AWS Nitro Enclaves

Disclosure: I work at AWS, and I played a part in the design of this feature. But not sadly not any coding for this one.

Since this is HN, I thought additional links to the open-source licensed software that we released today might be helpful. A lot of it is written in Rust.

Nitro Enclaves CLI - https://github.com/aws/aws-nitro-enclaves-cli

Application that uses ACM managed certificates to do TLS termination inside a Nitro Enclave - https://github.com/aws/aws-nitro-enclaves-acm

A library for interacting with the TPM-like device called the Nitro Security Module (used to measure code for attestation purposes) - https://github.com/aws/aws-nitro-enclaves-nsm-api

Some sample C code for use with Nitro Enclaves - https://github.com/aws/aws-nitro-enclaves-sdk-c

And a sample application showing how to use vsock to communicate - https://github.com/aws/aws-nitro-enclaves-samples

This is really cool. A secure enclave that's just a normal vm, with attestation capabilities is a pretty big deal.

I'm especially excited about the new ability to use ACM certificates on ec2 hosts (instead of just a load balancer)[0].

[0]: https://aws.amazon.com/about-aws/whats-new/2020/10/announcin...

And i just thought my phone was the only device capable of having a secure enclave.