Microsoft Azure → Amazon Web Services
AWS equivalent of Azure confidential computing (confidential VMs & enclaves)
The closest AWS equivalents of Azure confidential computing (confidential VMs & enclaves) are AWS Nitro Enclaves and AMD SEV-SNP on Amazon EC2.
About Azure confidential computing (confidential VMs & enclaves)
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Confidential VMs use AMD SEV-SNP (DCasv5/v6, ECasv5/v6) or Intel TDX (DCesv6, ECesv6), plus H100 confidential GPUs. Azure Attestation and confidential OS disk encryption are available, and Intel SGX application enclaves are offered too. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Confidential computing | AWS Nitro Enclaves, AMD SEV-SNP on Amazon EC2 | Partial match |
VM security & operations(1)
Confidential computing Partial match
AWS Nitro Enclaves and AMD SEV-SNP on EC2 map to Azure confidential computing (confidential VMs and SGX application enclaves). Azure has a broader confidential VM lineup; AWS relies more on its Nitro System isolation plus enclaves.
- Whole-VM. Azure confidential VMs support AMD SEV-SNP (DCasv5/v6, ECasv5/v6) and Intel TDX (DCesv6, ECesv6), plus H100 confidential GPUs, with confidential OS-disk encryption and Azure Attestation. EC2 supports SEV-SNP on a smaller set of AMD types (M6a, C6a, R6a at verification).
- Enclaves. Nitro Enclaves split vCPUs and memory off a parent instance into a hardened VM with no network, storage, or shell, and integrate attestation with AWS KMS key policies. Azure's application-enclave option is Intel SGX.
- Baseline. AWS states that the Nitro System prevents operator access and that memory is always encrypted on recent processors. Azure positions confidential VMs and Trusted Launch as separate tiers.