A few notes on AWS Nitro Enclaves: Images and attestation

By Paweł Płatek (GrosQuildu)

AWS Nitro Enclaves are locked-down virtual machines with support for attestation. They are Trusted Execution Environments (TEEs), similar to Intel SGX, making them useful for running highly security-critical code.

However, the AWS Nitro Enclaves platform lacks thorough documentation and mature tooling. So we decided to do some deep research into it to fill in some of the documentation gaps and, most importantly, to find security footguns and offer some advice for avoiding them.

This blog post …

attestation aws code critical documentation down environments images intel locked machines making nitro nitro enclaves platform running security sgx support tooling virtual virtual machines