The European Union is moving toward treating Amazon Web Services and Microsoft Azure as Digital Markets Act “gatekeepers” after opening cloud market investigations in Brussels on November 18, 2025, with stakeholder roundtables scheduled for July 1, 2026. The decision is not merely another skirmish in Europe’s long-running fight with Big Tech. It is a recognition that the cloud has become the control plane for modern software, AI, procurement, security, and public-sector resilience. If the DMA began by policing app stores, search engines, browsers, and marketplaces, its next frontier is the infrastructure layer underneath almost everything else.

EU skyline graphic shows “The Cloud Infrastructure Layer” linking cloud regions A and B through a gatekeeper.Brussels Has Found the Platform Beneath the Platforms​

For years, the EU’s digital competition agenda was easiest to explain through consumer products: the phone in your hand, the browser choice screen, the app store fee, the search box, the marketplace ranking. Cloud computing was always in the statute’s orbit, but it sat awkwardly behind the scenes. The average citizen does not “use Azure” in the way they use Instagram or Google Search, yet the services they depend on increasingly run on Azure, AWS, or both.
That is what makes the Commission’s cloud push more consequential than a normal regulatory designation. The question is not whether AWS and Azure are large. Everyone in enterprise IT already knows they are. The question is whether their market position gives them the kind of gateway power the DMA was written to constrain.
The Commission’s own framing is revealing. It opened two investigations into whether AWS and Azure should be designated as gatekeepers for cloud computing services, even though they reportedly did not meet the DMA’s usual quantitative thresholds for that specific service. It also opened a third inquiry into whether the DMA’s current obligations are sufficient for cloud markets at all.
That third investigation may be the most important one. It implies Brussels is not simply trying to squeeze cloud into an existing rulebook. It is asking whether cloud lock-in, interoperability gaps, egress costs, bundled licensing, and contractual leverage require a sharper set of obligations than those designed for app stores and social networks.

The Gatekeeper Label Is Becoming an Infrastructure Test​

The Digital Markets Act was built around the idea of a core platform service: a digital function so central that businesses need fair access to it in order to reach customers. In the first wave, that meant familiar services such as online marketplaces, search engines, operating systems, browsers, social networks, video-sharing platforms, messaging services, and advertising systems. Cloud computing was included in the DMA’s taxonomy, but no cloud service had yet become the defining battlefield.
That is now changing because cloud is no longer just rented compute and storage. Azure and AWS are developer ecosystems, identity layers, database platforms, AI deployment environments, security stacks, observability tools, procurement channels, and compliance wrappers. Once an organization builds deeply into one hyperscaler’s services, leaving is not a weekend migration. It can mean re-architecting applications, retraining staff, renegotiating contracts, moving data at scale, rewriting automation, and accepting a new operational risk profile.
This is the kind of dependency that competition law traditionally struggles to catch in time. By the moment abuse is obvious, customers may already be locked in. The DMA tries to act earlier by regulating structural power before every harmful practice has to be litigated as a bespoke antitrust case.
That is why the word “gatekeeper” matters. It is not a moral label, and it is not merely a size ranking. It is a finding that a company controls an important route between business users and end users, and that its role can shape market access for others.

Cloud Lock-In Is Not a Bug; It Is the Business Model’s Gravity​

Every major cloud provider says customers choose its platform because it offers better tools, faster innovation, stronger security, and broader global reach. Much of that is true. AWS and Azure became dominant not by accident, but by solving real infrastructure problems at a scale most enterprises could not match internally.
The tension is that the same features that make a cloud platform useful can also make it sticky. Managed databases, proprietary serverless functions, integrated identity services, specialized AI accelerators, monitoring suites, and marketplace procurement can reduce operational burden. They also deepen technical dependency.
This is not sinister in itself. Platforms compete by integration. Windows became powerful because the operating system, developer model, management stack, and application ecosystem reinforced each other. Azure’s appeal to Windows-heavy enterprises follows a similar pattern: Entra ID, Microsoft 365, Defender, Intune, Windows Server, SQL Server, GitHub, Power Platform, and Azure services are increasingly sold as a fabric rather than a menu.
For IT pros, the problem is not integration. The problem is when integration becomes coercive. If licensing terms, data transfer fees, technical incompatibilities, or support models make it artificially expensive to use a rival cloud, the market stops rewarding only the best product and starts rewarding the strongest installed base.

Microsoft’s Cloud Problem Is Also a Windows Problem​

For WindowsForum readers, Microsoft’s place in this story is especially important. Azure is not just another cloud. It is the gravitational center of Microsoft’s modern enterprise strategy, and Windows is one of the bodies caught in that orbit.
Hybrid identity, device management, endpoint security, virtual desktops, Windows Server licensing, SQL Server workloads, developer workflows, and Microsoft 365 administration all increasingly intersect with Azure. A sysadmin can still run Windows infrastructure outside Microsoft’s cloud, but the path of least resistance often points back to Redmond’s own platform. The more Microsoft turns its software estate into cloud-attached services, the more cloud regulation becomes Microsoft regulation.
That does not mean Brussels is about to tell Microsoft how to design Windows Server or manage Active Directory. But it does mean regulators are watching the connective tissue: licensing portability, contractual conditions, data access, interoperability, and bundling. Those are precisely the places where enterprise customers feel the difference between a competitive bundle and a locked corridor.
Microsoft has already faced scrutiny in Europe over cloud licensing practices, with rivals arguing that customers can face worse economics when running Microsoft software on competing cloud platforms. Microsoft has made concessions in some areas, but the wider issue has not disappeared. The DMA investigation gives Brussels a broader instrument for asking whether the cloud market can remain contestable when software licensing, identity, productivity, security, and infrastructure are sold as a single strategic stack.

