Project Amber - Intel's attestation service
summary
Project Amber is Intel’s SaaS attestation authority that verifies workload trustworthiness across clouds, initially supporting SGX and TDX, running attestation logic inside an SGX enclave for faithful verification, and protecting attestation records in an immutable ledger. It targets 99.95% uptime, offers federated deployment, open‑source client libraries (Go bindings), three integration modes (library, CLI, systemd/HTTP shim), Gramine integration, IETF EAT token compliance, Azure Attestation interoperability, and is in pilot with GA later this year.
AI-written summary · about
chapters (7)
- 0:00Introduction to Project Amber
- 3:13What is Project Amber
- 10:18Project Amber architecture overview
- 17:00Integrating with Amber client
- 21:37Interoperability with Azure Attestation
- 27:00Project Amber status and roadmap
- 30:32Q&A and closing remarks
related talks
46mOpen for AI: Secure paths to data collaboration volume and diversity
19mAttestation and identity provisioning to Intel SGX workloads
24mShrinking The Elephant - A Confidential Computing Attestation Sequel
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
36mBringing honest computing to the WASM world
17mVerifiable Build Environments in the Cloud: Powered by Sigstore and Enclaves
27mMaking Remote Attestation Useful on Linux