AWS says it can't restore some data stored exclusively in data centers across Bahrain and one UAE availability zone after Iranian drone strikes in the spring

The risk of data loss in a major cloud region has been demonstrated, forcing AWS to acknowledge permanent data destruction for some customers.

Amazon Web Services (AWS) has confirmed the permanent loss of some customer data following Iranian drone strikes on its data centers in Bahrain and the UAE in March and April. The company stated that the damage to its infrastructure in these regions exceeded the resilience capabilities of its multi-availability zone services. In the UAE, data was irretrievably lost in one of three availability zones, while in Bahrain, AWS reported being unable to restore access to resources and data across all three zones. AWS had previously advised customers to migrate resources and use remote backups, and reportedly issued $150 million in customer credits. The company is continuing efforts to recover regional resources, replace affected infrastructure, and plans to provide further updates in early 2027 for the Bahrain region.

This event starkly highlights the vulnerabilities of even the most robust cloud infrastructure to sophisticated, targeted attacks, challenging the assumption of data invincibility within hyperscale data centers. It suggests that current multi-availability zone designs may not fully account for scenarios involving direct, destructive strikes on multiple data centers within a region. The scale of data loss indicates that while cloud providers offer extensive redundancy, the physical security and resilience against state-level military actions remain a critical, and perhaps underestimated, concern for enterprise data protection strategies.

The long-term implications for cloud adoption in geopolitically unstable regions are significant, as customers will likely re-evaluate risk tolerance and demand enhanced assurances beyond standard disaster recovery protocols. This incident could prompt a shift towards more distributed, geographically diverse backup strategies and a greater emphasis on end-to-end encryption that protects data even if the underlying infrastructure is compromised. Consequently, businesses may need to invest more in hybrid cloud solutions or regions perceived as safer, potentially increasing operational complexity and cost.