From Dubai: The regional dynamics at play are more complex than the headlines suggest. When Iranian drones struck Amazon Web Services facilities across the Middle East this week, they did not simply target buildings. They targeted the physical infrastructure upon which modern digital commerce now depends, and in doing so, they raised uncomfortable questions about how tech companies operate in geopolitically volatile regions.
One of Amazon's facilities in Bahrain was damaged and taken offline earlier this week due to nearby drone strikes, while two sites in the United Arab Emirates were "directly struck" by drones.All of the facilities remain offline, according to the Amazon Web Services health dashboard.
What Western coverage frequently misses is why these particular facilities became military targets.Amazon's data centre in Bahrain was targeted by Iran's Islamic Revolutionary Guard Corps for the company's support of the U.S. military, Iranian state media said.The attack in Bahrain was launched "to identify the role of these centres in supporting the enemy's military and intelligence activities," Iran's Fars News Agency said on Telegram. Amazon has declined to comment on these claims, which cannot be independently verified, but the targeting suggests a deliberate strategy rather than collateral damage.
Consumer apps, including delivery and taxi platform Careem, and payments companies Alaan and Hubpay reported outages as a result of issues with AWS infrastructure in the country. Banking providers, including ADCB and Emirates NBD, alongside enterprise software providers like Snowflake, have also reported service disruptions. The cascade of outages illustrated a critical vulnerability in how modern economies function. Cloud infrastructure is no longer a peripheral technology issue; it is essential to basic financial and commercial operations.
For Australia's energy sector and trading partners across the Gulf, this incident carries significant strategic weight.After the U.S. and Israel launched joint strikes on Iran last weekend, Tehran's wave of retaliatory attacks across the Middle East targeted military bases, oil and gas production facilities and data centres. The decision to include data centres alongside energy facilities and military installations signals a fundamental shift in how regional actors view critical infrastructure.
There are over 200 of these across the Middle East, according to some estimates, and cheap energy and land have drawn U.S. hyperscalers to pour resources into building out capacity in the region in recent years. This expansion reflects legitimate business logic, but it also creates concentrated vulnerability. When multiple data centre facilities go offline simultaneously within the same availability zone, the redundancy systems designed to protect cloud operations fail.
The legitimate counterargument from industry advocates holds weight."Amazon has generally configured its services so that the loss of a single data centre would be relatively unimportant to its operations," said Mike Chapple, an IT professor at the University of Notre Dame's Mendoza College of Business. Other data centers in the same zone can take over, and most of the time this happens seamlessly every day to balance workloads. Yet"the loss of multiple data centres within an availability zone could cause serious issues, as things could reach a point where there simply isn't enough remaining capacity to handle all the work."
The attacks on data centres will lead to more investments on data infrastructure, as companies try to diversify data storage, according to a report by intelligence firm IDC. In the Middle East, cloud providers will commit to "multi-AZ" deployments, saving replicas of data in separate data centres, according to IDC. Globally, companies and governments will expect data centre providers to have recovery plans and multiple facilities within a country.
Yet this creates a real tension.Potential defensive measures, such as installing air defence systems and building reinforced concrete, are expensive and do not offer full protection for the sprawling buildings. As data centres become seen as essential parts of national security, governments and companies will have to pay high costs to offer them military-grade protection.
Here lies the pragmatic reality that reasonable people must grapple with. Tech companies have genuine incentives to locate data centres where energy costs are low and computing power is in demand; the Gulf states actively solicit this investment as part of their digital transformation. At the same time, hosting critical infrastructure in a region experiencing active military conflict creates risks that no amount of redundancy can fully eliminate. The solution is neither to retreat entirely from the Middle East nor to ignore the emerging threat. Instead, it requires more sophisticated geopolitical risk assessment, investment in resilience, and honest conversations between technology firms and governments about the true costs of operations in contested regions. That conversation is only now beginning.