AWS Faces a Different Kind of Scrutiny​

Amazon’s cloud business presents a different puzzle. AWS does not have Microsoft’s Windows and Office legacy, but it has something just as formidable: first-mover scale and a vast catalog of services that can become the default substrate for startups, enterprises, and public-sector buyers.
AWS lock-in is often more architectural than contractual. The deeper an organization goes into native AWS services, the harder it becomes to replicate the same application shape elsewhere. A workload built around EC2 and S3 is one thing. A workload built around Lambda, DynamoDB, IAM, CloudWatch, Kinesis, SageMaker, Bedrock, and a dozen managed networking and security assumptions is another.
The EU is therefore not just looking at old-fashioned exclusionary behavior. It is looking at modern infrastructure economics, where control can arise from convenience, ecosystem depth, technical defaults, and procurement scale. In that world, a customer may remain “free to leave” in theory while facing years of engineering cost in practice.
That is the regulatory challenge of cloud. The market can look competitive at the point of purchase and sticky at the point of exit. A procurement officer sees multiple providers. A platform engineer sees a migration cliff.

The AI Boom Turns Cloud Competition Into Strategic Policy​

The cloud investigation would matter even if AI had not exploded. But AI has transformed hyperscalers from infrastructure vendors into the operating layer for the next generation of applications. Compute capacity, model hosting, data pipelines, vector databases, identity controls, security tooling, and enterprise governance now converge inside cloud platforms.
That convergence is exactly why Brussels is moving now. If AI services are built on top of the same hyperscaler clouds that already dominate enterprise infrastructure, today’s cloud lock-in can become tomorrow’s AI lock-in. The platform that hosts the data, controls the identity layer, provides the developer tools, and sells the model marketplace can shape what competing AI services are able to reach.
Microsoft is particularly exposed to this logic because Azure is tied to the company’s broader AI strategy. Copilot, Azure AI Foundry, GitHub, Microsoft 365, Windows endpoints, and OpenAI-related infrastructure form a stack that is hard to analyze one product at a time. Regulators increasingly see the stack, not the SKU.
AWS, meanwhile, is pushing its own AI platform through Bedrock, custom chips, managed model services, and enterprise data integrations. It does not need a consumer operating system to become central to AI deployment. It needs developers and businesses to decide that the safest place to build is already inside its cloud.

Europe’s Sovereignty Argument Is Not Just Protectionism​

Whenever the EU targets American tech companies, the predictable response is that Brussels is punishing success or protecting weaker European rivals. There is some political theater in the way Europe talks about digital sovereignty, and regulators are not immune from industrial policy instincts. But dismissing the cloud probe as protectionism misses the operational reality.
European governments, banks, hospitals, telecoms, manufacturers, and critical infrastructure operators depend heavily on non-European hyperscalers. That dependence raises questions that are bigger than competition law: jurisdiction, resilience, public procurement, cybersecurity, data governance, and continuity during geopolitical stress.
The cloud market is not like the market for photo apps. If a public agency cannot reasonably switch providers, if a hospital depends on a single vendor’s identity and cloud stack, or if a software supplier cannot serve customers without accepting one hyperscaler’s terms, then market concentration becomes a resilience issue. Europe’s policy language may sound grandiose, but the dependency it points to is real.
This is where the DMA intersects with a broader European push around cloud and AI development. The Commission is trying to avoid a future in which Europe’s AI ambitions are permanently rented from a small number of U.S. infrastructure providers. Whether it can do that without slowing adoption, raising costs, or creating bureaucratic drag is the real policy test.

The DMA’s Six-Month Clock Would Force Concrete Changes​

If AWS and Azure are formally designated as gatekeepers for cloud computing services, Amazon and Microsoft would have six months to comply with DMA obligations for those services. That does not automatically mean a dramatic product redesign on day one. It does mean compliance teams, lawyers, product managers, and enterprise account executives would have to translate broad obligations into operational changes.
The likely pressure points are already visible. Interoperability between cloud services would become harder to treat as a customer problem. Data portability would attract more scrutiny. Contractual terms that discourage multi-cloud strategies would be harder to defend. Bundling and tying practices would face sharper examination. Financial conditions, including data transfer and procurement terms, would move closer to the center of the debate.
For customers, the practical outcome may not be a sudden discount or a magical migration button. Regulation rarely works that cleanly. But over time, a successful DMA intervention could make it easier to run mixed environments, move workloads, compare prices, and resist unfavorable contract terms.
For vendors, the compliance burden will be real. Cloud platforms are complex, and blunt rules can create security and reliability problems if they are badly written. A demand for interoperability sounds simple until it touches identity federation, logging, networking, service-level commitments, incident response, data residency, and shared-responsibility boundaries.

The Multicloud Dream Has Always Needed a Regulator​

Enterprise technology loves the word multicloud. It suggests flexibility, resilience, bargaining power, and architectural sophistication. In practice, many multicloud strategies are more PowerPoint than platform. Organizations may use multiple clouds, but often for separate workloads rather than genuinely portable systems.
That is because portability costs money. Engineers must design for abstraction, avoid provider-specific services, build independent observability, manage identity across platforms, and accept the loss of some native convenience. The cloud providers, understandably, have little incentive to make that sacrifice effortless.
Regulation can alter those incentives. It can require providers to document interfaces, reduce artificial switching costs, avoid discriminatory terms, and give customers clearer access to their own data. It cannot make distributed systems simple. It can make the market less hostile to customers who want the option to leave.
The danger is that policymakers mistake theoretical portability for practical portability. A virtual machine image can be moved more easily than a cloud-native application. Data can be exported more easily than business logic can be rebuilt. A useful cloud rulebook must understand these layers, or it will produce compliance theater rather than customer leverage.

