More Secure and Confidential Computing on Linux with Nitro Enclaves
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2021 · on Friday, 2021-12-10· at 12:10· Open Source Summit 演讲厅, 虚拟会议 (Virtual)·
summary
Covers AWS Nitro Enclaves as a Linux-integrated EC2 feature that creates isolated, hardened VM-like execution environments with no persistent storage, no interactive access (no SSH), and no external networking. Describes how enclaves prevent parent-instance users and processes (including root) from accessing enclave data, and how they reduce the attack surface for security‑critical applications running on Linux.
AI-written summary · about
chapters (5)
- 0:00Start
- 1:32Reducing the attack surface when processing sensitive data
- 14:30Integration with AWS KMS
- 19:58Encrypted authentication
- 22:17Nitro Enclaves BTG
related talks
09mAn introduction to Confidential Computing
24mConfidential Compute Architecture
45mConfidential Computing: Protecting Customer Data in the Cloud
55mSecurity design of the AWS Nitro System
25mOverview of the AWS Nitro System: Building Trust Through Secure Cloud Infrastructure
46mEnhance security with the AWS Nitro System
16mIntroduction to confidential computing
44mAdvancements in Confidential Computing