On Thursday, the Islamic Revolutionary Guard Corps claimed it had struck an Oracle data center in Dubai and an Amazon Web Services cloud computing facility in Bahrain. [1] The IRGC's naval command published the claim through Iranian state media, describing the attacks as retaliatory — "in retaliation for attacks on Iran." [1] Dubai's media office denied that any strike had hit an Oracle facility in the emirate. [2] The Amazon strike in Bahrain was not denied. It was the fourth confirmed attack on AWS infrastructure in the Gulf since the war began 35 days ago. [3]

The strikes deserve attention not for what they destroyed but for what they targeted. These were not oil facilities. They were not military bases. They were not ports or airfields. They were server rooms — the physical infrastructure of cloud computing, the facilities that store data, process transactions, and run the digital services on which the Gulf's economy increasingly depends. The IRGC has struck a new category of target, and that category is the internet itself.

Two days earlier, as this paper reported in its April 1 edition, the IRGC published a list of 18 American companies and declared them military targets, giving an 8 p.m. Tehran time deadline on April 1 for the companies to evacuate their Middle East operations. [4] Oracle was on the list. Amazon was on the list. So were Apple, Google, Microsoft, Meta, Tesla, Boeing, Intel, IBM, Cisco, HP, NVIDIA, and Palantir. [5] The list was dismissed in some quarters as bluster. Thursday's strikes suggest it was not.

The pattern is worth tracing. On March 1, within 48 hours of the war's start, Iranian drones struck two AWS data centers in the UAE and one in Bahrain, damaging physical infrastructure and disrupting 38 core services in the UAE region and 46 in Bahrain, including EC2, S3, DynamoDB, Lambda, and RDS. [3] Amazon shuttered all its corporate offices in the Middle East on March 3. [6] CNBC reported on March 24 that AWS was "once again experiencing service disruptions in Bahrain due to drone activity." [7] Thursday's strikes on the Oracle facility in Dubai and the AWS facility in Bahrain represent the continuation — and the escalation — of a campaign that has been building for five weeks.

The escalation is categorical, not merely incremental. There is a difference between striking a data center that happens to be near a military target and striking a data center because it is a data center. The IRGC's March 31 list made the targeting logic explicit: these companies' technologies "enable assassinations," their cloud platforms "support military operations," their AI systems "power targeting algorithms." [4] Whether these claims are accurate is almost beside the point. The IRGC has articulated a doctrine in which civilian technology companies are combatants, and their physical infrastructure in the region is a legitimate military objective.

Oracle's presence in Dubai is substantial. The company operates a cloud region — OCI Dubai — that serves enterprise customers across the Gulf, including government agencies, financial institutions, and healthcare providers. [8] Oracle's chairman Larry Ellison has publicly described the company's cloud infrastructure as critical to national digital transformation programs in Saudi Arabia and the UAE. Amazon's Bahrain cloud region, launched in 2019, was the first hyperscale cloud in the Middle East. It hosts government workloads, financial services, and e-commerce platforms for customers across the Gulf Cooperation Council states.

The Dubai government's denial of the Oracle strike raises its own questions. Dubai has been careful throughout the war to minimize reports of Iranian attacks on its territory — a posture consistent with its role as a regional financial hub that depends on perceptions of stability. [2] The denial may be accurate. It may also reflect the same instinct that has led the UAE to avoid publicly confirming the extent of damage to its own infrastructure from earlier Iranian strikes. When your economy runs on foreign investment, you do not advertise that your data centers are being bombed.

What is not in dispute is the IRGC's intent. The 18-company list, the April 1 deadline, and Thursday's strikes describe a coherent — if alarming — strategic logic. The IRGC cannot match American military power. It cannot close the air gap. It cannot stop the bombing of bridges and medical laboratories in Tehran. What it can do is impose costs on the economic infrastructure that American companies have built in the Gulf states that host American military operations. Bahrain is home to the U.S. Navy's Fifth Fleet. The UAE hosts Al Dhafra Air Base. Both countries' digital infrastructure is now a target because their physical territory is a staging ground.

TNW's analysis of the 18-company list noted that Iran's targeting logic "collapses the civilian-military distinction" in a way that has no clear precedent in modern warfare. [4] When a country declares that a company's cloud platform is a military target because the company's government uses the same cloud platform for defense purposes, the entire technology stack becomes a weapon — and a target. Every AWS region, every Azure availability zone, every Oracle cloud instance in the Middle East is, by the IRGC's stated logic, a legitimate military objective.

The market response has been muted, partly because the companies themselves have said almost nothing. Oracle has not issued a public statement about Thursday's claimed strike. Amazon has not commented on the Bahrain attack beyond confirming earlier service disruptions. The silence is consistent with the corporate posture this paper noted on April 2 — the 18 named companies, collectively worth more than $17 trillion, have not disclosed the IRGC's threat in SEC filings or public statements. [9]

The war began with nuclear facilities. It moved to military bases, then to energy infrastructure, then to bridges and medical laboratories. On Thursday, it arrived at the cloud. The physical internet — the fiber, the servers, the cooling systems, the generators — is as vulnerable to a drone as a bridge. And the IRGC has now demonstrated, at least in Bahrain, that it is willing to strike it.

-- DAVID CHEN, Beijing