"‘Order from Amazon’: How tech giants are storing mass data for Israel’s war", 4 August 2024

On July... the commander of the Israeli army’s Center of Computing and Information Systems unit — which provides data processing for the whole military — spoke at a conference titled “IT for IDF” in Rishon Lezion, near Tel Aviv. In her address to an audience of about 100 military and industrial personnel, of which +972 Magazine and Local Call obtained a recording, Col. Racheli Dembinsky confirmed publicly for the first time that the Israeli army is using cloud storage and artificial intelligence services provided by civilian tech giants in its ongoing onslaught on the Gaza Strip. In Dembinsky’s lecture slides, the logos of Amazon Web Services (AWS), Google Cloud, and Microsoft Azure appeared twice.

Cloud storage is a means of preserving large amounts of digital data off-site, often on servers that are managed by a third-party provider. Dembinsky initially explained that her army unit, known by its Hebrew acronym Mamram, already used an “operational cloud” hosted on internal military servers, rather than on public clouds run by civilian companies. She described this internal cloud as a “weapons platform,” which includes applications for marking targets for bombings, a portal for viewing live footage from UAVs over Gaza’s skies, as well as fire, command, and control systems.

But with the onset of the Israeli army’s ground invasion of Gaza in late October 2023, she continued, the internal military systems quickly became overloaded due to the enormous number of soldiers and military personnel who were added to the platform as users, causing technical problems that threatened to slow down Israel’s military functions.

But the “most important” advantage that the cloud companies provided, Dembinsky said, was their advanced capabilities in artificial intelligence. “The crazy wealth of services, big data and AI — we’ve already reached a point where our systems really need it,” she said with a smile. Working with these companies, she added, has granted the military “very significant operational effectiveness” in the Gaza Strip.

....a new investigation by +972 and Local Call can reveal that the Israeli army has in fact stored some intelligence information collected via the mass surveillance of Gaza’s population on servers managed by Amazon’s AWS. The investigation can also reveal that certain cloud providers supplied a wealth of AI capabilities and services to Israeli army units since the start of the Gaza war.

Sources in Israel’s Defense Ministry, the Israeli arms industry, the three cloud companies, and seven Israeli intelligence officials who have been involved in the operation since the start of the ground invasion in October, described to +972 and Local Call how the military procures private sector resources to enhance its wartime technological capacities. According to three intelligence sources, the army’s cooperation with AWS is particularly close: the cloud giant provides Israel’s Military Intelligence Directorate with a server farm which is used to store masses of intelligence information that assists the army in the war. 

According to multiple sources, the exponential capacity of the AWS public cloud system allows the army to have “endless storage” for holding intelligence on almost “everyone” in Gaza. One source who used the cloud-based system during the current war described making “orders from Amazon” for information while carrying out their operational tasks, and working with two screens — one connected to the army’s private systems, and the other connected to AWS.

Military sources emphasized to +972 and Local Call that the scope of intelligence collected from the surveillance of all Palestinian residents of Gaza is so large that it cannot be stored on military servers alone. In particular, according to intelligence sources, much more extensive storage capabilities and processing power were needed to keep billions of audio files (as opposed to just textual information or metadata), which compelled the army to turn to the cloud services offered by tech companies. 

The vast amount of information stored in Amazon’s cloud, the military sources testified, even helped on rare occasions to confirm aerial assassination strikes in Gaza — strikes that would have also killed and harmed Palestinian civilians. Taken altogether, our investigation further exposes some of the ways in which major tech corporations are contributing to Israel’s ongoing war — a war that has been flagged by international courts for suspected war crimes and crimes against humanity on illegally occupied territory.

...

‘The cloud has information on everyone’

Sources told +972 and Local Call that most of the Israeli army’s intelligence information about Palestinian military operatives is stored on the army’s internal computers rather than the public cloud, which is connected to the internet. However, according to three security sources, one of the data systems used by Israel’s Military Intelligence Directorate is stored on Amazon’s public cloud, AWS.

The military has been using this system in Gaza for mass surveillance since at least the end of 2022, but it wasn’t considered particularly operational before the current war. Now, according to these sources, the Amazon system contains an “infinite store” of information for the army to use. 

Defense sources affirmed that the intelligence information kept on AWS is still considered “negligible” in terms of its operational use, compared to what is kept on the military’s internal systems. However, three sources who took part in the army’s attacks said that it was used in a number of cases to provide “supplementary information” ahead of airstrikes against suspected military operatives, some of which killed many civilians.

As +972 and Local Call revealed in a previous investigation, the Israeli army authorized the killing of “hundreds of civilians” in attacks against senior Hamas commanders at the level of brigade commander and sometimes even battalion commander. In some of these cases, security sources explained, Amazon’s cloud was operationalized.

