Skip to content

Commit ec7b40d

Browse files
authored
docs: sort clouds table alphabetical (edgelesssys#3315)
1 parent f92d9db commit ec7b40d

File tree

2 files changed

+30
-30
lines changed

2 files changed

+30
-30
lines changed

docs/docs/overview/clouds.md

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -14,13 +14,21 @@ For Constellation, the ideal environment provides the following:
1414

1515
The following table summarizes the state of features for different infrastructures.
1616

17-
| **Feature** | **Azure** | **GCP** | **AWS** | **STACKIT** | **OpenStack (Yoga)** |
18-
|-----------------------------------|-----------|---------|---------|--------------|----------------------|
19-
| **1. Custom images** | Yes | Yes | Yes | Yes | Yes |
20-
| **2. SEV-SNP or TDX** | Yes | Yes | Yes | No | Depends on kernel/HV |
21-
| **3. Raw guest attestation** | Yes | Yes | Yes | No | Depends on kernel/HV |
22-
| **4. Reviewable firmware** | No | No | Yes | No | Depends on kernel/HV |
23-
| **5. Confidential measured boot** | Yes | No | No | No | Depends on kernel/HV |
17+
| **Feature** | **AWS** | **Azure** | **GCP** | **STACKIT** | **OpenStack (Yoga)** |
18+
|-----------------------------------|---------|-----------|---------|--------------|----------------------|
19+
| **1. Custom images** | Yes | Yes | Yes | Yes | Yes |
20+
| **2. SEV-SNP or TDX** | Yes | Yes | Yes | No | Depends on kernel/HV |
21+
| **3. Raw guest attestation** | Yes | Yes | Yes | No | Depends on kernel/HV |
22+
| **4. Reviewable firmware** | Yes | No | No | No | Depends on kernel/HV |
23+
| **5. Confidential measured boot** | No | Yes | No | No | Depends on kernel/HV |
24+
25+
## Amazon Web Services (AWS)
26+
27+
Amazon EC2 [supports AMD SEV-SNP](https://aws.amazon.com/de/about-aws/whats-new/2023/04/amazon-ec2-amd-sev-snp/).
28+
Regarding (3), AWS provides direct access to attestation statements.
29+
However, regarding (5), attestation is partially based on the [NitroTPM](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) for [measured boot](../architecture/attestation.md#measured-boot), which is a vTPM managed by the Nitro hypervisor.
30+
Hence, the hypervisor is currently part of Constellation's TCB.
31+
Regarding (4), the [firmware is open source](https://github.com/aws/uefi) and can be reproducibly built.
2432

2533
## Microsoft Azure
2634

@@ -43,14 +51,6 @@ Regarding (4), the CVMs still include closed-source firmware.
4351
[TDX on Google](https://cloud.google.com/blog/products/identity-security/confidential-vms-on-intel-cpus-your-datas-new-intelligent-defense) is in public preview.
4452
With it, Constellation would have a similar TCB and attestation flow as with the current SEV-SNP offering.
4553

46-
## Amazon Web Services (AWS)
47-
48-
Amazon EC2 [supports AMD SEV-SNP](https://aws.amazon.com/de/about-aws/whats-new/2023/04/amazon-ec2-amd-sev-snp/).
49-
Regarding (3), AWS provides direct access to attestation statements.
50-
However, regarding (5), attestation is partially based on the [NitroTPM](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) for [measured boot](../architecture/attestation.md#measured-boot), which is a vTPM managed by the Nitro hypervisor.
51-
Hence, the hypervisor is currently part of Constellation's TCB.
52-
Regarding (4), the [firmware is open source](https://github.com/aws/uefi) and can be reproducibly built.
53-
5454
## STACKIT
5555

5656
[STACKIT Compute Engine](https://www.stackit.de/en/product/stackit-compute-engine/) supports AMD SEV-ES. A vTPM is used for measured boot, which is a vTPM managed by STACKIT's hypervisor. Hence, the hypervisor is currently part of Constellation's TCB.

