Yeah, that's the part 1, all data must be within the border

so Azure in China can only be ran by a Chinese entity

If you look at it from the other side, it's like Tiktok must be hosted by Microsoft/Amazon but not datacenters in China