All Content tagged with Amazon Nitro Enclaves
AWS Nitro Enclaves enables customers to create isolated compute environments to further protect and securely process highly sensitive data such as personally identifiable information (PII), healthcare, financial, and intellectual property data within their Amazon EC2 instances.
Content language: English
Filter content
Select tags to filter
Sort by
Sort by most recent
17 results
I gate a KMS key on Nitro Enclave attestation so that only my enclave can decrypt a
particular piece of material.
## The trade-off as I understand it
Binding the key policy to `kms:RecipientAttestat...
1
answers
0
votes
98
views
asked a month ago
I'm building a signing service inside an AWS Nitro Enclave and I need a way to detect
rollback of state that the enclave itself authored but cannot store.
## Setup
The enclave has no persistent stor...
1
answers
0
votes
68
views
asked a month ago
Other popular TEE platforms (e.g., AMD SEV-SNP, Intel TDX) do not provide a secure wall clock time source. The trusted applications still have to go through the un-trusted OS to access the real time c...
1
answers
1
votes
374
views
asked 10 months ago
The documentation from [here](https://docs.aws.amazon.com/de_de/enclaves/latest/user/cmd-nitro-build-enclave.html) says that a KMS key arn can be used for the private-key and [this documentation ](htt...
3
answers
0
votes
234
views
asked 10 months ago
We have a process that crashes IMMEDIATELY upon start in a Nitro Enclave
(within 2 seconds), producing ZERO log output.
The same binary works perfectly on the host EC2 instance.
Questions:
1. When ...
Accepted AnswerAmazon Nitro Enclaves
3
answers
0
votes
328
views
asked a year ago
For ARM64 workloads in Nitro Enclaves, what are the recommended compiler flags?
Specifically:
1. Should we use -mcpu=neoverse-n1 (conservative) or -mcpu=neoverse-v1
(Graviton3-specific) or -mcpu=...
1
answers
0
votes
254
views
asked a year ago
We are deploying an LLM inference workload (llama.cpp) in Nitro Enclaves on
Graviton3-based instances (e.g., m7g.2xlarge, c7g.xlarge).
Our binary works perfectly on the EC2 host but crashes instantl...
1
answers
0
votes
329
views
asked a year ago
I'm reading the guide here
https://docs.aws.amazon.com/enclaves/latest/user/kubernetes.html
and I see the line
> amazon-linux-extras install aws-nitro-enclaves-cli -y
In AL2023 I would like to repla...
2
answers
0
votes
302
views
asked a year ago
The docker image can be found at `nesopie/tee-server-register:large`. I've run images that are much larger (although the individual files are much smaller) than this that work, but I assume since this...
1
answers
0
votes
277
views
asked 2 years ago
I want to create a server on the host image which streams all enclave logs when enclave run in --debug mode to the clients.
Using `nitro-cli console` over a enclave instance in debug mode streams onl...
0
answers
0
votes
319
views
asked 2 years ago
Running the command with a specific image id works:
`aws ec2 describe-images --image-id ami-01c4415fd6c2f0927 --region us-west-2 --query 'sort_by(Images, &CreationDate)[-1].{Name: Name, ImageId: Imag...
1
answers
0
votes
333
views
asked 2 years ago
**TL;DR:** Giving privileged access to AWS Nitro Enclave
I am trying to launch a [gVisor sandbox](https://gvisor.dev/) inside a AWS Nitro enclave. However, I am running into permission issues with me...
1
answers
0
votes
310
views
asked 2 years ago