v0.1.0
Enclaver aids engineers in building, testing and running code within secure enclaves, starting with AWS Nitro Enclaves.
Read the announcement blog post.
Features
- Build enclave images from containerized applications with
enclaver build
(docs) - Run enclaves on AWS Nitro-enabled instances with
enclaver run
(docs) - Enforce egress network policy (docs)
- Integration with AWS KMS to use the enclave's attestation for decryption API calls (docs)
Documentation
-
Architecture
Background about how Enclaver is engineered and why those decisions were made -
No-Fly-List Python app
Deploy the No-Fly-List app, which checks passengers attempting to fly on an airline against a no-fly list. It’s a fairly simple Python application that requires protection “in-use” for its data, because we don’t want anyone to be able to see the full no-fly list.This guide is applicable to any microservice or security-centric function at your organization.
-
Hashicorp Vault
Run Hashicorp Vault within an enclave to fully isolate it after it’s unsealed.This guide is model for running off-the-shelf or commercial software in an enclave.