When Iranian Drones Hit AWS, Your Apps Went Dark

Your banking app froze. Your company's CRM went offline. Food delivery stopped working. All because a few drones found their targets 2,000 miles away.

Last Sunday, Iranian drone strikes hit AWS data centers in the UAE, and suddenly millions of people discovered just how fragile our digital world really is.

When the Cloud Falls to Earth

The attacks weren't random. After joint U.S.-Israeli strikes on Iran last weekend, Tehran's retaliation targeted military bases, oil facilities—and for the first time at this scale, data centers. Over 200 of them dot the Middle East landscape, drawn by cheap energy and vast empty land.

Amazon Web Services confirmed two UAE facilities took direct hits, with a Bahrain center damaged by nearby strikes. Iranian state media said the Bahrain facility was targeted specifically for "supporting the U.S. military."

Companies scrambled to migrate servers to other regions, but the damage was done. As of Friday morning, AWS still listed UAE services as "disrupted."

The New Battlefield

"Iran and proxies have targeted oil fields in the past, but their attacks this week on UAE data centers shows they are now considered critical infrastructure," Patrick J. Murphy from Hilco Global told reporters.

That shift matters. The U.S. recognizes data centers as part of its 16 critical infrastructure sectors. The U.K. designated them as critical national infrastructure in 2024. The EU gives them special status too.

But unlike power plants or military bases, data centers weren't built with warfare in mind. They're optimized for efficiency, not defense.

The Hyperscaler Gamble

For years, U.S. tech giants poured resources into Middle East expansion. The math was simple: abundant energy, cheap land, growing markets. Microsoft, Google, and Amazon all planted flags in the region.

The geopolitical math was apparently more complex.

Iran's Shahed drones—dubbed "the poor man's cruise missile"—cost a fraction of traditional missiles but can strike with precision. Data centers make tempting targets: high impact, relatively soft defense, maximum disruption for minimum cost.

The Backup Reality Check

Scott Tindall from law firm Hogan Lovells expects the strikes to "sharpen focus on multi-region replication and backup options." But that redundancy comes with a price tag many companies haven't budgeted for.

While "sophisticated data center operators" already conduct geopolitical risk assessments, Tindall says these "will likely have to be revisited in light of recent events."

AWS, Microsoft, and Google all declined to comment on security arrangements at their Middle East facilities.