AWS outage underscores urgent need for cloud resilience

By Francis Allan L. Angelo

A widespread Amazon Web Services (AWS) outage this week disrupted access to major apps and digital platforms, exposing vulnerabilities in the infrastructure that powers much of the global internet.

While speculation initially pointed to a potential cyber attack, early reports confirm the incident stemmed from an internal infrastructure failure rather than malicious activity.

“While major internet outages often raise immediate concerns of a cyber attack, current reports indicate the significant AWS disruption was caused by an internal infrastructure fault, rather than malicious activity,” said Darren Guccione, CEO and co-founder of Keeper Security.

“It’s an important distinction, as not every system’s failure is the result of a cybersecurity breach, and conflating the two can blur understanding of where the real risks lie,” he said.

The incident reignited concern about the increasing dependence on a few dominant cloud service providers like AWS, which support countless enterprise operations and digital services worldwide.

“Modern IT ecosystems are complex, interconnected and highly dependent on a handful of critical cloud providers,” Guccione said.

“When an incident of this scale occurs, whether through technical failure or misconfiguration, the impact on global operations can be just as severe as a coordinated cyber attack,” he added.

For businesses, the outage offers a sobering reminder of the need for robust continuity planning that addresses both cyber and non-cyber risks.

“Business continuity plans should account for both cyber and non-cyber disruptions, ensuring that privileged access, authentication and backup systems remain secure and functional, even when core infrastructure is affected,” Guccione said.

Zero-trust security models and Privileged Access Management (PAM) tools are increasingly recognized as critical for maintaining visibility and control during both attacks and outages.

“Zero-trust frameworks and Privileged Access Management (PAM) solutions are designed to protect against malicious actors,” Guccione said.

“However, they can also play a critical role in maintaining visibility and control during system outages, while improving a customer’s resilience and incident response capabilities,” he added.

“True resilience isn’t just about preventing attacks; it’s about ensuring stability when failures occur,” Guccione said.

In a follow-up statement, Guccione emphasized how cloud dependence has reshaped risk and responsibility in modern enterprises.

“The recent AWS outage highlights both the power and vulnerability of the concentrated number of cloud systems that underpin our global economy,” he said.

“Providers like AWS have transformed how organizations operate, innovate and scale, but with that scale comes shared responsibility,” he said.

“When a single update can disrupt millions of users around the world, resilience must be built into every layer of the digital supply chain,” Guccione added.

He said organizations that successfully navigate such disruptions are those that treat outages as inevitable and prepare accordingly with redundancy and strong governance.

“Resilient businesses operate with that mindset,” Guccione said.

“They assume disruption will occur and design accordingly by embedding continuity planning, redundancy and disciplined access controls into their operations,” he added.

Security frameworks such as PAM and zero-trust enable organizations to maintain control and protect sensitive systems even when core services are down.

“They ensure that when systems go offline, administrators can still maintain visibility, enforce least-privilege access and protect critical infrastructure from opportunistic cyber attacks,” Guccione said.

“While this outage was not the result of malicious activity, instability of this scale can create openings for exploitation,” he said.

Guccione urged companies to implement continuous authentication, encrypted secrets management and strong identity security to prevent cascading risks during technical failures.

He also noted that the cost of outages extends beyond revenue loss to long-term impacts on brand trust and customer confidence.

“The economic impact of downtime reaches far beyond immediate loss,” Guccione said.

“Reputational damage, eroded customer confidence and operational delays can linger long after systems are restored,” he said.

“In this environment, trust has become the new measure of uptime,” he added.

Though some organizations are pursuing multi-cloud strategies to reduce dependency on a single provider, Guccione stressed that internal consistency is what builds true resilience.

“Multi-cloud strategies can help distribute risk, but true resilience comes from consistency through unified access controls, transparent governance and secure automation across every environment,” he said.

“Cloud providers, partners and customers all play a role,” Guccione said.

“The goal is not to prevent every outage, but to ensure that when disruptions occur, organizations remain in command of their systems and data,” he added.

“Resilience is no longer an aspiration,” Guccione concluded.

“It is the defining metric of digital trust, and the foundation of a secure, connected future,” he said.