The Hidden Ties Between Google and Amazon’s Project Nimbus and Israel’s Military

On April 16, police entered Google offices in New York and California to detain several employees protesting a $1.2 billion cloud contract with Israel’s government called Project Nimbus. The deal, shared with Amazon, has met pushback from some employees at both companies since 2021, but the protests have grown louder since Israel’s renewed conflict with Hamas after the attacks of October 7, 2023.

Current and former Google and Amazon workers protesting Project Nimbus say it makes the companies complicit in Israel’s armed conflicts and its government’s illegal and inhumane treatment of civilian Palestinians. Google has insisted that it is not aimed at military work and is not “relevant to weapons or intelligence services,” while Amazon, seemingly, has not publicly discussed the scope of the contract.

But a WIRED review of public documents and statements by Israeli officials and Google and Amazon employees shows that the Israel Defense Forces have been central to Project Nimbus since its inception, shaping the project’s design and serving as some of its most important users. Top Israeli officials appear to think the Google and Amazon contract provides important infrastructure for the country’s military.

In February, at a conference dedicated to Project Nimbus, the head of Israel’s National Cyber Directorate, Gaby Portnoy, was quoted by Israeli media as crediting the contract with helping the country’s military retaliation against Hamas.

“Phenomenal things are happening in battle because of the Nimbus public cloud, things that are impactful for victory,” Portnoy said, according to an article published in People & Computers, which coorganized the conference. “And I will not share details.” Portnoy and the Cyber Directorate did not respond for comment.

Portnoy’s statement contradicts Google’s statements to media, which have sought to downplay the military connections of Project Nimbus. “This work is not directed at highly sensitive, classified, or military workloads relevant to weapons or intelligence services,” Google spokesperson Anna Kowalczyk said in an emailed statement. “The Nimbus contract is for workloads running on our commercial cloud by Israeli government ministries, who agree to comply with our Terms of Service and Acceptable Use Policy.”

Google’s terms forbid customers from “high risk activities,” defined to include situations where “use or failure of the Services would reasonably be expected to lead to death, personal injury, or environmental or property damage (such as the creation or operation of nuclear facilities, air traffic control, life support systems, or weaponry).” It is unclear how supporting IDF combat operations would fit within those rules.

Portnoy’s claim and other documents and statements reviewed by WIRED add to recent reporting that appears to confirm the Nimbus contract’s long-established military connections. Time quoted an internal Google document that said the Israeli Ministry of Defense has its own “landing zone” into the company’s Project Nimbus infrastructure. The Intercept reported that two state-owned Israeli arms companies are required to use Google and Amazon cloud services through Project Nimbus.

In response to a detailed list of questions from WIRED, Google spokesperson Anna Kowalczyk repeated the company’s boilerplate statement.

Likewise, Amazon spokesperson Duncan Neasham repeated boilerplate language Amazon has used in the past to talk about Project Nimbus, which says the company provides its technology to customers “wherever they are located” and that employees have the “right to express themselves.”

“We are committed to ensuring our employees are safe, supporting our colleagues affected by these terrible events, and working with our humanitarian relief partners to help those impacted by the war,” Neasham added. (Sasha Trufanov, a Russian-Israeli Amazon employee, is currently being held hostage by Hamas in Gaza. He was last seen alive in a hostage video released on May 28.)

Making Project Nimbus

Project Nimbus began in 2019 as a major upgrade to Israeli government technology. The multi-year project, led by the Ministry of Finance, had no specific end-date and called for the government to pick preferred cloud providers that would build new data centers to store data securely inside Israel. Like other Cloud customers, the Israeli government could use Google for data storage, and use its built-in tools for machine learning, analyzing data, and developing apps.

An early trace alluding to the Israeli military’s involvement in Project Nimbus came in a June 2020 LinkedIn post from Shahar Bracha, former chief executive officer of Israel’s National Digital Agency, then called the ICT Authority. “I am happy to update that the Ministry of Defense (in the name of the IDF) decided to join with the Cloud Center and in doing so changed the center to be greater and more attractive,” he wrote, suggesting the military would be a major user of services under the project.

Over the three-year bidding process, many other documents and public statements were explicit about the IDF’s intimate involvement in Nimbus and its expected role as a user. “Project Nimbus is a project to supply public cloud services to the government, the defense department and the IDF,” a statement provided by Israel’s Ministry of Finance in 2022 to Israeli online news outlet Mako said. It added that “the relevant security bodies were partners of this project from its first day, and are full partners still.”

The IDF’s involvement included having a say in which companies would win the Nimbus contract. An Israel State Comptroller audit report from 2021 that says the IDF joined “to enable the transfer of declassified systems to the public cloud” and notes that “the Ministry of Defense and the IDF are crucial parts of the team working on the tender, both in creating the requirements and in assessing the outcomes.”

Ultimately, Google and Amazon won the Project Nimbus contracts, beating out Microsoft and Oracle. A May 2021 press release in English that congratulated the companies and announced “The Israeli Government is Moving to the Cloud” said that Project Nimbus is intended to serve “the Government, the Security Services and other entities.”

The Times of Israel reported the same day that Google and Amazon could not pick and choose which agencies they worked with, quoting an attorney for the Israeli Finance Ministry saying that the contract bars the companies “from denying services to particular government entities.”

That appears to still include the IDF. WIRED identified several Israeli government statements and documents published since 2022 that confirm the IDF’s continued involvement with Project Nimbus, although they do not provide details of the tools and capabilities it uses.

For instance, a government document published on June 15, 2022, that outlines the scope of the project, says “The Ministry of Defense and the IDF” will get a dedicated “digital marketplace” of services they can access under Project Nimbus.