docs/versioned_docs/version-2.17/overview/clouds.md

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -14,13 +14,21 @@ For Constellation, the ideal environment provides the following:
1414

1515
The following table summarizes the state of features for different infrastructures.
1616

17-
| **Feature** | **Azure** | **GCP** | **AWS** | **STACKIT** | **OpenStack (Yoga)** |
18-
|-----------------------------------|-----------|---------|---------|--------------|----------------------|
19-
| **1. Custom images** | Yes | Yes | Yes | Yes | Yes |
20-
| **2. SEV-SNP or TDX** | Yes | Yes | Yes | No | Depends on kernel/HV |
21-
| **3. Raw guest attestation** | Yes | Yes | Yes | No | Depends on kernel/HV |
22-
| **4. Reviewable firmware** | No | No | Yes | No | Depends on kernel/HV |
23-
| **5. Confidential measured boot** | Yes | No | No | No | Depends on kernel/HV |
17+
| **Feature** | **AWS** | **Azure** | **GCP** | **STACKIT** | **OpenStack (Yoga)** |
18+
|-----------------------------------|---------|-----------|---------|--------------|----------------------|
19+
| **1. Custom images** | Yes | Yes | Yes | Yes | Yes |
20+
| **2. SEV-SNP or TDX** | Yes | Yes | Yes | No | Depends on kernel/HV |
21+
| **3. Raw guest attestation** | Yes | Yes | Yes | No | Depends on kernel/HV |
22+
| **4. Reviewable firmware** | Yes | No | No | No | Depends on kernel/HV |
23+
| **5. Confidential measured boot** | No | Yes | No | No | Depends on kernel/HV |
24+
25+
## Amazon Web Services (AWS)
26+
27+
Amazon EC2 [supports AMD SEV-SNP](https://aws.amazon.com/de/about-aws/whats-new/2023/04/amazon-ec2-amd-sev-snp/).
28+
Regarding (3), AWS provides direct access to attestation statements.
29+
However, regarding (5), attestation is partially based on the [NitroTPM](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) for [measured boot](../architecture/attestation.md#measured-boot), which is a vTPM managed by the Nitro hypervisor.
30+
Hence, the hypervisor is currently part of Constellation's TCB.
31+
Regarding (4), the [firmware is open source](https://github.com/aws/uefi) and can be reproducibly built.
2432

2533
## Microsoft Azure
2634

@@ -43,14 +51,6 @@ Regarding (4), the CVMs still include closed-source firmware.
4351
[TDX on Google](https://cloud.google.com/blog/products/identity-security/confidential-vms-on-intel-cpus-your-datas-new-intelligent-defense) is in public preview.
4452
With it, Constellation would have a similar TCB and attestation flow as with the current SEV-SNP offering.
4553

46-
## Amazon Web Services (AWS)
47-
48-
Amazon EC2 [supports AMD SEV-SNP](https://aws.amazon.com/de/about-aws/whats-new/2023/04/amazon-ec2-amd-sev-snp/).
49-
Regarding (3), AWS provides direct access to attestation statements.
50-
However, regarding (5), attestation is partially based on the [NitroTPM](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) for [measured boot](../architecture/attestation.md#measured-boot), which is a vTPM managed by the Nitro hypervisor.
51-
Hence, the hypervisor is currently part of Constellation's TCB.
52-
Regarding (4), the [firmware is open source](https://github.com/aws/uefi) and can be reproducibly built.
53-
5454
## STACKIT
5555

5656
[STACKIT Compute Engine](https://www.stackit.de/en/product/stackit-compute-engine/) supports AMD SEV-ES. A vTPM is used for measured boot, which is a vTPM managed by STACKIT's hypervisor. Hence, the hypervisor is currently part of Constellation's TCB.

0 commit comments

Comments
 (0)