Comment: Why you should worry about Amazon’s opaque cloud

Amazon Cloud Services facilitate much in our digital lives, but Amazon is mum when things go south.

By Timothy L. O’Brien / Bloomberg Opinion

Amazon.com’s ubiquitous cloud-computing network, the spine for a lot of digital communications and transactions across the U.S., went dark for several hours on Tuesday.

Here are some things that might have freaked you out:

• You were jogging and couldn’t order your Roomba to vacuum the third floor of your house.

• You were at the airport and your Ring camera couldn’t show you who was at your front door.

• You were grocery shopping and couldn’t tell your smart fridge to scan its egg supply.

• You were in bed and Alexa couldn’t read headlines and weather to you.

• You had trouble buying stuff at a theme park.

• You couldn’t play “League of Legends.”

Who cares? This isn’t really essential, right?

The cloud has provided bounteous advantages but also excess; a cornucopia of nice-to-haves, much of it silly. Being locked out of your home because your Ring is haywire is more serious than not being able to film visitors on the stoop, of course. Seniors unable to turn on house lights at night or receive prescription drug deliveries because of cloud troubles is more problematic than being unable to stream “Free Guy.”

Even those comparisons don’t truly surface the most substantive threats to consider when digital meltdowns or significant hacks occur on vital private networks such as Amazon Web Services. AWS is the biggest cloud provider in the U.S., but outages happen with some regularity at other leading cloud services, too. Google Cloud Platform has had its share of woes, as has Microsoft’s Azure service.

ADVERTISEMENT
0 seconds of 0 secondsVolume 0%
Press shift question mark to access a list of keyboard shortcuts
00:00
00:00
00:00
 

These cloud networks not only power the consumer indulgences that people whine about when there’s an outage, they also fuel core government and corporate work such as national security and blockbuster financial transactions. Alphabet, Amazon, Microsoft and Oracle are all jockeying to secure an important cloud contact with the Defense Department, for example.

Yet some of these same cloud services have been central to startling and sprawling nation-state hacks over the last year involving, for example, the SolarWinds Corp. Based on the limited information Amazon disclosed on its “service health dashboard” about its Tuesday outage, hackers or a denial-of-service attack were not responsible. Amazon cited a “network device issue” and said the outage was largely confined to the East Coast. That’s about as much as we know because that’s all that Amazon decided to share. That lack of transparency and disclosure is a big problem, one that Amazon has shown little interest in resolving.

Widespread use of cloud computing is here to stay, and its benefits far outweigh its disadvantages. But Amazon’s secrecy — and its unwillingness to provide greater insight into its operations — is emblematic of how much unnecessary autonomy it enjoys. Amazon doesn’t have to operate this way.

Consider Microsoft. It has been willing to share information publicly about intrusions or breakdowns so it can help form public-private alliances to insulate computer networks. It has also taken the bold step of identifying countries such as Iran, North Korea, Russia and China for their roles in orchestrating digital assaults. Amazon, on the other hand, declined to testify at congressional hearings earlier this year about the SolarWinds breach, even though hackers used Amazon’s cloud servers to stage digital assaults. Regulators shouldn’t continue allowing it to stay mum, but Washington may lack the backbone needed to be more aggressive. A defense bill moving through Congress recently shed provisions that would have required companies to report cyberattacks and ransomware payments to the federal government.

Amazon runs a sophisticated shop, and its cloud architecture sits atop an armada of separate servers with lots of redundancies, abilities to scale and clever ways of balancing vast loads of information so breakdowns can be avoided. But it’s not foolproof nor bulletproof. Nothing is.

Recent digging from Wired and the Center for Investigative Reporting examined how cavalier Amazon appears to be with the “vast empire of customer data” it manages on the retail side of its business. The reporting indicated that Amazon’s oversight “had become so sprawling, fragmented and promiscuously shared within the company that the security division couldn’t even map all of it, much less adequately defend its borders.” Amazon disputed that account, noting what it described as a strong track record around digital security. It also emphasized its dedication to securing systems throughout the company.

Given that governments and corporations have outsourced so much of their network management, and given how the internet has become as essential as other necessities such as water and electricity, it would be useful to think of cloud services as a public utility of sorts; with all of the requisite disclosure and supervision that comes with that.

After all, it’s hazardous out there. Microsoft said on Monday that a federal court gave it the go-ahead to seize 42 websites from Chinese hackers who had been on intelligence-gathering sprees targeting government agencies, think tanks, universities and human rights organizations. Last week, a rural electric utility in Colorado serving 34,000 customers disclosed that a recent hack of its network “led to 90 percent of internal controls and systems becoming corrupted, broken or disabled.” It also said that “a majority of historical data dating back more than 20 years was lost.”

Think about all of that the next time your Roomba doesn’t respond.

This column does not necessarily reflect the opinion of the editorial board or Bloomberg LP and its owners. Timothy L. O’Brien is a senior columnist for Bloomberg Opinion.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Opinion

A visitor takes in the view of Twin Lakes from a second floor unit at Housing Hope’s Twin Lakes Landing II Wednesday, Feb. 22, 2023, in Marysville, Washington. (Ryan Berry / The Herald)
Editorial: Housing Hope’s ‘Stone Soup’ recipe for community

With homelessness growing among seniors, an advocate calls for support of the nonprofit’s projects.

toon
Editorial cartoons for Thursday, May 22

A sketchy look at the news of the day.… Continue reading

Comment: Cuts to science grants threat to our health, economy

Federal funding through the National Science Foundation has provided countless benefits to our lives.

Return of salmon after dam removal proves it works

A truly inspiring article published on May 7 in The Oregonian offers… Continue reading

Cuts to scientific research cut us off from solutions

Where to start with the actions Donald Trump has taken which worry… Continue reading

Comment: The gift 747 was only one problem in Mideast trip

Along with the thinly veiled bribe, came a shift to excuse the region’s autocratic monarchies.

Goldberg: Trump-backing Christians accuse Jews of antisemitism

There’s something off about Project Esther’s tagging of American Jews as supporters of Hamas.

Wildfire smoke builds over Darrington on Friday, Sept. 11, 2020 in Darrington, Wa. (Olivia Vanni / The Herald)
Editorial: Loss of research funds threat to climate resilience

The Trump administration’s end of a grant for climate research threatens solutions communities need.

Sarah Weiser / The Herald
Air Force One touches ground Friday morning at Boeing in Everett.
PHOTO SHOT 02172012
Editorial: There’s no free lunch and no free Air Force One

Qatar’s offer of a 747 to President Trump solves nothing and leaves the nation beholden.

The Washington State Legislature convenes for a joint session for a swearing-in ceremony of statewide elected officials and Governor Bob Ferguson’s inaugural address, March 15, 2025.
Editorial: 4 bills that need a second look by state lawmakers

Even good ideas, such as these four bills, can fail to gain traction in the state Legislature.

toon
Editorial cartoons for Wednesday, May 21

A sketchy look at the news of the day.… Continue reading

Burke: Don’t let Trump & Co. get away with ‘no comment’ on outrages

For the tiring list of firings, cuts, busted norms and unconstitutional acts, hold them accountable.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.