AWS Nitro Enclaves (https://aws.amazon.com/ec2/nitro/nitro-enclaves/) is a new EC2 capability that enables customers to create isolated compute environments (enclaves) to further protect and securely process highly sensitive data such as personally identifiable information (PII), healthcare, financial, and intellectual property data within their Amazon EC2 (https://aws.amazon.com/ec2/) instances. Nitro Enclaves helps customers reduce the attack surface area for their most sensitive data processing applications.

The Nitro Enclaves Developer AMI contains the necessary tools and components to build enclave applications. It also contains samples, such as hello-enclave, vsock_sample and kmstool, to demonstrate how to use and develop your own enclave applications. Building enclave images is similar to building Docker containers, and uses Docker definitions to do it. To be able to build from source the components to be packaged in an enclave image, compilers and toolchains need to be installed separately.