Drone strikes damage Amazon AWS data centers in UAE and Bahrain

Three Amazon Web Services data centers in the Gulf were damaged by drone strikes as the U.S.-Israel conflict with Iran widened into the region’s commercial infrastructure. Amazon said two facilities in the United Arab Emirates took direct hits and a third site in Bahrain was damaged by a strike “in close proximity,” causing structural damage, power disruption and fire-suppression water damage, according to Business Insider.

The immediate story is operational: cloud capacity that normally fails over invisibly has to be rebuilt in a war zone. But the larger point is that “the internet” is not an abstraction in a dispute between states; it is a map of power feeds, cooling systems, diesel reserves, fiber routes, and staff who must physically reach a building. When those buildings are in the Gulf—close to ports, airports and energy infrastructure—cloud redundancy starts to look like any other form of industrial concentration.

The incentives are straightforward. Hyperscalers sell resilience as a product—multi-region architectures, availability zones, managed backups—priced as an add-on and configured by customers. Yet the downstream costs of outages are rarely borne by the cloud provider alone. Payments, logistics booking systems, airline operations, and public-sector services increasingly assume continuous access to a handful of cloud platforms; when connectivity or power is disrupted, the losses cascade to merchants, hospitals, local authorities, and consumers.

In peacetime, that fragility is masked by service credits and status dashboards. In wartime, it becomes a question of physical security and who pays for it. Providers can harden sites, but air defense and maritime security are state functions. Once data centers are treated as strategic assets, the pressure grows for governments to extend protection—explicitly or by default—because the alternative is letting civilian economic activity absorb the shock.

That shifts the risk profile. A private firm can diversify regions and build spare capacity, but it cannot deter drones. A state can, but it spreads the cost across taxpayers and allies, often while private users continue to optimize for the cheapest architecture until the moment it fails. The result is a familiar pattern: profits accrue to the operators of critical infrastructure, while the most expensive tail risks—war, blockade threats, sustained disruption—are pushed outward.

Amazon said it was working with local authorities and prioritizing personnel safety as it restored service. The update did not specify which AWS regions or services were affected, only that the strikes disrupted power delivery and triggered fire-suppression responses.

In the Gulf, a cloud “region” can be reduced to a few buildings, a few substations, and a few minutes of warning.