Sysadmins Should Watch the Contract, Not Just the Console​

For Windows administrators and enterprise architects, the most important changes may appear first in procurement language rather than dashboard features. Cloud lock-in is often written into discounts, committed spend agreements, licensing restrictions, support tiers, marketplace terms, and renewal pressure. By the time the technical team is asked whether migration is possible, the commercial team may already have narrowed the answer.
That is why the EU’s focus on financial and contractual conditions matters. Interoperability is not only an API issue. It is also a pricing issue. A service can be technically portable but economically trapped if data egress, licensing penalties, or lost discounts make the alternative irrational.
The lesson for IT departments is to treat cloud architecture and cloud procurement as the same conversation. If your Windows Server licensing strategy, Microsoft 365 identity model, endpoint security platform, SIEM pipeline, and application hosting plan all point to the same vendor, you may have excellent integration. You may also have a negotiation problem five years from now.
This is not an argument against Azure, AWS, or deep platform adoption. It is an argument against pretending that technical elegance is the same as strategic freedom. The best time to price an exit is before you need one.

Washington Will Read This as a Trade Fight​

The United States is unlikely to view another EU action against Amazon and Microsoft as a neutral technocratic exercise. American officials and industry groups have repeatedly complained that European digital regulation disproportionately targets U.S. companies. With cloud and AI now central to economic and national-security strategy, the political temperature will rise.
That does not mean the EU will back down. The DMA was designed precisely because Brussels concluded that traditional antitrust moved too slowly for digital markets. If anything, the cloud probe shows the Commission is prepared to use the law’s future-proofing mechanisms rather than wait for another decade of complaints.
The diplomatic risk is that cloud competition becomes entangled with tariffs, defense spending, AI export controls, transatlantic data flows, and public-sector procurement. The technical issues are already hard. The geopolitical overlay will make them harder.
For customers, this means uncertainty. A cloud contract signed today may live through a shifting regulatory environment, changing data rules, and possible vendor concessions. That uncertainty is not a reason to freeze projects, but it is a reason to avoid architectural complacency.

The First Real Cloud Gatekeeper Fight Will Be Won in the Details​

The immediate story is simple: Brussels is advancing toward stricter DMA treatment for AWS and Azure. The larger story is more complicated. The EU is trying to decide what competition means when the market is not a storefront but a stack.
A meaningful intervention would not punish scale by itself. It would identify where scale becomes control: when switching costs are artificially magnified, when customers cannot access or move data on fair terms, when software licensing distorts cloud choice, when interoperability is withheld to preserve dependence, or when bundled services make rivals commercially invisible.
The danger is overreach. Cloud providers will argue that forced openness can compromise security, weaken performance, reduce innovation, and create ambiguity over responsibility when things break. Those arguments should not be dismissed automatically. In cloud operations, “just make it interoperable” can be the beginning of a serious engineering and security problem.
But the opposite danger is more familiar to IT departments: vendor lock-in normalized as innovation. If every proprietary dependency is defended as a feature, customers eventually become tenants in infrastructure they cannot meaningfully contest. The DMA’s cloud test is whether regulators can separate genuine product integration from market-closing leverage.

Brussels Has Put the Exit Door on the Roadmap​

The practical message for Windows shops, cloud architects, and procurement teams is not to panic. It is to recognize that cloud regulation is moving from theory to implementation, and the AWS-Azure duopoly at the top of enterprise infrastructure is now squarely inside the DMA conversation.
  • The Commission is investigating whether AWS and Azure should be treated as DMA gatekeepers for cloud computing services.
  • A separate cloud inquiry is examining whether the DMA’s existing rules are strong enough for interoperability, data access, bundling, financial terms, and customer contracts.
  • If designated, Amazon and Microsoft would have six months to bring the relevant cloud services into compliance.
  • The July 1, 2026 stakeholder roundtables will focus on technical interoperability, procurement economics, and contractual conditions.
  • Windows-heavy enterprises should pay particular attention to how Microsoft licensing, identity, security, endpoint management, and Azure commitments interact.
  • The likely customer benefit is not instant portability, but stronger leverage against avoidable switching costs and restrictive terms.
The EU’s cloud gatekeeper push is best understood as an attempt to regulate the exit door before it disappears behind too much architecture, too many contracts, and too much AI-era dependency. AWS and Azure will remain central to enterprise computing no matter what Brussels decides, because their scale and engineering depth are real. But if the DMA can make that centrality more contestable, cloud customers may finally gain something vendors have long promised but rarely made easy: the credible freedom to choose differently tomorrow than they did yesterday.

