---
id: "aws-nitro-enclave"
type: "component"
kind: "virtual-machine"
provider: "aws"
category: "compute"
docs: "https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html"
url: "https://localhost:3000/catalogue/components/aws-nitro-enclave"
---

# AWS Nitro Enclaves

An isolated VM carved out of an EC2 instance with no storage, shell or external network.

| | |
|---|---|
| Provider | [aws](https://localhost:3000/catalogue?provider=aws) |
| Kind | [Virtual machine](https://localhost:3000/catalogue/kinds/virtual-machine) |
| Category | Compute |
| Official docs | [https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html](https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html) |

## Properties

| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| `attestation` | boolean | — | no | true | inherited |
| `diskEncryption` | boolean | — | no | — | inherited |
| `externalNetworking` | boolean | — | no | false | inherited |
| `instances` | integer | — | no | — | inherited |
| `interactiveAccess` | boolean | — | no | false | inherited |
| `managed` | boolean | — | no | false | **false** |
| `maxEnclavesPerParent` | integer | — | no | 4 | inherited |
| `memoryGib` | integer | — | no | — | inherited |
| `os` | enum | `linux`, `windows`, `aix`, `ibm-i` | no | "linux" | **"linux"** |
| `persistentStorage` | boolean | — | no | false | inherited |
| `publicIp` | boolean | — | no | — | **false** |
| `sizeVcpu` | integer | — | no | — | inherited |
| `zoneRedundant` | boolean | — | no | — | **false** |

Bold values are the ones this component pins.

## Rules that apply · 1

### Stateful node without zone redundancy `stateful-node-without-zone-redundancy` (error)

- Page: https://localhost:3000/catalogue/rules/stateful-node-without-zone-redundancy.md
- Why: A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.
- Applies to: every node in category compute
- Message: Stateful node '{{node.id}}' lives in exactly one availability zone. A zone outage takes its state with it.

It fires when:

- all of these hold:
  - the node's `stateless` is false
  - the node sits inside exactly 1 availability-zone group
  - this does not hold:
    - the node sits inside at least one cell group

