Prerequisites

You must have an AWS account and the ability to create AWS EC2 instances. The examples in this document might also require access to various AWS services:

  • AWS Elastic Kubernetes Service (EKS)

  • AWS Key Management Service (KMS)

  • AWS S3

Information on best practices and identity and access management can be found at the following AWS links:

Security best practices in IAM

Identity and access management for Amazon EKS

Identity and access management for AWS Key Management Service

Identity and access management in Amazon S3

Hardware requirements

In order to launch and use Nitro Enclaves you need to create an AWS EC2 instance that meets the following criteria:

  1. Hosted on AWS region that supports Nitro Enclaves. The list includes US East (N. Virginia, Ohio), US West (Oregon, N. California), Europe (Frankfurt, Ireland, London, Milan, Paris, Stockholm), Middle East (Bahrain), Asia Pacific (Hong Kong, Mumbai, Seoul, Singapore, Sydney, Tokyo), South America (Sao Paulo), Canada (Central), and Africa (Cape Town).

  2. Virtualized Nitro-based instances with at least four vCPUs. Following instance types are compatible with Nitro Enclaves - C5, C5a, C5ad, C5d, C5n, C6gn, D3, D3en, G4, I3en, Inf1, M5, M5a, M5ad, M5d, M5dn, M5n, M5zn, p3dn.24xlarge, P4, R5, R5a, R5ad, R5b, R5d, R5dn, R5n, T4g, and z1d.

Supported platforms

The Anjuna Nitro Runtime has been tested on Amazon Linux 2 based AMI (Fedora based distribution), but it should work on any recent Linux distribution.