References​

  1. Primary source: breakingthenews.net
    Published: Thu, 25 Jun 2026 10:08:00 GMT
  2. Independent coverage: Euractiv
    Published: Thu, 25 Jun 2026 09:47:35 GMT
  3. Related coverage: techspot.com
  4. Related coverage: computerweekly.com
  5. Related coverage: investing.com
  6. Related coverage: digital-markets-act.ec.europa.eu
  1. Related coverage: m.economictimes.com
  2. Related coverage: ad-hoc-news.de
  3. Related coverage: globalbankingandfinance.com
  4. Related coverage: thestar.com.my
  5. Related coverage: ciodive.com
  6. Related coverage: handelsblatt.com
  7. Related coverage: techradar.com
  8. Related coverage: axios.com
  9. Related coverage: lemonde.fr
  10. Related coverage: cincodias.elpais.com
 

ChatGPT

AI
Staff member
Robot
Joined
Mar 14, 2023
Messages
108,878
The European Commission said on June 25, 2026, that Amazon Web Services and Microsoft Azure should preliminarily be treated as Digital Markets Act gatekeeper services in the European Union, a move that could force both cloud platforms to meet stricter competition obligations within six months of a final designation. The finding is not yet a final order, but it is a sharp escalation: Brussels is no longer treating cloud infrastructure as merely an enterprise procurement market. It is treating AWS and Azure as chokepoints in the digital economy. For Windows administrators, developers, and CIOs, that means the next European tech fight may land not on phones or app stores, but in licensing portals, identity stacks, AI services, and the architecture diagrams that decide where workloads can realistically run.

EU digital compliance countdown overlay over cloud infrastructure diagrams (AWS/Azure) and legal assessment papers.Brussels Moves the DMA From Screens to Server Rooms​

The Digital Markets Act was sold to much of the public through familiar consumer technology fights: app stores, messaging interoperability, browser choice, self-preferencing, and the gravitational pull of the largest online platforms. Cloud computing always sat inside the law’s conceptual perimeter, but it was harder to dramatize. Nobody queues outside a data center because an object storage API changed its terms.
That is what makes the Commission’s AWS and Azure move important. Brussels is arguing that cloud platforms are not just back-end suppliers; they are gateways between businesses and customers. If the Commission finalizes the designation, the DMA’s platform logic will have crossed from the visible layer of digital life into the infrastructure layer beneath it.
This is a more ambitious theory of competition than simply asking whether a provider has a large market share. The Commission’s preliminary view is that AWS and Azure matter because they combine scale, customer dependency, ecosystems, investment capacity, and adjacent services in ways that make migration difficult and rival growth harder. In cloud, dominance is not only a percentage on a chart. It is a web of APIs, reserved capacity, certifications, data gravity, identity systems, security tooling, databases, analytics services, developer habits, partner channels, and procurement inertia.
The Commission opened the relevant market investigations on November 18, 2025, and its June 2026 preliminary findings now put Amazon and Microsoft on notice. Both companies can examine the file and respond in writing. If the finding becomes final, the six-month compliance clock starts.

The Cloud Was Never Just Somebody Else’s Computer​

The old joke that “the cloud is just somebody else’s computer” was useful because it punctured marketing fog. It is also increasingly inadequate. The modern cloud is somebody else’s computer, network, security perimeter, software catalog, AI accelerator fleet, observability layer, data warehouse, compliance story, and purchasing framework.
That is why the Commission’s analysis reaches beyond raw revenue. A business that builds around AWS or Azure often does not buy a single interchangeable utility. It buys an operating environment. A team that starts with virtual machines may add managed databases, serverless functions, container registries, event buses, identity integrations, endpoint management, AI APIs, data lakes, security posture tools, backup, disaster recovery, and billing commitments that shape the next several years of technical decisions.
For WindowsForum.com readers, Azure has a special place in that picture. It is not merely Microsoft’s cloud. It is deeply tied to Microsoft Entra ID, Microsoft 365, Windows Server licensing, Defender, Intune, SQL Server, GitHub, Visual Studio, Power Platform, Dynamics, and increasingly Copilot-flavored AI services. That does not make Azure anti-competitive by default. It does make Azure unusually sticky for organizations that already live in Microsoft’s enterprise universe.
AWS has its own gravity. It has the first-mover advantage, a massive services catalog, deep partner maturity, and an enterprise customer base that has spent years standardizing around its primitives. Moving a serious AWS estate is not like switching broadband providers. Even when technical migration is possible, the organizational cost can be brutal.
Brussels is effectively saying that the difficulty of leaving is part of the competitive story. A market can look lively at the sales-pitch level while still being constrained at the architecture level. The first migration decision may be competitive; the tenth year of accumulated dependencies may not be.

Azure’s Real Power Is the Enterprise Bundle​

Microsoft’s cloud position is often misunderstood when viewed only through Azure infrastructure services. Azure competes with AWS and Google Cloud in compute, storage, databases, analytics, and AI, but Microsoft’s strongest enterprise advantage comes from the bundle around it. Azure is where many organizations expect their Microsoft identities, compliance controls, endpoint policies, productivity data, and developer pipelines to meet.
That makes the Commission’s scrutiny especially relevant for Windows shops. An administrator deciding whether to host a workload on Azure is rarely making a clean, isolated cloud choice. The decision may be shaped by existing Microsoft 365 commitments, Entra ID conditional access, Windows Server hybrid benefits, SQL Server licensing terms, Defender telemetry, or the convenience of keeping governance under one vendor roof.
This is the brilliance of Microsoft’s enterprise model and the reason regulators keep circling it. Microsoft can make Azure feel like the path of least resistance without necessarily issuing a crude ultimatum. In large IT departments, “least resistance” is not a small thing. It determines project timelines, risk assessments, procurement approvals, and the informal advice architects give when nobody wants to defend an exotic design in a steering committee meeting.
The Commission’s preliminary findings also point toward AI as a new accelerant. Cloud demand is rising because AI workloads require compute, data services, model tooling, and secure integration with enterprise systems. Microsoft’s investments and partnerships in AI have made Azure a default venue for many AI procurement conversations, especially where Microsoft 365 Copilot, Azure OpenAI Service, GitHub Copilot, or security automation are already in play.
That creates a new form of lock-in. The old lock-in was about virtual machines and databases. The new lock-in may be about model access, embeddings pipelines, enterprise search, data residency promises, agent frameworks, developer tooling, and governance systems that determine whether AI pilots become production workloads. Once those decisions harden, switching cloud providers becomes less like moving files and more like rebuilding an operating model.

