policy for one or more customers of the cloud provider, the data sovereignty policy specifying that data associated with a policy of a government entity be stored on nodes located within a geographic area associated with the government entity;
• based on the device security data, verify those of the plurality of nodes that comply with the data sovereignty policy;
• and
• store the data associated with the policy of the government entity on those of the plurality of nodes verified to comply with the data sovereignty policy.