More Secure and Confidential Computing on Linux with Nitro Enclaves

Explore the integration of AWS Nitro Enclaves into the Linux kernel for enhanced security and confidential computing in this 23-minute conference talk by Yubo Wang from Amazon. Learn how Nitro Enclaves provide isolated, hardened, and highly constrained environments for hosting security-critical applications. Discover the unique features of enclaves, including their lack of persistent storage, interactive access, and external networking. Understand how these separate virtual machines prevent SSH access and protect data and applications from processes, users, and even root access on the parent instance. Gain insights into how Nitro Enclaves, as an EC2 capability, enable the creation of isolated execution environments within EC2 instances, helping developers reduce the attack surface for sensitive data processing applications.