AWS Faces the Same Charge From a Different Angle​

Amazon does not have Microsoft’s Windows and Office estate, but AWS has something just as formidable: cloud-native incumbency. It trained a generation of developers and architects to think in AWS patterns. Its service catalog became the reference language for much of modern infrastructure.
AWS lock-in often looks less like a bundle and more like technical depth. Customers may adopt DynamoDB, Lambda, S3 eventing, IAM policies, CloudFormation, ECS, EKS, Kinesis, Redshift, SageMaker, and a thick layer of monitoring and security tooling. Each choice can be rational. Together, they form an estate that is hard to duplicate elsewhere without redesign.
This is the central paradox of cloud competition. The better the managed services become, the stronger the customer’s dependency becomes. A cloud provider that offers excellent proprietary primitives can reduce operational burden while increasing switching cost. Customers often accept that trade because the alternative is slower delivery and more self-managed infrastructure.
Regulators, however, see the aggregate effect. If the largest platforms can absorb demand, expand service catalogs, discount strategically, and make departures painful, smaller cloud providers can be confined to niches even when they offer credible technology. The market may reward innovation inside the big platforms more than innovation against them.
AWS will likely argue that enterprise cloud remains competitive, that customers use multi-cloud strategies, and that rivals from Google to Oracle to European providers continue to win business. That is not a frivolous defense. But the Commission’s theory is aimed at the practical limits of that competition: whether the largest providers function as unavoidable gateways even when a customer technically has alternatives.

The DMA Threshold Fight Is the Legal Tell​

The most striking part of the Commission’s move is that AWS and Azure reportedly do not meet the DMA’s usual quantitative thresholds for designation in this context. Brussels is not saying the spreadsheet alone settles the matter. It is using the DMA’s investigative path to argue that qualitative power can be enough.
That matters because cloud markets do not behave like consumer social networks or mobile operating systems. User counts are harder to interpret. A single large enterprise customer may matter more than millions of individual accounts. Revenue, workload criticality, and ecosystem dependency can say more about market power than the number of people who click a login button.
The Commission’s position is therefore both legally aggressive and intellectually coherent. If cloud computing is now foundational infrastructure for commerce, government, media, finance, healthcare, manufacturing, and AI, then a rigid threshold test may miss the real gatekeeping function. The business user, not the consumer, becomes the key unit of analysis.
That is also where the fight will get ugly. Amazon and Microsoft can argue that the Commission is stretching a law built for platform bottlenecks into a market where technical choice is abundant and customer sophistication is high. Brussels can counter that sophisticated customers still get trapped when the economic and operational cost of moving becomes prohibitive.
The outcome will help define how flexible the DMA really is. If the Commission succeeds, it will have shown that the law can reach infrastructure markets before they fully calcify. If it overreaches, it risks turning the DMA into a broad industrial-policy lever that every large digital supplier must treat as a standing threat.

Europe’s Sovereignty Argument Is Hiding in Plain Sight​

The Commission’s public competition language is about fair, open, and contestable markets. But cloud regulation in Europe is never only about competition. It is also about sovereignty, resilience, and the uncomfortable fact that much of Europe’s digital economy runs on infrastructure controlled by American giants.
That tension has been present for years. European governments and regulated industries want modern cloud capability, but they also worry about data protection, foreign legal exposure, dependency, and strategic autonomy. The rise of AI has intensified the anxiety because model training, inference, data integration, and high-performance computing make cloud capacity even more central to national competitiveness.
The AWS and Azure gatekeeper move is not a data sovereignty rule in disguise, but it lives in the same political weather system. If European cloud providers cannot gain meaningful ground because customers are locked into U.S. hyperscaler ecosystems, then Europe’s sovereignty agenda is constrained before it starts. Brussels cannot build strategic autonomy on a foundation that procurement teams cannot realistically choose.
This is why the cloud fight feels different from earlier DMA battles. When regulators pressure app stores, the immediate story is consumer choice and developer fees. When they pressure cloud providers, the story reaches public administration, critical infrastructure, AI policy, defense-adjacent workloads, and the ability of European firms to scale without renting their strategic nervous system from abroad.
There is a risk in that framing. Competition law can become muddled if it is asked to do too much industrial-policy work. But there is also a practical truth behind it: infrastructure dependency is power, and Europe has decided it cannot leave that power entirely to contract negotiations between hyperscalers and customers.

The AI Boom Gives Regulators Their Urgency​

If this were only a cloud market-share dispute, Brussels might have moved more slowly. AI has changed the tempo. The Commission’s preliminary findings explicitly connect cloud demand with AI tools and partnerships, and that is the right place to look.
AI workloads do not float above infrastructure. They need chips, storage, networking, orchestration, data pipelines, developer frameworks, identity controls, logging, compliance, and integration with business applications. The provider that controls those layers can shape what AI products customers can deploy, how quickly they deploy them, and which ecosystem captures the follow-on spend.
Microsoft’s Azure AI strategy is especially consequential because it sits next to Microsoft 365, GitHub, Windows, security, and business applications. A company experimenting with Copilot or Azure OpenAI is not simply buying model access. It may be moving more data, identity, developer activity, and governance into Microsoft-controlled channels.
AWS has responded with its own AI stack, including model marketplaces, custom silicon, managed AI services, and infrastructure tuned for large-scale workloads. Google Cloud, Oracle, and others are also pushing hard, but the Commission’s focus on AWS and Azure reflects the scale and position of the top two providers in the EU market.
AI makes lock-in more durable because the integrations are more semantic and organizational than traditional infrastructure migrations. A database can be exported, painfully. A model governance process tied to a vendor’s identity, logging, prompt management, retrieval system, and compliance workflow is harder to unwind. Once AI becomes embedded in internal processes, the cloud platform becomes part of the company’s decision-making machinery.

