Geopolitical shocks highlight need for cloud diversity

TL;DR

Cloud Diversity Urged: Geopolitical shocks like Iranian drone strikes on AWS data centres underline European banks' worries over heavy reliance on US hyperscalers.[[1]](https://www.ft.com/content/9a4131e4-e9d6-4dfb-a400-28bb8037fab6)[[2]](https://www.ft.com/reports/risk-management-financial-institutions)
AWS Facilities Hit: Iranian drones damaged AWS sites in UAE and Bahrain, disrupting banking apps and prompting data migration warnings.[[1]](https://www.ft.com/content/9a4131e4-e9d6-4dfb-a400-28bb8037fab6)[[3]](https://www.wired.me/story/when-iranian-drones-hit-the-cloud-aws-data-centres-damaged-in-the-gulf)
Risk Concentration Exposed: Banks face systemic risks from depending on few US providers amid rising Middle East tensions and data sovereignty fears.[[4]](https://www.ft.com/cloud-computing)

The story at a glance

European banks are growing uneasy about their dependence on a small number of US cloud hyperscalers such as AWS, Microsoft Azure and Google Cloud, amid recent geopolitical disruptions. The article, by Chris Newlands and part of the FT's "Risk Management: Financial Institutions" special report, highlights Iranian drone strikes that hit AWS data centres in the United Arab Emirates and Bahrain. It is being reported now following those March 2026 attacks, which exposed physical vulnerabilities in cloud infrastructure critical to finance.

Key points

Recent Iranian drone strikes physically damaged multiple AWS facilities in UAE (two directly hit) and Bahrain (nearby impact), causing outages in banking apps, payment platforms and services like Careem.[[3]](https://www.wired.me/story/when-iranian-drones-hit-the-cloud-aws-data-centres-damaged-in-the-gulf)[[5]](https://houseofsaud.com/aws-data-centers-hit-iran-drones-gulf-cloud-war)
AWS advised customers to migrate workloads to other regions like Europe or the US, citing prolonged recovery due to physical damage including fires and flooded servers.[[1]](https://www.ft.com/content/9a4131e4-e9d6-4dfb-a400-28bb8037fab6)
European banks fear US providers could cut services due to geopolitical tensions, US laws like the CLOUD Act, or direct attacks, amplifying calls for cloud diversity and sovereignty.[[6]](https://www.thebanker.com/content/7c5990dd-8232-40c6-8ad8-f15d4bb1b758)
US hyperscalers dominate the European cloud market (over 65-70% share), raising concentration risks highlighted by regulations like EU's DORA.[[7]](https://www.redhat.com/en/blog/digital-sovereignty-banking-industry)
The strikes mark the first known military hit on a major hyperscaler, jolting Gulf AI and cloud ambitions while prompting broader financial sector rethink on vendor reliance.[[4]](https://www.ft.com/cloud-computing)

Details and context

The article appears in a Financial Times special report on risk management for financial institutions, focusing on how rising US debt, AI-driven cyber threats and geopolitical events challenge banks. Iranian drones targeted AWS sites in early March 2026 amid escalated Middle East conflict, damaging infrastructure and halting services across the Gulf; this was not a cyber attack but physical destruction, revealing cloud centres as wartime targets.[[2]](https://www.ft.com/reports/risk-management-financial-institutions)[[3]](https://www.wired.me/story/when-iranian-drones-hit-the-cloud-aws-data-centres-damaged-in-the-gulf)

European lenders have long voiced concerns over data sovereignty, fearing US government access via laws like the CLOUD Act or service halts in tensions. Earlier examples include SEB's CFO questioning Google Cloud on geopolitical supply risks. The dominance of three US firms creates single points of failure, pushing hybrid or sovereign clouds despite their scale advantages.[[6]](https://www.thebanker.com/content/7c5990dd-8232-40c6-8ad8-f15d4bb1b758)

Past outages, like AWS's 2025 US-East-1 failure, affected global services including European banks, but military strikes add a new layer of state-actor threat.[[8]](https://www.altiatech.com/the-aws-outage-that-exposed-cloud-computing-s-achilles-heel)

Key quotes

“Iranian drones hit a United Arab Emirates AWS facility.” — Article reference to Middle East conflict.[[1]](https://www.ft.com/content/9a4131e4-e9d6-4dfb-a400-28bb8037fab6)

“While conflict is a very extreme example of disruption, drone strikes on cloud infrastructure show the risks.” — Reported in article context.[[1]](https://www.ft.com/content/9a4131e4-e9d6-4dfb-a400-28bb8037fab6)

Why it matters

Geopolitical tensions now threaten the physical cloud infrastructure underpinning global finance, turning data centres into potential battlegrounds and exposing systemic vulnerabilities from vendor concentration. Banks and investors face operational disruptions, higher costs for diversification, and regulatory pressure under rules like DORA to reduce US hyperscaler reliance. Watch for European shifts to sovereign clouds, US provider responses like AWS's European Sovereign Cloud, and further Middle East conflict impacts, though full diversification may take years.