# AWS Nitro Enclaves Projects at AI Tinkerers

> Canonical HTML: https://aitinkerers.org/technologies/aws-nitro-enclaves
> Markdown URL: https://aitinkerers.org/technologies/aws-nitro-enclaves.md
> Technology record last updated: 2026-03-22T13:13:52Z
> Generated: 2026-09-21T12:41:32Z

AWS Nitro Enclaves creates isolated, hardened virtual machines (enclaves) within an EC2 instance to securely process highly sensitive data.

Nitro Enclaves provides a Trusted Execution Environment (TEE) on EC2, partitioning dedicated vCPUs and memory from the parent instance using the Nitro Hypervisor. This isolated VM is highly constrained: it has no persistent storage, no external networking, and zero interactive access (no SSH). Even the parent instance's root user cannot access the enclave's data or processes. The core security feature is cryptographic attestation, which verifies the enclave's identity and confirms only authorized code is running. This attestation integrates directly with AWS KMS, ensuring only a validated enclave can decrypt and process sensitive material (e.g., PII, financial data, or encryption keys).

- Official technology site: https://aws.amazon.com/ec2/nitro/nitro-enclaves/
- Public AI Tinkerers demos and talks: 3
- Result page: 1 of 1

## Recent Public Talks and Demos

### [Zero Trust-Proofing and Containerizing AI Agents for Enterprise Deployments](https://toronto.aitinkerers.org/talks/rsvp_9fibOugPX6M)

Identity Machines' SDK and CLI tool for AI agent developers, the Iron Book API for agentic multi-vector security, compliance, and privacy testing (vulnerability scanning with Claude Sonnet 3.7 on Bedrock and OSV, sentiment analysis, security scoring, foundational model and behavioral testing per OWASP LLM Top 10, cryptographic attestation, SBOM creation), AI agent packaging into an OCI-container deployed on EKS, and ongoing work with Google on trust-related enhancements for the A2A protocol (the Iron Vow mechanics).

- Event context: AI Tinkerers Toronto - May 2025 Meetup: AGENTS at Ada — 2025-05-22 — Toronto
- Public talk page: https://toronto.aitinkerers.org/talks/rsvp_9fibOugPX6M

### [Provably Private Inference: Trusted Hardware and In-Browser Verification of LLMs](https://boston.aitinkerers.org/talks/rsvp_hQGG4IgqTVY)

AI inference relies on trusting the operator with your private data: prompts and model responses are visible in the clear to your provider. In this demo, we show how to decouple trust from the model operator, making prompts and model responses provably private. We use remote attestation with AWS Nitro Enclaves and a novel approach to automatic, in-browser cryptographic verification of a running LLAMA model to show that provable private inference is not only possible, but practical and achievable with tooling available today.

- Event context: AI Tinkerers Boston November Meetup — 2024-11-25 — Boston
- Public talk page: https://boston.aitinkerers.org/talks/rsvp_hQGG4IgqTVY

### [Secure AI Inference with Hardware Attestation](https://sf.aitinkerers.org/talks/rsvp_14eplt0Cd3w)

I'll demonstrate a working prototype of running an open-source LLM inside an AWS Nitro Enclave, showing how to achieve verifiable privacy for AI inference. The live demo will show: -Real-time hardware attestation of the Nitro Enclave -A working chat interface connecting to the enclave -(potentially) Privacy-preserving aggregated analytics using DAP (Distributed Aggregation Protocol), which is a multiparty computation protocol

- Event context: AI Tinkerers - San Francisco - November 2024 Meetup - Securing Agentic Systems — 2024-11-22 — San Francisco
- Public talk page: https://sf.aitinkerers.org/talks/rsvp_14eplt0Cd3w

## Related Technologies

- [AMD SEV-SNP](https://aitinkerers.org/technologies/amd-sev-snp) ([Markdown](https://aitinkerers.org/technologies/amd-sev-snp.md)) — 1 public demo
- [Anthropic](https://aitinkerers.org/technologies/anthropic) ([Markdown](https://aitinkerers.org/technologies/anthropic.md)) — 36 public demos
- [Apple Private Cloud Compute](https://aitinkerers.org/technologies/apple-private-cloud-compute) ([Markdown](https://aitinkerers.org/technologies/apple-private-cloud-compute.md)) — 1 public demo
- [AWS Bedrock](https://aitinkerers.org/technologies/aws-bedrock) ([Markdown](https://aitinkerers.org/technologies/aws-bedrock.md)) — 9 public demos
- [AWS EKS](https://aitinkerers.org/technologies/aws-eks) ([Markdown](https://aitinkerers.org/technologies/aws-eks.md)) — 1 public demo
- [Claude](https://aitinkerers.org/technologies/claude) ([Markdown](https://aitinkerers.org/technologies/claude.md)) — 173 public demos
- [Concrete](https://aitinkerers.org/technologies/concrete) ([Markdown](https://aitinkerers.org/technologies/concrete.md)) — 1 public demo
- [Cosign](https://aitinkerers.org/technologies/cosign) ([Markdown](https://aitinkerers.org/technologies/cosign.md)) — 1 public demo
- [Distributed Aggregation Protocol](https://aitinkerers.org/technologies/distributed-aggregation-protocol) ([Markdown](https://aitinkerers.org/technologies/distributed-aggregation-protocol.md)) — 1 public demo
- [HElib](https://aitinkerers.org/technologies/helib) ([Markdown](https://aitinkerers.org/technologies/helib.md)) — 1 public demo
- [Homomorphic Encryption](https://aitinkerers.org/technologies/homomorphic-encryption) ([Markdown](https://aitinkerers.org/technologies/homomorphic-encryption.md)) — 1 public demo
- [JWT](https://aitinkerers.org/technologies/jwt) ([Markdown](https://aitinkerers.org/technologies/jwt.md)) — 1 public demo
- [libsodium](https://aitinkerers.org/technologies/libsodium) ([Markdown](https://aitinkerers.org/technologies/libsodium.md)) — 1 public demo
- [llama](https://aitinkerers.org/technologies/llama) ([Markdown](https://aitinkerers.org/technologies/llama.md)) — 48 public demos
- [Microsoft SEAL](https://aitinkerers.org/technologies/microsoft-seal) ([Markdown](https://aitinkerers.org/technologies/microsoft-seal.md)) — 1 public demo
- [NVIDIA H100](https://aitinkerers.org/technologies/nvidia-h100) ([Markdown](https://aitinkerers.org/technologies/nvidia-h100.md)) — 4 public demos
- [OpenPGP](https://aitinkerers.org/technologies/openpgp) ([Markdown](https://aitinkerers.org/technologies/openpgp.md)) — 2 public demos
- [PALISADE](https://aitinkerers.org/technologies/palisade) ([Markdown](https://aitinkerers.org/technologies/palisade.md)) — 1 public demo