Sources said that the AWS-based system is particularly useful for Israeli intelligence because it can hold information “on everyone,” with no storage limitations. This sometimes had operational advantages: one intelligence source described a “really fateful” moment in the war, when the army located a senior member of Hamas’ military wing inside a large, multi-story building filled with hundreds of refugees and sick people. The source described using AWS to gather information on who was in the building. The attack, he said, was ultimately aborted because it was unclear exactly where the senior operative was hiding, and the army feared that going ahead with it would further harm Israel’s image.

Another major incentive for working with the cloud giants is their artificial intelligence capabilities and the graphics processing unit (GPU) server farms that support them. One intelligence source, who participated in discussions about shifting military intelligence to the public cloud, said that their superiors “talked about how if they migrate to the cloud, then [the cloud companies] also have their own STT [speech-to-text capabilities]. These are good; they have many capabilities. Why develop everything in the army unit if the capabilities already exist?”

The workflow described to +972 and Local Call by intelligence officers — “ordering” data from the public AWS cloud then sending it to a closed military network — matches details in a book authored in 2021 by the current commander of Unit 8200, an elite unit within Israel’s Military Intelligence Directorate, who was recently revealed by The Guardian to be Yossi Sariel.

“How can the security establishments use the ‘Amazon cloud’ and feel secure?” Sariel wrote, advocating as a solution for a special network in which the military’s internal system and the public cloud could securely “communicate with each other all the time.” The scope of secret information collected by Israeli intelligence is so big, he added, that it can be stored “only in companies such as Amazon, Google, or Microsoft.” 

In the same year, writing in an Israeli intelligence journal, the deputy commander of Unit 8200 called for “new partnerships” with the public cloud providers, since their AI capabilities are “irreplaceable” and superior to the army’s. He hinted that the cloud companies will also gain from partnering with the military: “Aman [Military Intelligence] holds most of the data in the IDF, including data about the enemies, from a wide variety of sensors — data that civilian companies would pay a fortune to get access to.”

‘What the IDF uses will be one of the best selling points’

For years, according to sources in the military and the weapons industry, Microsoft Azure was considered Israel’s main cloud provider, selling its services to the Defense Ministry and army units that deal with classified information. According to one source, Azure was supposed to provide the Israeli military with the cloud on which surveillance information would be stored — but Amazon offered a better price. Sources in the cloud companies, who were privy to the ties with Israel’s Defense Ministry, said that since Amazon won the Nimbus tender, it has been aggressively competing with Azure, hoping to replace it as the army’s top service provider. 

Kushnir, of Comm-IT, explained that in the past, “most government and military agencies invested a lot in development and creating systems based on Azure.” But since Azure didn’t win the Nimbus tender, he continued, there has been a “certain migration process” at the Defense Ministry to Google’s and Amazon’s servers, which accelerated during the current war.

Sources in the high-tech industry said that the Israeli Defense Ministry is considered an important and “strategic” customer for the three cloud companies. This is not only because of the large financial scope of the transactions, but because Israel is perceived as influential in shaping opinion among security agencies worldwide and in leading “trends” that other agencies adopt.

“For [the cloud companies], it’s the strongest marketing,” Dadon said. “What the IDF uses was and will be one of the best selling points of products and services in the world. For them, it’s a laboratory. Of course they want to [work with us].”

Dadon said that he held many meetings with representatives of AWS, Microsoft Azure, and Google Cloud in Israel as well as on trips to the United States. He was also in contact with the cloud giants about a classified tender called Project Sirius.

First reported in the Israeli financial newspaper Globes in 2021, Sirius is considered much more sensitive than Nimbus, and has yet to be signed with any of the tech companies. In May, the military announced on its website it is seeking to hire an expert who will “work with the big cloud providers” to “transfer [military] systems into the public cloud (Nimbus)”, and to “prepare the upload of core, operational systems, into the security cloud” under the framework of the Sirius tender.

“Sirius is a private and air-gapped security cloud [isolated from public and other networks], and it is intended only for the IDF and the Defense Ministry,” Dadon explained. “There have been discussions for more than a decade about what this will look like.” This new cloud, according to three security sources, is supposed to be disconnected from the internet and built on the infrastructure of the large cloud providers, allowing all Israeli security agencies to use it for classified systems. 

The public cloud services, according to Dadon, have the potential to enhance the military’s lethality.

‘You’re fighting from inside your laptop’

In her lecture last month, Dembinsky called the current military operation in Gaza “the first digital war.” While this seems like an exaggeration, given that the 2021 offensive on the Strip also used digital capabilities, Israeli defense sources said that the army’s digitization processes have significantly accelerated during the current war. According to them, commanders in the field walk around with encrypted smartphones, message in an operational chat similar to WhatsApp (yet unrelated to the company), upload files to a shared drive, and use countless new applications.

