Cyber Security News

Middle East AWS Outage Sends Shockwaves Through Cloud Infrastructure Service

A severe infrastructure incident in the Middle East has triggered a massive Amazon Web Services (AWS) outage, disrupting critical cloud operations across the region.

The event, which aggressively impacted the ME-CENTRAL-1 (United Arab Emirates) and ME-SOUTH-1 (Bahrain) regions, left countless organizations unable to access essential compute, networking, and storage resources.

Physical Damage Sparks Data Center Outage

The primary disruption originated in the UAE region within a single Availability Zone, identified as mec1-az2.

At approximately 4:30 AM PST on March 1, external objects struck the data center. This physical impact created sparks and ignited a structural fire.

To safely manage the emergency, local fire departments completely shut off primary power and backup generators to the facility.

This abrupt loss of electricity instantly brought down Amazon Elastic Compute Cloud (EC2) instances, Amazon Elastic Block Store (EBS) volumes, and active databases confined to the affected zone.

This localized power loss created a massive ripple effect across the AWS ecosystem.

Amazon EC2 suffered a severe disruption, while critical database tools like Amazon Relational Database Service (RDS) and Amazon DynamoDB reported heavily degraded performance, as reported by AWS.

In the ME-CENTRAL-1 region, over 38 distinct cloud services were impacted, including AWS Lambda, Amazon Elastic Kubernetes Service (EKS), and Amazon Virtual Private Cloud (VPC).

Although AWS successfully resolved issues for 32 services like Amazon S3 and CloudWatch core networking APIs experienced prolonged failures.

Later that evening, a secondary wave of API connectivity issues struck the ME-SOUTH-1 (Bahrain) region. This secondary event degraded RDS and impacted 46 additional services, including AWS CloudFormation and AWS WAF.

Time (PST)RegionStatus and Event Description
04:30 AMME-CENTRAL-1Facility struck by objects; fire breaks out and power is cut.
06:09 AMME-CENTRAL-1AWS confirms localized power loss and isolates mec1-az2.
09:41 AMME-CENTRAL-1Details of the fire released; power restoration significantly delayed.
12:14 PMME-CENTRAL-1AWS deploys changes to fix failing EC2 networking APIs.
06:01 PMME-CENTRAL-1Recovery of AssociateAddress API; facility power remains offline.
09:56 PMME-SOUTH-1Increased API error rates detected in Bahrain (mes1-az2).

Mitigation and Infrastructure Security

AWS engineers rapidly routed traffic away from the compromised zone to stabilize the broader network.

However, services tied directly to the offline servers faced extended recovery times.

AWS advised administrators to bypass failing APIs, deploy alternate Availability Zones, and explicitly pass instance IDs when executing network queries.

The incident serves as a critical reminder of the importance of multi-AZ redundancy; clients utilising cross-zone architecture remained largely unaffected by the hardware failure.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago