On March 1, Iranian Shahed drones hit three Amazon Web Services data centers across the UAE and Bahrain. Two of three availability zones in ME-CENTRAL-1 went dark. Structural damage. Power failure. Fire. Water damage from suppression systems. Five weeks later, AWS Bahrain is still “hard down” with no timeline for recovery. Amazon is advising customers to migrate workloads to other continents.
Today, 43 Wall Street analysts rate Amazon a Strong Buy with an average price target of $281. Amazon’s stock rose 1.2% on Monday — leading the market — while its Gulf infrastructure remained physically offline.
Not one analyst has adjusted for the fact that a sovereign military proved it can take out commercial cloud infrastructure with a $5,000 drone. The information exists. That’s what makes this interesting.
The Signal Path
The data center strikes were not ignored. Bloomberg, The Intercept, Axios, InfoQ, Tom’s Hardware, Rest of World, The Conversation, TechPolicy.Press, Fortune — all covered the attacks in detail. The Intercept ran “Data Centers Are Military Targets Now.” Carnegie Endowment analysts warned physical attacks on cloud infrastructure will become more common. An industry executive asked: “Who’s going to insure a $20 billion facility that can be taken out by a $5,000 drone?”
The signal entered the information ecosystem. Then it stopped.
Not one sell-side report has adjusted FAANG price targets for Gulf physical infrastructure risk. The debate is about AI capex ROI — the $660 billion question of whether hyperscaler spending will produce returns. That’s a real debate. But it’s happening instead of a different one: whether the facilities those billions are building can survive a conflict that’s already hit them.
The “Drop in the Bucket” Defense
The bull case writes itself. Microsoft’s $15 billion UAE commitment through G42 is roughly 10% of one year’s capex. Amazon’s Gulf footprint is a fraction of global AWS capacity. The Motley Fool published this exact argument on April 5: the Gulf is a “relative drop in the bucket.”
That framing treats this as a financial loss problem. It isn’t. It’s a precedent problem.
Three things changed on March 1 that no valuation model captures:
The Pentagon’s JWCC contract ($9 billion — AWS, Microsoft, Google, Oracle) runs military and intelligence workloads on the same commercial infrastructure that serves Emirates NBD and Careem. Under international humanitarian law, dual-use facilities are legitimate military targets. Iran cited this explicitly when it struck AWS Bahrain. Every JWCC-connected data center is now a lawful target in any conflict with a state adversary. This isn’t theoretical — it already happened.
AWS availability zones are designed for hardware failures, not missile strikes. When two of three AZs in ME-CENTRAL-1 went down simultaneously, the redundancy model that underpins every enterprise cloud architecture collapsed. Multi-cloud doesn’t solve regional kinetic risk. 109 services were impacted. Banks, payments, logistics — all dark.
Standard commercial property and business interruption policies exclude acts of war. AWS waived all ME-CENTRAL-1 charges for March. Force majeure clauses are being challenged in regional courts. Lloyd’s of London is reassessing war-risk exclusion language for cloud facilities. New Gulf data center projects are seeing 15–20% capex inflation for physical hardening. None of this is in analyst guidance.
The Escalation Context
Today, Israel destroyed Asaluyeh — Iran’s largest petrochemical complex, responsible for 85% of Iran’s petrochemical exports. The IRGC’s intelligence chief was killed in a separate strike. Both sides rejected a ceasefire proposal. Tomorrow at 8 PM Eastern, Trump’s deadline arrives — what he calls “Power Plant Day” and “Bridge Day.” If it passes without a deal, he has promised to destroy every power plant and bridge in Iran within four hours.
The pattern is clear: both sides are targeting infrastructure. Bridges. Petrochemical plants. Nuclear facilities. Water desalination. And data centers. Iran’s published target list of 17 US companies hasn’t been withdrawn. AWS remains “hard down.” The $30 billion Stargate campus broke ground in the UAE on March 20 — twenty miles from the AWS Bahrain facility that was hit.
Meanwhile, Amazon committed $200 billion in 2026 capex. No analyst has asked what percentage of that goes to regions where drones have already hit their infrastructure.
What Monday Confirmed
Markets reopened after a three-day closure. Tech got its safe-haven bid. Nasdaq +0.54%. Alphabet and Amazon each gained more than 1%. Money rotated into the names whose Gulf infrastructure is physically offline and whose facilities sit on a sovereign military’s published target list.
The S&P 500 rose for a fourth straight day on ceasefire hopes. Both sides had rejected the ceasefire hours earlier.
The signal made it through journalism, through policy analysis, through industry commentary. It stopped at the one place that moves prices: the sell-side model. Forty-three analysts, zero adjustments. That’s not a gap in awareness. It’s a gap in pricing.