“You’re fighting from inside your laptop,” said an officer who served in a combat operations room in Gaza. In the past, “you would see the whites of your enemy’s eyes, look through binoculars and see him explode.” Today, however, when a target appears, “you tell [soldiers] through the laptop, ‘Shoot with the tank.'”

‘It’s direct participation on the tools used to kill Palestinians’

In recent years, Amazon has become not only a partner of the Israeli army, but also a provider of cloud services for several Western intelligence agencies. In 2021, AWS signed an agreement with U.K. intelligence agencies GCHQ, MI5, and MI6 to store “classified” information and speed up the use of AI tools. The Australian government similarly announced this month that it would invest U.S. $1.3 billion to build a cloud for “top secret” intelligence material on Amazon’s servers. The tech giant also signed an agreement with the Pentagon, along with three other large companies, to build a giant cloud that would serve the U.S. Department of Defense for “all levels of classification.”

Amazon publishes vague rules for “Building AI Responsibly,” which refer only to “appropriately obtaining, using, and protecting data,” and “preventing harmful system output and misuse.” Microsoft’s Responsible AI Principles and Approach state: “We’re committed to making sure AI systems are developed responsibly and in ways that warrant people’s trust.”

Leading multi-national corporations, SMB’s, start-ups, private and corporate investors, venture capital firms, experts and clients attend the Cybertech Israel Conference and Exhibition, in Tel Aviv,, January 31, 2017. (Miriam Alster/Flash90)

Google also publishes a list of its AI Principles which state more clearly that Google “will not design or deploy AI in … technologies that cause or are likely to cause overall harm; … weapons or other technologies whose principal purpose or implementation is to cause or directly facilitate injury to people … technologies that gather or use information for surveillance violating internationally accepted norms … [or] technologies whose purpose contravenes widely accepted principles of international law and human rights.”

However, Gabriel Schubiner, an activist and organizer with No Tech For Apartheid, says these principles have “no real effect” because cloud companies “use them as PR to show how responsible they are.” According to him, the companies have no way of knowing in real time how their customers are using their services.

Schubiner — who previously worked at Google, and took part in a protest by Google employees against the supply of technology they claim is being used by the Israeli military in the Gaza war — says Google has always used “vague language” when stating its ethical principles. Moreover, he says, the company continues to claim that its contracts with Israel are “first and foremost for civilian use, even though it is clear that many of the actions at Nimbus are aimed at military use.”

A defense source told +972 and Local Call that most of the new contracts between the military and cloud companies since the war began have been realized through the Nimbus tender. However, the military can also forge and deepen ties with cloud companies through Defense Ministry tenders or through contracts that predate Project Nimbus. +972 and Local Call could not confirm whether the AWS cloud, used for storing intelligence information, was purchased as part of Project Nimbus.

“Neither company has publicly disclosed what, if any, human rights due diligence they carried out before participating in Project Nimbus,” Zach Campbell, a digital rights expert at Human Rights Watch, explained. “They haven’t mentioned which, if any, red lines there are in terms of what would be permissible use of their technology.”

Kushnir, who has been helping Israeli military units migrate to the cloud, is not afraid of the protests against the cloud companies’ partnerships with Israel succeeding. “You have to remember that the same companies run similar government and military clouds in the United States, the U.K., and NATO,” he said. “These are not start-up companies, they are global ICT powerhouses.”

Nadim Nashif, the executive director of 7amleh – The Arab Center for the Advancement of Social Media, which focuses on Palestinian digital rights, said that his basic demand from the cloud companies is that they “make sure that their products are not used to harm people,” which is not currently the case in practice. According to him, despite rhetoric about concern for human rights, the cloud giants’ products are sold “to governments and regimes that oppress people” — including the Israeli army.

Regarding the lack of oversight of the cloud companies’ projects and partnership, Nashif added: “In the local context, in the case of an occupation, the question of whether [these services] are sold for military use, to the occupation army, or whether it is sold for civilian use, becomes much more important.” According to him, the closeness that exists in Israel between the private sector and the military facilitates cooperation without red lines, which leads to “more control over [Palestinians] — even more so amid the war.”

Google and Microsoft declined to respond to multiple requests for comment from their offices in Israel and the United States. Amazon Web Services stated: “AWS is focused on making the benefits of our world-leading cloud technology available to all our customers, wherever they are located. We are committed to ensuring our employees are safe, supporting our colleagues affected by these terrible events, and working with our humanitarian relief partners to help those impacted by the war.”