In July 2022, The Intercept also reported on training documents and videos provided to Nimbus users in the Israeli government that revealed some of the specific Google technologies the contract provided access to. They included AI capabilities such as face detection, object tracking, sentiment analysis, and other complex tasks.

Official government pages old and new, both in Hebrew and English, feature the same boilerplate description of Project Nimbus. It calls the contract “a multiyear and wide-ranging flagship project, led by the Government Procurement Administration in the Accountant General’s Division in the Ministry of Treasury together with the National Digital Unit, the Legal Bureau in the Ministry of Finance, the National Cyber Unit, the Budget Division, the Ministry of Defense and the IDF.” The statement appears on one of the main government pages about Project Nimbus, an undated news release, a 2022 cloud strategy document, and a press release from January 2023.

A version of the statement has also been posted in an Amazon guidance document about Nimbus from January 2023, and on the event page for the 2024 “Nimbus Summit,” a privately run event that brings together tech workers from Amazon, Google, and the dozens of other companies that have played some hand in modernizing Israel’s tech infrastructure in recent years.

Close Ties

Social media posts by Israeli officials, Amazon employees, and Google employees suggest the country’s military remains closely involved with Project Nimbus—and the two US cloud companies working on it.

In June 2023, Omri Nezer, the head of the technology infrastructure unit at the Israeli Government Procurement Administration, posted a recap of a cloud conference held by the Israeli government to LinkedIn. He wrote that it was meant to bring together people from “different government offices within ‘Project Nimbus.’”

Nezer’s post mentions a panel at the conference that featured “an IDF representative” and the head of engineering IT for Rafael Advanced Defense Systems, a defense company originally created as a research and development company for the Israeli military. The Intercept reported last month that Rafael and Israel Aerospace Industries, both Israeli government-backed weapons manufacturers, are “obligatory customers” of Google and Amazon through Project Nimbus. Amazon spokesperson Duncan Neasham tells WIRED that Rafael is “not required to use AWS or Google only for cloud services” and can “also use other cloud providers’ services.”

National security agencies remain an important part of Project Nimbus. In a 2023 LinkedIn post tagged #nimbus, Omri Holzman, defense team lead at Amazon Web Services, summarized a recent event AWS put on for defense customers. “We had attendees from each security organization in Israel,” Holzman wrote, without specifying which agencies. “AWS puts a lot of focus on the National Security (NatSec) community which has its unique needs and requirements.”

Google has recently been pitching Israeli policing and national security officials on its Gemini AI model, the centerpiece of the search company’s attempts to compete with OpenAI’s ChatGPT. Shay Mor, director and head of public sector and defense for Google Cloud Israel, said in a March Linkedin post that he recently presented information about its “groundbreaking Nimbus projects” with agencies that include the Israeli Police, the Israel National Digital Agency, and the Israel National Cyber Directorate.

“It was an honor and a pleasure to present our Gemini technology and some of our groundbreaking Nimbus projects with the Israeli Police, Israel National Digital Agency, Ministry of Education, and the Israel National Cyber Directorate today at the Nimbus event,” Mor posted, referring to the same event where Portnoy the Cyber Directorate leader said Nimbus helped the battle with Hamas. Mor didn’t specify how the IDF or security agencies could use Google’s AI, but the company has said Gemini could help its cloud customers write code, analyze data, or identify security challenges.

In his own reported comments at the event, Portnoy suggested that the Nimbus project is set to deepen Amazon’s and Google’s ties with Israel’s national security apparatus. He said that the companies have been “working partners” on a new project creating “a framework for national defense” with cloud-based security tools. Portnoy likened it to Israel’s missile defense system, calling it the “Iron Dome of Cyber.”

Growing Outcry

The recent protests against Project Nimbus do not mark the first time that a cloud deal with military connections has prompted protests—in particular, protests inside Google. A former Google employee who was fired along with dozens of others after protesting Project Nimbus in April says years of trying to steer the company in a more ethical direction had left them exhausted. “I became convinced that basically, you cannot trust anything they say,” says the former employee. They protested in 2018 against Project Maven, a now-lapsed Pentagon contract that saw Google algorithms analyze drone surveillance imagery, Google’s work with US Customs and Border Protection in 2019, and Project Nimbus starting in 2021 with the group No Tech for Apartheid. “I have zero trust in these people.”

The first major action against Project Nimbus took place in October 2021, when a coalition of Google and Amazon employees published an open letter in The Guardian decrying the contract. No Tech for Apartheid also formed explicitly in response to Project Nimbus at around this time. Many of the same people who joined these early organizing efforts were also involved in No Tech for ICE, a tech worker-led movement formed in 2019 to oppose their companies working for Immigration and Customs Enforcement.

Ariel Koren, at the time a project manager at Google who helped draft the open letter, says that her manager told her in early November 2021 that she had to agree to move to São Paulo, Brazil, within 17 business days “or lose her position,” according to the Los Angeles Times. Koren announced that she had resigned in March 2022. A few weeks later, a group of tech workers and activists led protests outside Google and Amazon offices in New York, Seattle, and Durham, North Carolina, to express solidarity with Koren and her demand to wind up Project Nimbus.

Protests have escalated from there. Emaan Haseem, a former engineer for Google Cloud, was fired in April alongside 48 others after she traveled from Seattle to San Francisco to participate in a group sit-in inside the office of Google Cloud CEO Thomas Kurian. She says that No Tech for Apartheid is part of a wider movement known as Boycott Divest Sanction, using economic pressure to encourage Israel to end occupation of Palestinian territories.

Opposition to Israel’s military actions in Gaza and the West Bank, Haseem said, is a central pillar of No Tech for Apartheid. Poject Nimbus “is a contract that stands out the most for anyone who has their eyes on the genocide in Gaza currently.”

Facebook
Twitter
LinkedIn
Telegram
Tumblr