Drone strikes attributed to Iran have damaged three Amazon Web Services data centers in the Middle East this week, exposing the cloud computing industry’s susceptibility to physical attacks and regional conflicts.
Amazon’s cloud computing arm reported Monday night that Iranian drones “directly struck” two of its facilities in the United Arab Emirates, while a third center in Bahrain sustained damage when a drone crashed in the vicinity.
“These strikes have caused structural damage, disrupted power delivery to our infrastructure, and in some cases required fire suppression activities that resulted in additional water damage,” AWS stated in an update posted to its online status dashboard.
By Tuesday evening, the company reported that restoration work at the UAE facilities was showing positive results.
The physical nature of these attacks produced only regional, contained disruptions — a contrast to past AWS software malfunctions that triggered global service interruptions affecting millions of users worldwide.
AWS provides the underlying cloud infrastructure that powers countless online services for government agencies, educational institutions, and corporations around the globe.
The Seattle-based company urged clients operating servers in the Middle East to transfer their operations to different geographic regions and redirect web traffic away from UAE and Bahrain locations.
“Amazon has generally configured its services so that the loss of a single data center would be relatively unimportant to its operations,” explained Mike Chapple, an information technology professor at the University of Notre Dame’s Mendoza College of Business.
Additional data centers within the same geographic zone can assume the workload, and this type of automatic switching occurs routinely to distribute computing demands, Chapple noted.
“That said, the loss of multiple data centers within an availability zone could cause serious issues, as things could reach a point where there simply isn’t enough remaining capacity to handle all the work,” he added.
Amazon keeps the precise count of its worldwide data centers confidential, revealing only that these facilities operate across 39 different geographic regions. The company maintains three such regions throughout the Middle East, spanning the United Arab Emirates, Bahrain, and Israel.
Each AWS region contains a minimum of three separate data center zones, with facilities isolated and positioned “by a meaningful distance” while staying within 100 kilometers of each other. These zones connect through “ultra-low-latency networks” designed to minimize delays in data transmission.
According to AWS, its data centers feature backup systems for water, electricity, telecommunications, and internet connectivity “so we can maintain continuous operations in an emergency.”
While these facilities include physical security measures such as guards, perimeter fencing, video monitoring, and alarm systems, these protections target unauthorized access rather than defending against missile or drone attacks.
Chapple emphasized that the strikes serve as a wake-up call that cloud computing isn’t “magical” and “still requires physical facilities on the ground, which are vulnerable to all sorts of disaster scenarios.”
Data centers operated by AWS and competing companies are enormous structures that cannot easily be concealed, he pointed out.
“Organizations using services from any cloud provider in the Middle East should immediately take steps to shift their computing to other regions,” Chapple recommended.