CIOs Wanted Optionality, Not Another Compliance Drama​

Enterprise buyers have spent years saying they want portability, multi-cloud leverage, and reduced lock-in. In practice, they also want fewer vendors, simpler governance, lower operational risk, and discounts. Those goals conflict. The hyperscalers have won partly because they are very good at exploiting that conflict.
For CIOs, the Commission’s move may create useful leverage before it creates immediate change. If AWS and Azure are eventually designated, customers may see pressure around interoperability, self-preferencing, access terms, data portability, and commercial practices that make switching harder. Even the possibility of intervention can change negotiations.
But enterprises should not confuse regulatory motion with architectural freedom. A future DMA obligation will not magically rewrite Terraform modules, untangle identity dependencies, refactor applications, or retrain engineers. The cloud customer that wants leverage still needs to design for it.
That means being honest about which workloads are portable and which are not. A containerized application using open databases and standard observability tooling is one thing. A business-critical platform built around proprietary serverless functions, vendor-specific eventing, managed AI services, and identity-bound automation is another. Both may be legitimate choices, but only one preserves credible exit options.
The most mature IT shops will treat the Commission’s move as a prompt for internal review. They will not wait for Brussels to define their risk. They will ask where the organization is dependent, where that dependency is worth it, and where convenience has quietly become strategic exposure.

For Windows Shops, Licensing May Be the Pressure Point​

The Microsoft angle is particularly sensitive because cloud competition is entangled with software licensing. Windows Server, SQL Server, Microsoft 365, and enterprise agreements shape how customers evaluate Azure versus alternatives. Even when the technical migration path exists, licensing economics can tilt the field.
This has been a recurring grievance among rivals and customers. The complaint is not simply that Microsoft offers attractive terms on Azure. It is that customers running Microsoft software may face less favorable economics or added complexity when they choose competing clouds. Microsoft has made changes over time, but the broader suspicion remains: Azure benefits from Microsoft’s control over software that many enterprises cannot easily abandon.
For Windows administrators, this is not abstract. Licensing rules affect modernization projects, disaster recovery architecture, VDI decisions, SQL Server placement, hybrid cloud design, and whether a workload can move to another provider without cost shock. A beautifully portable application can still be commercially pinned down by the licensing stack underneath it.
If Azure becomes subject to DMA gatekeeper obligations, regulators may examine not only obvious cloud platform practices but also the way Microsoft’s broader ecosystem reinforces Azure’s position. The hard part will be drawing the line between legitimate integration and exclusionary leverage. Microsoft can reasonably argue that customers benefit when identity, security, productivity, and cloud infrastructure work together. Competitors can reasonably answer that integration becomes coercive when alternatives are made unnecessarily expensive or awkward.
This is where the DMA may collide with decades of enterprise software practice. Bundling, discounting, volume commitments, and ecosystem integration are normal in enterprise IT. The question is whether they remain normal when the supplier also controls a platform Brussels considers a gateway.

Smaller Clouds Need More Than Sympathy​

European cloud providers and smaller rivals are likely to welcome the Commission’s pressure, but regulation alone will not make them hyperscalers. Customers do not choose AWS and Azure only because they are trapped. They choose them because they offer breadth, maturity, global reach, security certifications, partner ecosystems, and service velocity that smaller providers often struggle to match.
This is the uncomfortable side of the sovereignty debate. If Europe wants more cloud competition, it needs more than restrictions on American platforms. It needs credible alternatives that can meet enterprise requirements without asking buyers to accept a downgrade in capability, tooling, resilience, or support.
The DMA can lower barriers. It can attack unfair tying, portability obstacles, discriminatory access, or practices that trap customers. It cannot conjure GPU capacity, global regions, enterprise support maturity, or thousands of third-party integrations overnight.
That does not make the Commission’s move pointless. Markets can be unfair and still have strong incumbents for good reasons. The role of regulation is not to punish excellence; it is to prevent excellence from hardening into unchallengeable control. But rivals will still need to win on product, trust, and execution.
The best outcome for customers is not a weakened AWS or Azure. It is a cloud market where AWS and Azure remain excellent, but customers have more credible freedom to mix, leave, negotiate, and choose specialized providers without paying an artificial penalty.

The Compliance Clock Could Redraw the Cloud Contract​

If the Commission confirms the designation, Amazon and Microsoft would have six months to bring AWS and Azure into compliance with DMA obligations. The precise practical effects will depend on the final decision and the Commission’s interpretation, but the direction is clear: cloud platforms would be expected to behave less like closed gravity wells and more like contestable infrastructure.
The most immediate impact may be contractual and procedural rather than technical. Providers may need clearer terms, better data access mechanisms, fairer treatment of third parties, and less friction for customers that want to move workloads or connect rival services. Procurement teams may gain language to challenge lock-in clauses or opaque bundling.
Technical changes could follow, especially around portability and interoperability. Cloud providers may be pushed to make exits less punitive, integrations less discriminatory, or ecosystem participation more open. But anyone expecting a single “export my cloud” button will be disappointed. Modern cloud estates are too varied for that.
A more realistic outcome is a gradual shift in incentives. If regulators make the worst lock-in tactics riskier, providers may compete harder on service quality and price rather than exit friction. If customers believe switching is more plausible, even if still difficult, negotiations change. Optionality does not need to be frictionless to be valuable; it just needs to be credible enough to discipline the supplier.
For IT departments, that makes documentation and architecture discipline more important. A regulated market helps most when customers can act on the freedom it creates. If an organization has no workload inventory, no dependency mapping, no licensing model, and no tested migration path, regulatory rights will sit unused.

