Microsoft Azure → Amazon Web Services
AWS equivalent of Trusted Launch for Azure VMs
The closest AWS equivalent of Trusted Launch for Azure VMs is NitroTPM & UEFI Secure Boot.
About Trusted Launch for Azure VMs
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Secure Boot, vTPM 2.0, and boot integrity monitoring for Gen2 VMs and scale sets. It's the default for new Gen2 VMs, and existing Gen1 VMs can be upgraded. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Secure Boot and virtual TPM | NitroTPM & UEFI Secure Boot | Direct match |
VM security & operations(1)
Secure Boot and virtual TPM Direct match
EC2 UEFI Secure Boot plus NitroTPM maps to Azure Trusted Launch (Secure Boot, vTPM, and boot integrity monitoring).
- Defaults. Trusted Launch is the default for new Azure Gen2 VMs and scale sets, and existing Gen1 VMs can be upgraded. On EC2, NitroTPM and Secure Boot must be enabled in the AMI (boot mode UEFI, TPM support).
- Monitoring. Azure adds guest attestation and boot integrity monitoring surfaced in Defender for Cloud. AWS exposes NitroTPM attestation documents for your own checks.
- Driver gotchas. On Azure, installing CUDA on Secure Boot Linux VMs other than Ubuntu needs Secure Boot disabled. Check GPU driver signing on both sides.