Overview of the AWS Nitro System: Building Trust Through Secure Cloud Infrastructure
summary
AWS Nitro splits virtualization into dedicated hardware and minimal software, using Annapurna Labs SoC Nitro cards for a hardware root of trust, hardware-enforced isolation, secure boot and inline encryption, and a single encrypted operational API audited and authorized by design. Early work formally verifies 783 lines of boot code and the new Nitro Isolation Engine ships with a 330,000-line machine-checked proof of VM isolation; claims are supported by an NCC Group evaluation and are a default capability on Graviton5.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 6:21Trustworthy secure systems
- 9:52AWS Nitro System
- 13:27Proving Nitro trustworthiness
- 18:45Future of Nitro and confidential computing
- 21:34Trust in cloud infrastructure
related talks
55mSecurity design of the AWS Nitro System
46mEnhance security with the AWS Nitro System
24mNitro System Innovation
01h 00mBehind the scenes: AWS investments in security innovation
24mConfidential Compute Architecture
23mMore Secure and Confidential Computing on Linux with Nitro Enclaves
09mAn introduction to Confidential Computing
03mCustomer Spotlight