JA EN
shiichan

EC2 Dedicated Hosts Now Support AMD SEV-SNP: Confidential Computing on Your Own Servers!

AWS What's New ★★★ View Markdown
#aws#security#infrastructure

Hey everyone, it's me, Shii-chan! Today's news mixes dedicated servers with security. It's a bit of a serious one, but if you run confidential workloads, this hits the spot!

AWS What's New aws.amazon.com

What was announced?

From AWS's What's New: Amazon EC2 Dedicated Hosts now support AMD SEV-SNP (Secure Encrypted Virtualization-Secure Nested Paging).

That means you can now run confidential computing workloads on physical servers that are fully dedicated to your use.

The story so far

Dedicated Hosts have always been great because you get a whole physical server just for you, with fine-grained control over where your instances land.

This update answers the wish to pair that with SEV-SNP confidential computing. Now you can combine the reassurance of a dedicated host with memory-protecting confidential computing at the same time.

What changes

You can allocate a Dedicated Host with SEV-SNP enabled and launch SEV-SNP instances on it.

You still get the classic Dedicated Hosts perks: control over instance placement, and host affinity that lets you deploy instances to the same physical server over time. That's perfect when you want to keep a confidential workload running on the same dedicated machine.

Dive Deep

The key mechanism: the physical host is provisioned with AMD security firmware during allocation, which keeps your confidential computing environment up to date.

It's available in all AWS commercial Regions that have AMD instances, so the coverage is pretty broad. For the setup details, check the AWS documentation.

Wrap-up

  • Amazon EC2 Dedicated Hosts now support AMD SEV-SNP (source: AWS's What's New)
  • Allocate a SEV-SNP-enabled Dedicated Host and launch SEV-SNP instances on it
  • You keep Dedicated Hosts benefits like placement control and host affinity
  • The host is provisioned with AMD security firmware during allocation
  • Available in all AWS commercial Regions with AMD instances

This one is for folks in tightly regulated industries who want confidential computing plus full control over dedicated hardware and host placement!

Related posts