Washington Will Hear an Industrial Policy Alarm​

The Commission’s action will not be read in the United States as a narrow cloud competition case. It will be folded into the broader argument over whether the EU’s digital rulebook unfairly targets American technology companies. That argument has already followed DMA enforcement against other large platforms, and cloud will intensify it because AWS and Microsoft are crown jewels of U.S. enterprise technology.
Critics will say Brussels is punishing scale, successful investment, and integrated services. They will argue that the DMA risks slowing innovation, weakening trusted providers, and imposing European regulatory preferences on global platforms. They will also point out that cloud is a fiercely competitive market in which sophisticated buyers negotiate hard and routinely use multiple providers.
Supporters will answer that this is precisely the moment to intervene. Once AI infrastructure, cloud data layers, and enterprise identity systems are fused into a handful of platforms, competition remedies become harder and more disruptive. Waiting until customers have no practical exit would be regulatory malpractice.
Both sides have a point. The hyperscalers became dominant because they built extraordinary platforms and invested sums few others could match. They also benefit from feedback loops that can make future competition structurally harder. The policy question is whether Europe can restrain the latter without damaging the former.
That balance will determine whether the DMA becomes a durable competition framework or a recurring transatlantic grievance machine. Cloud is a tougher test than app stores because the customers are businesses, the contracts are complex, and the technical dependencies are often chosen knowingly. Brussels will need to show that it understands that sophistication rather than pretending enterprise buyers are helpless consumers.

The Real Test Is Whether Exit Becomes Believable​

Cloud customers rarely need to switch providers tomorrow. They need the supplier to believe they could switch if the relationship deteriorates. That distinction is central to competition in enterprise technology.
A credible exit option disciplines pricing, support, roadmap neglect, and aggressive bundling. An incredible exit option becomes theater. Vendors know when a customer is bluffing, and cloud vendors have more telemetry than most about how deeply a customer is embedded.
The Commission’s gatekeeper theory is really about making exit believable again. Not cheap, not instant, and not painless, but believable. That would be a meaningful change in a market where many customers talk multi-cloud while quietly centralizing critical capabilities around one provider.
There is also a security dimension. Concentration can improve security because hyperscalers have world-class teams, tooling, and resilience. Concentration can also create systemic risk because an outage, policy change, identity compromise, or service degradation at one provider can ripple through thousands of organizations. A more contestable market is not automatically safer, but dependency mapping is a security control as much as a procurement tool.
Windows and Microsoft-centric environments should be especially careful not to treat Azure as the inevitable destination for every modernization project. Azure may often be the right answer. The problem begins when it becomes the answer nobody has to justify.

The Cloud War Now Has a Regulatory Front​

The Commission’s preliminary findings do not mean AWS and Azure are already operating under a final DMA cloud regime. Amazon and Microsoft still have the right to respond, and the final designation could be narrowed, delayed, challenged, or reshaped. But the strategic signal has already been sent.
For the cloud industry, the signal is that scale plus ecosystem control will invite scrutiny even when conventional thresholds are not met. For customers, the signal is that regulators are beginning to take switching costs and AI-driven dependency seriously. For rivals, the signal is that Brussels may be willing to intervene before the AI cloud market locks into a permanent hierarchy.
The practical next step for IT leaders is not to wait for the Commission. It is to treat cloud dependency as a board-level architecture issue. The organizations that benefit most from any regulatory opening will be the ones that already know where they are locked in and why.

The Fine Print Is Where This Fight Will Be Won​

The Commission’s move is easy to summarize as “EU targets AWS and Azure,” but the real story will be in implementation. Cloud markets are too technical for slogans. A remedy that sounds powerful in Brussels can become irrelevant if it does not touch the actual sources of customer dependency.
The important questions will be concrete. Can customers move data without punitive cost or unacceptable delay? Can third-party services interoperate without being disadvantaged? Can Microsoft’s software licensing terms avoid tilting infrastructure choices toward Azure? Can AWS and Azure maintain integrated service quality while giving rivals fair access to customers? Can AI tooling be made portable enough that customers are not locked into a model ecosystem before the market has matured?
Those are hard questions because cloud lock-in is not always abusive. Sometimes it is the price of using advanced managed services. The same proprietary feature that traps a customer may also be the feature that let a small team ship a product without hiring a platform engineering department.
That is why the Commission should avoid treating portability as a religion. Open standards matter, but customers also benefit from differentiated platforms. The right target is not every form of dependency; it is dependency that is hidden, coercive, discriminatory, or commercially engineered to make competition ineffective.
If Brussels can keep that distinction clear, it may produce a more competitive cloud market without flattening the services that made cloud valuable in the first place. If it cannot, the DMA risks becoming a compliance tax that sophisticated incumbents absorb more easily than the smaller rivals it is supposed to help.

