In the last calendar quarter of 2022, Amazon Web Services (AWS) engaged NCC Group to conduct an architecture review of the AWS Nitro System design, with focus on specific claims AWS made for the security of the Nitro System APIs.
The Public Report in French this review may be downloaded below:
The original Public Report can be found here in English:
https://research.nccgroup.com/2023/05/03/public-report-aws-nitro-system-api-security-claims
The Public Report in German may be found here:
https://research.nccgroup.com/2024/03/04/public-report-aws-nitro-system-api-security-claims-german/
The Public Report in Italian may be found here:
https://research.nccgroup.com/2024/03/04/public-report-aws-nitro-system-api-security-claims-italian/
The Public Report in Spanish may be found here:
https://research.nccgroup.com/2024/03/04/public-report-aws-nitro-system-api-security-claims-spanish/
