Pentagon Procurement Overrides Voluntary Safety Commitments
Iran's drone strikes against AWS data centers in UAE and Bahrain mark the first documented kinetic attacks specifically targeting commercial AI cloud infrastructure based on its dual-use military value. The designation of AWS, Google, Microsoft, Nvidia, Oracle, and Palantir as legitimate military targets represents a doctrinal shift where concentrated cloud infrastructure—essential for AI training and inference—is treated as valid military assets during conflict. This targeting rationale appears based on these companies' Israeli business relationships and provision of cloud services to defense and intelligence customers, creating new strategic vulnerabilities that traditional cybersecurity frameworks do not address.
The economic logic of AI—which rewards massive concentrated facilities for training efficiency—directly conflicts with military logic favoring distributed resilient systems. Countries and companies making the largest AI capability investments are simultaneously creating the most attractive strategic targets. Neither commercial nor military institutions have adapted doctrine or architecture to resolve this trade-off, suggesting current AI infrastructure buildout could create brittle rather than robust strategic capabilities. For countries hosting major cloud facilities, this creates considerations about infrastructure vulnerability that extend far beyond the data sovereignty debates that have dominated policy discussions to date.