implementing-aws-nitro-enclave-security - Implement AWS Nitro Enclave security
Builds AWS Nitro Enclave confidential-computing environments with attestation, PCR-based KMS policies, signed enclave images, and vsock communication.
Tags
Updated: 2026-10-16Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Configure Nitro Enclave environments
- Build signed enclave images
- Record enclave PCR measurements
- Configure attestation-aware KMS policies
- Validate attestation documents
- Establish secure vsock channels
- Process sensitive data in isolation
Inputs
- AWS account
- EC2 instance
- KMS symmetric key
- Enclave IAM role
- Enclave application code
- Dockerfile
- PCR measurements
- Signing certificate
- Attestation document
- Sensitive data
Outputs
- Enclave image file
- KMS key policy
- Attestation validation result
- Vsock communication channel
- Isolated computation pipeline
- Encrypted response data
Requirements
- AWS account permissions
- Nitro-capable EC2 instance
- AWS CLI v2
- nitro-cli toolset
- Amazon Linux 2 or AL2023
- Docker
- AWS KMS permissions
- Nitro Enclaves SDK
- Configured allocator service
- At least 4 vCPUs