## Other products of the same kind · 60

- [Auto Scaling](https://localhost:3000/catalogue/components/alibaba-auto-scaling.md) `alibaba-auto-scaling` — alibabacloud
- [Elastic Compute Service](https://localhost:3000/catalogue/components/alibaba-ecs.md) `alibaba-ecs` — alibabacloud
- [Edge Node Service](https://localhost:3000/catalogue/components/alibaba-ens.md) `alibaba-ens` — alibabacloud
- [Simple Application Server](https://localhost:3000/catalogue/components/alibaba-simple-application-server.md) `alibaba-simple-application-server` — alibabacloud
- [Amazon EC2](https://localhost:3000/catalogue/components/aws-ec2.md) `aws-ec2` — aws
- [Amazon EC2 Auto Scaling](https://localhost:3000/catalogue/components/aws-ec2-auto-scaling.md) `aws-ec2-auto-scaling` — aws
- [Amazon EC2 Dedicated Hosts](https://localhost:3000/catalogue/components/aws-ec2-dedicated-host.md) `aws-ec2-dedicated-host` — aws
- [Amazon Elastic VMware Service](https://localhost:3000/catalogue/components/aws-evs.md) `aws-evs` — aws
- [Amazon Lightsail](https://localhost:3000/catalogue/components/aws-lightsail.md) `aws-lightsail` — aws
- [Azure BareMetal Infrastructure](https://localhost:3000/catalogue/components/azure-baremetal-infrastructure.md) `azure-baremetal-infrastructure` — azure
- [Azure Compute Fleet](https://localhost:3000/catalogue/components/azure-compute-fleet.md) `azure-compute-fleet` — azure
- [Azure Dedicated Host](https://localhost:3000/catalogue/components/azure-dedicated-host.md) `azure-dedicated-host` — azure
- [Azure Data Science Virtual Machine](https://localhost:3000/catalogue/components/azure-dsvm.md) `azure-dsvm` — azure
- [Nutanix Cloud Clusters on Azure](https://localhost:3000/catalogue/components/azure-nutanix-cloud-clusters.md) `azure-nutanix-cloud-clusters` — azure
- [Azure Virtual Machines](https://localhost:3000/catalogue/components/azure-virtual-machine.md) `azure-virtual-machine` — azure
- [Azure Virtual Machine Scale Sets](https://localhost:3000/catalogue/components/azure-vm-scale-set.md) `azure-vm-scale-set` — azure
- [Azure VMware Solution](https://localhost:3000/catalogue/components/azure-vmware-solution.md) `azure-vmware-solution` — azure
- [Crusoe Cloud VM](https://localhost:3000/catalogue/components/crusoe.md) `crusoe` — default
- [Firecracker](https://localhost:3000/catalogue/components/firecracker.md) `firecracker` — default
- [Microsoft Hyper-V](https://localhost:3000/catalogue/components/hyper-v.md) `hyper-v` — default
- [KubeVirt](https://localhost:3000/catalogue/components/kubevirt.md) `kubevirt` — default
- [Lambda Cloud instance](https://localhost:3000/catalogue/components/lambda-labs.md) `lambda-labs` — default
- [KVM with libvirt](https://localhost:3000/catalogue/components/libvirt.md) `libvirt` — default
- [Nebius AI Cloud VM](https://localhost:3000/catalogue/components/nebius.md) `nebius` — default
- [Nutanix AHV](https://localhost:3000/catalogue/components/nutanix-ahv.md) `nutanix-ahv` — default
- [OpenStack Nova](https://localhost:3000/catalogue/components/openstack-nova.md) `openstack-nova` — default
- [oVirt](https://localhost:3000/catalogue/components/ovirt.md) `ovirt` — default
- [Proxmox VE](https://localhost:3000/catalogue/components/proxmox.md) `proxmox` — default
- [Runpod Pod](https://localhost:3000/catalogue/components/runpod.md) `runpod` — default
- [Vast.ai instance](https://localhost:3000/catalogue/components/vast-ai.md) `vast-ai` — default
- [Generic virtual machine](https://localhost:3000/catalogue/components/virtual-machine.md) `virtual-machine` — default
- [VMware vSphere](https://localhost:3000/catalogue/components/vsphere.md) `vsphere` — default
- [XCP-ng](https://localhost:3000/catalogue/components/xcp-ng.md) `xcp-ng` — default
- [XenServer](https://localhost:3000/catalogue/components/xenserver.md) `xenserver` — default
- [DigitalOcean Bare Metal GPUs](https://localhost:3000/catalogue/components/digitalocean-bare-metal-gpu.md) `digitalocean-bare-metal-gpu` — digitalocean
- [Droplets](https://localhost:3000/catalogue/components/digitalocean-droplet.md) `digitalocean-droplet` — digitalocean
- [Droplet Autoscale Pool](https://localhost:3000/catalogue/components/digitalocean-droplet-autoscale.md) `digitalocean-droplet-autoscale` — digitalocean
- [Bare Metal Solution](https://localhost:3000/catalogue/components/google-bare-metal-solution.md) `google-bare-metal-solution` — gcp
- [Cloud TPU](https://localhost:3000/catalogue/components/google-cloud-tpu.md) `google-cloud-tpu` — gcp
- [Compute Engine](https://localhost:3000/catalogue/components/google-compute-engine.md) `google-compute-engine` — gcp
- and 20 more: https://localhost:3000/catalogue/kinds/virtual-machine.md

## Use it in a design

```yaml
nodes:
  - { id: "aws-nitro-enclave", component: "aws-nitro-enclave" }
```

## Source (`component` YAML, verbatim)

```yaml
# yaml-language-server: $schema=../../schema/component.schema.json
# AWS Nitro Enclaves: a hardened VM carved out of a parent EC2 instance with no persistent storage,
# no interactive access and no external networking, reachable only over a local socket from its
# parent ("What is Nitro Enclaves?"). Up to four enclaves per parent instance; attestation is built in.
schemaVersion: "1"
type: "component"
id: "aws-nitro-enclave"
kind: "virtual-machine"
provider: "aws"
docs: "https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html"
defaults:
  managed: false
  os: "linux"
  publicIp: false
  zoneRedundant: false
properties:
  persistentStorage:
    type: "boolean"
    default: false
  interactiveAccess:
    type: "boolean"
    default: false
  externalNetworking:
    type: "boolean"
    default: false
  attestation:
    type: "boolean"
    default: true
  maxEnclavesPerParent:
    type: "integer"
    default: 4
```

Human page: https://localhost:3000/catalogue/components/aws-nitro-enclave