The Security Design of the AWS Nitro System(docs.aws.amazon.com)

10 pointsby timfقبل 4 سنوات1 comments

docs.aws.amazon.com

The Security Design of the AWS Nitro System

https://docs.aws.amazon.com/whitepapers/latest/security-design-of-aws-nitro-system/security-design-of-aws-nitro-system.html

1 comments

robszumskiقبل 4 سنوات

I found the side channel protection and CPU/L1 isolation between customers to be particularly interesting.

Very cool to see the physical hardware interconnects for resetting the system. Also the PCI bus as one of the isolating boundaries.

I have worked on an open source project for managing Nitro Enclaves (https://github.com/edgebitio/enclaver), so it is cool to see how these build on this foundation to provide even more protection.