VM security & operations · AWS vs Google Cloud
NitroTPM & UEFI Secure Boot vs Shielded VM
NitroTPM and UEFI Secure Boot map to Shielded VM, which provides Secure Boot, a virtual TPM, and integrity monitoring.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | NitroTPM & UEFI Secure Boot | Shielded VM |
| Lifecycle | Generally available | Generally available |
| What it is | A virtual TPM 2.0 plus UEFI Secure Boot for EC2 instances launched from AMIs configured for them. Enables measured boot and BitLocker-style key sealing. | Secure Boot, virtual Trusted Platform Module (vTPM), and integrity monitoring for Compute Engine VMs. |
| Pricing model | No extra charge. | No additional charge for Shielded VM. |
| Docs | NitroTPM & UEFI Secure Boot docs | Shielded VM docs |
| Pricing page | NitroTPM & UEFI Secure Boot pricing | — |
Key differences
- vTPM and integrity monitoring are enabled by default; Secure Boot is an option you turn on.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- No extra charge. NitroTPM & UEFI Secure Boot pricing →
- GCP
- No additional charge for Shielded VM.
And on Azure?
Direct match Azure's equivalent is Trusted Launch for Azure VMs. AWS vs Azure comparison →
FAQ
What is the Google Cloud equivalent of NitroTPM & UEFI Secure Boot?
NitroTPM and UEFI Secure Boot map to Shielded VM, which provides Secure Boot, a virtual TPM, and integrity monitoring.
How does pricing compare between NitroTPM & UEFI Secure Boot and Shielded VM?
AWS: No extra charge. Google Cloud: No additional charge for Shielded VM. Check the official pricing pages for current rates.
What is the Azure equivalent?
Trusted Launch for Azure VMs (direct match). EC2 UEFI Secure Boot plus NitroTPM maps to Azure Trusted Launch (Secure Boot, vTPM, and boot integrity monitoring).