Iranian drone strikes damaged three AWS data centers in the UAE and Bahrain, exposing cloud computing’s vulnerability to physical attacks despite robust digital redundancy.
Damage to three Amazon Web Services facilities in the Middle East from Iranian drone strikes highlights the rapid growth of data centers in the region and the industry’s vulnerability to physical conflict. AWS said two data centers in the United Arab Emirates were directly struck and another facility in Bahrain was also damaged after a drone landed nearby, causing structural damage, disrupted power delivery, and fire suppression water damage.
Unlike previous AWS disruptions involving software that caused widespread global outages, these physical attacks resulted in localized and limited disruption. AWS advised customers using servers in the Middle East to migrate to other regions and redirect online traffic away from the UAE and Bahrain. The company has generally configured its services so that the loss of a single data center would be relatively unimportant, with other data centers in the same zone seamlessly taking over.
However, as University of Notre Dame IT professor Mike Chapple noted, the loss of multiple data centers within an availability zone could cause serious issues if remaining capacity is insufficient to handle all workloads. AWS data centers have redundant water, power, telecom, and internet connections for continuous operations, but physical security measures such as guards, fences, and surveillance are designed to keep out intruders rather than defend against missile attacks.
Chapple said the attacks are a reminder that cloud computing isn’t magical and still requires physical facilities vulnerable to all sorts of disaster scenarios. Organizations using cloud services in the Middle East should take steps to shift computing to other regions.
Source: SecurityWeek — Iranian Strikes on Amazon Data Centers Highlight Industry Vulnerabilit
