from Hacker News

The Security Design of the AWS Nitro System

by timf on 11/18/22, 3:57 PM with 1 comments

  • by robszumski on 11/18/22, 9:07 PM

    I found the side channel protection and CPU/L1 isolation between customers to be particularly interesting.

    Very cool to see the physical hardware interconnects for resetting the system. Also the PCI bus as one of the isolating boundaries.

    I have worked on an open source project for managing Nitro Enclaves (https://github.com/edgebitio/enclaver), so it is cool to see how these build on this foundation to provide even more protection.