---
id: 1453
title: "A few notes on AWS Nitro Enclaves: Attack surface"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/09/24/notes-on-aws-nitro-enclaves-attack-surface/"
published_at: "2024-09-24 13:00"
tags: ["cloud", "cloud-security", "aws", "confidential-computing", "side-channel", "nitro-enclaves", "attestation"]
phying_url: "https://phying.com/item/1453"
lang: en
---

# A few notes on AWS Nitro Enclaves: Attack surface

## Summary

Trail of Bits maps the attack surface of AWS Nitro Enclaves, covering vsock pitfalls, randomness, side channels, memory, time sources, and attestation, with guidance for hardening deployments.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-09-24 13:00
- **Original:** https://blog.trailofbits.com/2024/09/24/notes-on-aws-nitro-enclaves-attack-surface/
- **Phying News:** https://phying.com/item/1453