AWS Nitro Enclaves

An isolated VM carved out of an EC2 instance with no storage, shell or external network.

Provider: aws
Kind: Virtual machine
Category: Compute
Official docs: https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html

Properties · 4 set by this component

property	type	values	required	kind default	this component
attestation · component property	boolean	—	no	true	inherited
diskEncryption	boolean	—	no	—	inherited
externalNetworking · component property	boolean	—	no	false	inherited
instances	integer	—	no	—	inherited
interactiveAccess · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ false
maxEnclavesPerParent · component property	integer	—	no	4	inherited
memoryGib	integer	—	no	—	inherited
os	enum	linux \| windows \| aix \| ibm-i	no	linux	▸ linux
persistentStorage · component property	boolean	—	no	false	inherited
publicIp	boolean	—	no	—	▸ false
sizeVcpu	integer	—	no	—	inherited
zoneRedundant	boolean	—	no	—	▸ false

Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

Stateful node without zone redundancyerror

stateful-node-without-zone-redundancy

A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.

— all of these hold:
— the node's `stateless` is false
— the node sits inside exactly 1 availability-zone group
— this does not hold:
— the node sits inside at least one cell group

Use it in a design

nodes:
  - { id: "nitro-enclave", component: "aws-nitro-enclave" }

Other Virtual machine products · 60

Auto Scalingalibaba-auto-scalingalibabacloudvirtual-machine Elastic Compute Servicealibaba-ecsalibabacloudvirtual-machine Edge Node Servicealibaba-ensalibabacloudvirtual-machine Simple Application Serveralibaba-simple-application-serveralibabacloudvirtual-machine Amazon EC2aws-ec2awsvirtual-machine Amazon EC2 Auto Scalingaws-ec2-auto-scalingawsvirtual-machine Amazon EC2 Dedicated Hostsaws-ec2-dedicated-hostawsvirtual-machine Amazon Elastic VMware Serviceaws-evsawsvirtual-machine Amazon Lightsailaws-lightsailawsvirtual-machine Azure BareMetal Infrastructureazure-baremetal-infrastructureazurevirtual-machine Azure Compute Fleetazure-compute-fleetazurevirtual-machine Azure Dedicated Hostazure-dedicated-hostazurevirtual-machine Azure Data Science Virtual Machineazure-dsvmazurevirtual-machine Nutanix Cloud Clusters on Azureazure-nutanix-cloud-clustersazurevirtual-machine Azure Virtual Machinesazure-virtual-machineazurevirtual-machine Azure Virtual Machine Scale Setsazure-vm-scale-setazurevirtual-machine Azure VMware Solutionazure-vmware-solutionazurevirtual-machine Crusoe Cloud VMcrusoevirtual-machine Firecrackerfirecrackervirtual-machine Microsoft Hyper-Vhyper-vvirtual-machine KubeVirtkubevirtvirtual-machine Lambda Cloud instancelambda-labsvirtual-machine KVM with libvirtlibvirtvirtual-machine Nebius AI Cloud VMnebiusvirtual-machine Nutanix AHVnutanix-ahvvirtual-machine OpenStack Novaopenstack-novavirtual-machine oVirtovirtvirtual-machine Proxmox VEproxmoxvirtual-machine Runpod Podrunpodvirtual-machine Vast.ai instancevast-aivirtual-machine Generic virtual machinevirtual-machinevirtual-machine VMware vSpherevspherevirtual-machine XCP-ngxcp-ngvirtual-machine XenServerxenservervirtual-machine DigitalOcean Bare Metal GPUsdigitalocean-bare-metal-gpudigitaloceanvirtual-machine Dropletsdigitalocean-dropletdigitaloceanvirtual-machine Droplet Autoscale Pooldigitalocean-droplet-autoscaledigitaloceanvirtual-machine Bare Metal Solutiongoogle-bare-metal-solutiongcpvirtual-machine Cloud TPUgoogle-cloud-tpugcpvirtual-machine Compute Enginegoogle-compute-enginegcpvirtual-machine

and 20 more → Virtual machine page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Nitro Enclaves: a hardened VM carved out of a parent EC2 instance with no persistent storage,
3# no interactive access and no external networking, reachable only over a local socket from its
4# parent ("What is Nitro Enclaves?"). Up to four enclaves per parent instance; attestation is built in.
5schemaVersion: "1"
6type: "component"
7id: "aws-nitro-enclave"
8kind: "virtual-machine"
9provider: "aws"
10docs: "https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html"
11defaults:
12  managed: false
13  os: "linux"
14  publicIp: false
15  zoneRedundant: false
16properties:
17  persistentStorage:
18    type: "boolean"
19    default: false
20  interactiveAccess:
21    type: "boolean"
22    default: false
23  externalNetworking:
24    type: "boolean"
25    default: false
26  attestation:
27    type: "boolean"
28    default: true
29  maxEnclavesPerParent:
30    type: "integer"
31    default: 4

The same page as markdown, for an agent: /catalogue/components/aws-nitro-enclave.md