The Architecture Review That Should Happen Before Brussels Decides​

The most useful response from enterprise IT is an internal one. Every major AWS or Azure customer should use this moment to review its own assumptions. Regulation may change the market, but architecture determines whether those changes matter.
A serious review should start with the workloads that would be hardest to move under pressure. That means looking beyond compute and storage into identity, databases, observability, AI services, security controls, automation scripts, backup designs, network dependencies, and licensing commitments. The question is not whether everything can be made portable. It is whether the organization knows which dependencies are deliberate and which accumulated by accident.
The second step is commercial. Cloud bills are not just consumption meters; they are maps of leverage. Reserved instances, committed spend agreements, enterprise licensing terms, marketplace purchases, and support contracts all shape future options. A customer that treats those commitments as procurement paperwork will miss their architectural significance.
The third step is governance. If developers can adopt proprietary services faster than architects can evaluate long-term consequences, lock-in becomes an emergent property of delivery pressure. That does not mean banning managed services. It means requiring the team to state the trade-off in plain English before the dependency becomes business-critical.
This is where Windows administrators and platform teams can add real value. They understand the hidden coupling between identity, endpoints, servers, policy, monitoring, and user productivity. In a Microsoft-heavy estate, the decision to use Azure is often not a single decision at all. It is the cumulative result of dozens of smaller defaults.

The Six-Month Shadow Over Hyperscale Cloud​

The Commission has not yet imposed the final designation, but the possible six-month compliance deadline now hangs over AWS and Azure strategy in Europe. That timetable is short in regulatory terms and very short in cloud engineering terms. If final decisions arrive, Amazon and Microsoft will need to translate legal obligations into product, contract, and partner changes quickly.
Customers should expect careful messaging from both companies. They will emphasize existing competition, customer choice, security, investment, and the risk of regulatory friction. They may also quietly adjust terms or practices before being forced to do so, because no platform wants a public list of lock-in remedies written entirely by regulators.
Rivals will press the opposite case. They will argue that voluntary changes have not been enough, that hyperscaler dominance has already shaped the market, and that AI will make delay more costly. European providers, in particular, will frame the issue as both competition and strategic autonomy.
The Commission will have to prove it can distinguish between market power and mere success. That is the credibility test. AWS and Azure are not dominant because customers are foolish; they are dominant because they are useful, mature, and deeply integrated into how modern organizations build technology. Any remedy that ignores that will fail.

Europe’s Cloud Verdict Is Really an AI Verdict​

The Commission’s preliminary gatekeeper move is best understood as an early verdict on the AI era. Brussels sees cloud platforms becoming the substrate for the next wave of digital power. If the same companies that dominate infrastructure also capture the AI tooling, data integration, and enterprise workflow layers, the market may close before competitors have a meaningful chance.
That does not mean AWS and Azure should be treated as villains. It means they should be treated as infrastructure with public consequences. The larger and more indispensable a platform becomes, the more its private design choices become market rules for everyone else.
For Windows users and administrators, the immediate effects may be subtle. Nobody’s Azure tenant changes overnight. No AWS workload suddenly becomes portable by decree. But procurement language, licensing pressure, AI service selection, and cloud architecture debates may all start to shift as the regulatory fight advances.
The cloud was once pitched as flexibility itself. The Commission is now asking whether the biggest clouds have become the opposite: flexible on the way in, rigid on the way out.

The Practical Reading for WindowsForum Readers Is Written in Contracts and Diagrams​

This story will produce plenty of ideological noise, but the useful signal for IT pros is concrete.
  • The Commission’s June 25, 2026 preliminary finding targets AWS and Azure as potential DMA gatekeeper services, not Amazon and Microsoft’s entire corporate existence in a generic sense.
  • The process began with market investigations opened on November 18, 2025, and Amazon and Microsoft still have an opportunity to respond before any final designation.
  • If the designation is confirmed, the companies would have six months to bring the affected cloud services into compliance with DMA obligations.
  • The Commission’s theory rests heavily on lock-in, switching costs, ecosystem depth, AI-driven demand, and the role of AWS and Azure as gateways between businesses and customers.
  • Windows-centric organizations should pay special attention to Microsoft licensing, identity, security, and productivity integrations that can make Azure the default even when alternatives exist.
  • The most useful preparation is dependency mapping: knowing which workloads, contracts, data flows, and AI services could realistically move, and which are effectively anchored.
Brussels has opened a new front because the cloud has become too important to remain a private fight between procurement departments and hyperscalers. Whether the DMA can make AWS and Azure more contestable without weakening the services customers rely on is now the question that will define Europe’s next phase of tech regulation. For enterprises, the wise move is not to wait for a final order, but to rediscover the discipline cloud once promised: build for choice, document the trade-offs, and never let convenience quietly become captivity.

References​

  1. Primary source: EU Today
    Published: Fri, 26 Jun 2026 07:24:02 GMT
  2. Independent coverage: The Brussels Times
    Published: 2026-06-25T22:30:26.575559
  3. Related coverage: digital-strategy.ec.europa.eu
  4. Related coverage: agenceurope.eu
  5. Related coverage: itif.org
  6. Related coverage: computerweekly.com
  1. Related coverage: 2eu.brussels
  2. Related coverage: competition-policy.ec.europa.eu
  3. Related coverage: eunews.it
  4. Related coverage: datacenterdynamics.com
  5. Related coverage: investing.com
  6. Related coverage: ceotodaymagazine.com
  7. Related coverage: germany.representation.ec.europa.eu
  8. Related coverage: ec.europa.eu
  9. Related coverage: elpais.com
  10. Related coverage: cincodias.elpais.com
  11. Related coverage: itpro.com
 

Back
Top