Google Cloud → AWS and Azure
AWS and Azure equivalents of Confidential VM
The closest AWS equivalents of Google Cloud Confidential VM are AWS Nitro Enclaves and AMD SEV-SNP on Amazon EC2; on Azure, Azure confidential computing (confidential VMs & enclaves).
About Confidential VM
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Compute Engine VMs with hardware memory encryption using AMD SEV, AMD SEV-SNP, or Intel TDX. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Confidential computing | AWS Nitro Enclaves, AMD SEV-SNP on Amazon EC2 | Direct match | Azure confidential computing (confidential VMs & enclaves) |
Confidential computing Direct match
AMD SEV-SNP on EC2 maps to Confidential VM (AMD SEV, AMD SEV-SNP, or Intel TDX), and Nitro Enclaves map to Confidential Space for attested processing of sensitive data.
- Confidential Space runs a workload container on a hardened Confidential VM image with remote attestation; Nitro Enclaves carve an isolated enclave from a parent EC2 instance.
- Confidential VM is supported on specific machine series per technology.