Iran Drone Strikes Hit AWS, Disrupting Gulf Banking

A New Front in Modern Warfare

In a first for the tech industry, Amazon Web Services confirmed this week that Iranian drone strikes damaged three of its data center facilities in the UAE and Bahrain, triggering widespread cloud outages and disrupting banking, payments, and everyday digital services across the Gulf region. The attacks mark the first time a major U.S. technology company's physical infrastructure has been directly disabled by military action.

The strikes, which Amazon described as causing "structural damage, disrupted power delivery, and in some cases water damage from fire suppression activities," took place as part of Iran's retaliatory campaign following U.S. and Israeli strikes inside Iran over the preceding days. Those operations killed Iranian Supreme Leader Ayatollah Ali Khamenei and senior military figures, prompting Iran to escalate across the region.

Banking Apps Go Dark

The real-world consequences rippled immediately through the lives of Gulf residents. Abu Dhabi Commercial Bank (ADCB) and Emirates NBD — two of the UAE's largest financial institutions — reported mobile apps and online platforms going unavailable. Payments startup Hubpay and corporate expense platform Alaan both confirmed outages. Careem, the region's dominant ride-hailing and delivery service, also suffered disruptions.

Enterprise cloud customers fared no better. Data warehouse company Snowflake reported service interruptions for customers hosted on the affected AWS regions, while investment app Sarwa warned users of degraded functionality. According to CNBC, roughly 60 AWS services in the region were disrupted.

Physical Damage, Prolonged Recovery

AWS said two UAE facilities were directly struck, while a third facility in Bahrain was impacted by a drone strike in close proximity. The company warned that recovery would be "prolonged given the nature of the physical damage involved" — a stark contrast to the typical software-level outages that cloud providers usually face.

The Register reported that the UAE data center fires triggered fire suppression systems, compounding the damage. Data Center Dynamics noted the incident exposed a systemic blind spot in cloud resilience planning: while multi-region failover is standard practice, many regional businesses had concentrated workloads in Gulf AWS zones without robust disaster recovery alternatives.

A Watershed Moment for Cloud Security

Security analysts and cloud architects were quick to draw broader lessons. The incident underscores that data centers — long considered abstract "cloud" infrastructure — are in fact physical buildings with physical vulnerabilities. The Gulf hosts a dense concentration of hyperscale cloud infrastructure serving the Middle East and South Asia, with AWS, Microsoft Azure, and Google Cloud all operating facilities in the UAE.

The Boston Herald noted that the strikes highlight the tech industry's exposure to physical disasters and geopolitical conflict in ways that business continuity planning has rarely been forced to confront. "We design for earthquakes and floods," one cloud architect told the outlet. "We haven't fully designed for war."

Reuters reported via Investing.com that Amazon shares fell sharply on the news, as investors weighed potential liability, reputational damage, and the cost of rebuilding hardened infrastructure.

Broader Fallout

The incident adds a new dimension to the cascading economic shocks from the Iran conflict. With the Strait of Hormuz already closed and oil prices spiking, the AWS outage demonstrated how modern warfare can simultaneously target both physical supply chains and the digital infrastructure underpinning daily commerce. For businesses across the Gulf, the message was stark: the cloud is only as resilient as the ground it sits on.