Digital Sovereignty Challenge: India's Cloud Infrastructure Dependence and Strategic Vulnerabilities

Indian Express - Opinion · 2 Jun 2026 · 2 min read
Prelims · Science and technology Mains · GS3 Science and technology High relevance

India's reliance on foreign cloud services like Microsoft Azure and AWS poses strategic vulnerabilities, as demonstrated by the Nayara Energy incident, highlighting the need for sovereign digital infrastructure to ensure national security and economic resilience.

Key points

Nayara Energy incident exposed India's vulnerability when Microsoft threatened to discontinue cloud services due to US sanctions on Nayara's Russian shareholder Rosneft, despite the company operating legally in India.

Digital Public Infrastructure (DPI) like Aadhaar, UPI, and ONDC showcases India's success in building sovereign application-layer systems, but underlying infrastructure remains dependent on foreign hyperscalers (AWS, Azure, Google Cloud).

[GS3-Science and Technology] The cloud infrastructure layer is governed by the laws of the provider's home jurisdiction, creating geopolitical risks for critical sectors like healthcare, banking, and government services.

AI dependency is emerging as a future risk, with Large Language Models (LLMs) controlled by US and Chinese companies, lacking Indian oversight or alignment with national priorities.

India's digital tenancy model—owning application layers while renting infrastructure—creates strategic vulnerabilities that could be exploited during geopolitical tensions.

[GS2-Governance] The article connects to GS2 governance questions about regulatory frameworks for data sovereignty and critical infrastructure protection in the digital economy.

Four strategic levers proposed: data localization with operational sovereignty, domestic cloud capability (MeghRaj), DPI extension to AI, and Global South digital partnerships for rule-setting influence.

This aligns with GS3-Economy themes of self-reliance in critical technologies and the economic implications of digital sovereignty.

Way Forward: India should accelerate domestic cloud infrastructure development, establish sovereign AI models for critical sectors, implement robust data localization with audit capabilities, and leverage DPI partnerships to shape global digital governance standards.

Key terms

Hyperscaler Cloud

Massive cloud service providers (AWS, Azure, Google Cloud) controlling global infrastructure. UPSC relevance lies in their geopolitical leverage over national economies and the strategic need for domestic alternatives in critical sectors.

Data Localization

Mandating storage of sensitive data within national borders. For UPSC, this intersects with sovereignty debates, cybersecurity policies, and trade negotiations like the EU's GDPR compatibility requirements.

Digital Sovereignty

A nation's control over its digital infrastructure and data governance. Crucial for UPSC as it connects to GS2's governance syllabus, GS3's technology policy, and India's strategic positioning in global digital governance forums like the G20.

Digital Public Infrastructure (DPI)

India's open, interoperable digital systems like Aadhaar, UPI, and ONDC that provide citizen services without data extraction. For UPSC, DPI represents a governance innovation combining technology with inclusion, reducing dependence on foreign platforms while enabling innovation.