AWS announces EC2 instance attestation
aws.amazon.com22 ポイント投稿者 patch_cable9 コメント
- Keys or other secrets can only be decrypted (via KMS) by an EC2 instance if it is running an approved AMI.
- You could build a certificate authority (CA) which only issues a certificate to an instance running an approved AMI.
If there is more friction to communicate with me I expect to hear from people less often.
As an example, my friends that only use Discord and not SMS or Signal definitely hear from me less frequently. It doesn’t mean we’re not friends, but we do communicate less frequently.