The US Is Bombing Iran's Military. Iran Is Bombing America's Cloud.

When the United States retaliated against Iran in February, it bombed electricity and desalination plants — the physical infrastructure a modern state runs on ^[1]. When Iran retaliated, it bombed Amazon Web Services data centers in the Gulf ^[2]. Each side chose what it considered the other's most valuable layer. The divide has held for five months, and it is now the central fact of the war. The IRGC made its logic explicit. It designated roughly 30 US tech assets as "enemy technology infrastructure" and named Google, Microsoft, Nvidia, and the Stargate AI project in Abu Dhabi as targets.

These companies, starting from 8:00 pm (1630 GMT) Tehran time on Wednesday, April 1, should expect the destruction of their relevant units in exchange for every assassination in Iran. — Islamic Revolutionary Guards Corps Research and Self-Sufficiency Jihad Organization

In the 24th wave of Operation Nasr 2, the IRGC claimed to have destroyed Amazon's "central data infrastructure" in Bahrain with cruise missiles.

The IRGC's aerospace warriors, in the continuation of the 24th wave of Operation Nasr 2, in response to the aggression and assault yesterday by the 'child-killing' U.S. army on the civilian facilities under construction in Dar Khuyin, attacked the central data infrastructure of the American company Amazon in Bahrain with several cruise missiles and destroyed it. — Islamic Revolutionary Guards Corps Research and Self-Sufficiency Jihad Organization

The US, by contrast, has aimed its digital operations at Iranian military systems. Operation Epic Fury, launched March 11, put Army Cyber Command and Space Command to work hacking, jamming, and disrupting Iranian software and satellite coordination — military targets, not commercial ones ^[3]. Each side is fighting the war it was built to fight. Iran's campaign did not escalate to this. It began here. The three tracks — Hormuz blockade, data center strikes, cyberattacks — all launched in the war's first week. The cyber offensive began within 24 hours of the February 28 US-Israeli missile strikes, with IRGC-linked groups deploying infostealers and ransomware against Israeli and Gulf targets ^[4]. The data center campaign opened March 1, when Iranian drones and missiles struck AWS facilities in the UAE and Bahrain, rendering availability zones "hard down" and disrupting regional banks and consumer platforms ^[2]. The Hormuz blockade was publicly signaled on March 12, when Iran showcased an underground missile city stocked with naval drones, anti-ship cruise missiles, and sea mines — a threat display that has since become a physical reality, with daily commodity vessel crossings collapsing from an average of 48 to as few as three ^[5][6]. These were not phases. They were simultaneous, and they remain so. The structural gap is not that the US has no cyber capability. It is that the Pentagon cannot defend commercial infrastructure even when it wants to. In the first 11 days of the war, the US fired more than 1,000 PAC-3 Patriot interceptors — exceeding the total provided to Ukraine since 2022 — and is now considering diverting Ukraine-bound air defenses to replenish depleted stocks ^[7].

ensure that U.S. forces and those of our allies and partners have what they need to fight and win. — United States Department of War

We have tremendous amounts of ammunition, we have them in other countries … and we take, sometimes we take from one and we use for another. — Donald Trump

Those interceptors were defending military bases. They were not enough: Iranian strikes damaged or destroyed 228 structures across 15 US military sites, far more than the administration acknowledged, forcing the permanent relocation of the 5th Fleet headquarters from Bahrain to Tampa ^[8]. If the Pentagon cannot protect its own bases, it cannot protect a commercial data center in Dubai or Manama. The math is simple and it is brutal. The consequences have already cascaded beyond physical damage. AWS told customers the Middle East operating environment "remains unpredictable" and urged them to migrate workloads to US, European, or Asia-Pacific regions — a corporate retreat from Gulf cloud infrastructure driven by missile strikes, not market conditions ^[2].

Even as we work to restore these facilities, the ongoing conflict in the region means that the broader operating environment in the Middle East remains unpredictable. — Amazon Web Services

Iranian drone strikes on AWS facilities triggered a sell-off in US dollar-denominated assets: rising Treasury yields, investor redemptions at BlackRock, Blackstone, Morgan Stanley, and Blue Owl, and Cliffwater's flagship fund hitting 14% redemption requests ^[9]. The kinetic strike on a server rack in the Gulf cascaded into a financial event in New York. More than $30 billion in US tech investment — Microsoft's $15.2 billion G42 partnership in the UAE, AWS's $5.3 billion Saudi data-center region, Google Cloud's $10 billion AI hub with the Saudi PIF, Oracle's $1.5 billion expansion — now sits in the target zone of a military campaign the US cannot shield ^[10]. The cyber track compounds the exposure. Iran has launched nearly 5,800 cyberattacks against networks in the US, Israel, Bahrain, Kuwait, and Qatar, integrating spyware deployment with missile strikes ^[11]. It exploited the SS7 protocol and commercial smartphone advertising databases to track US military personnel in real time, enabling missile strikes on hotels housing American troops — weaponizing the same commercial digital infrastructure the data center campaign is destroying ^[12]. CISA, the US cyber defense agency, was operating at roughly 38% staffing due to DHS funding shortfalls precisely when the attacks intensified ^[4]. The Hormuz blockade is the largest of the three tracks by economic volume, and the US response to it reveals the same structural mismatch. Marco Rubio acknowledged that Iran has created a precedent where "a nation state can decide that they are going to control an international waterway, charge a toll and if you don't pay them, blow up your ships" ^[13].

If we create a precedent in the Middle East where a nation state can decide that they are going to control an international waterway, charge a toll and if you don’t pay them, blow up your ships, we have created a very dangerous precedent which will repeat itself in other parts of the world, including in this region — Marco Rubio

The US answer has been to bomb Iranian ports. Trump threatened to "blow up and completely obliterate all of their Electric Generating Plants, Oil Wells and Kharg Island" if Hormuz is not reopened, and Defense Secretary Hegseth told Congress "we'll negotiate with bombs" ^[14].

if for any reason a deal is not shortly reached, which it probably will be, and if the Hormuz Strait is not immediately “Open for Business,” we will conclude our lovely “stay” in Iran by blowing up and completely obliterating all of their Electric Generating Plants, Oil Wells and Kharg Island (and possibly all desalinization plants!), which we have purposefully not yet “touched.” — Donald Trump

In the meantime, we'll negotiate with bombs. — Pete Hegseth

But bombing a port does not reopen a strait. The missiles that close Hormuz are fired from mobile launchers and underground facilities. Hegseth himself conceded to the Senate that the US "never expected they would stop having capabilities to shoot" — the question is scale, not existence ^[15].

We never expected they would stop having capabilities to shoot. The question is at scale against an opponent like the United States of America. — Pete Hegseth

The gap is not a resource shortage that more interceptors could close. It is a design difference between two militaries built for different purposes. The US military destroys enemy military assets: operations centers, aircraft hangars, drone storage sites, nuclear facilities. It was never built to stand guard over commercial cloud infrastructure. Iran's military, by contrast, was built to wage economic warfare against a technologically superior adversary — to close a strait, to strike a data center, to hack a network, to make the cost of fighting unsustainable for the other side's economy. AWS telling its customers to leave the Gulf is a corporate retreat no military victory reverses, because the bombing campaign operates on a different layer than the one Iran is winning on.