In the last calendar quarter of 2022, Amazon Web Services (AWS) engaged NCC Group to conduct an architecture review of the AWS Nitro System design, with focus on specific claims AWS made for the security of the Nitro System APIs.
The Public Report in German for this review may be downloaded below:
The original Public Report in English may be found here:
https://research.nccgroup.com/2023/05/03/public-report-aws-nitro-system-api-security-claims
The Public Report in French may be found here:
https://research.nccgroup.com/2024/03/04/public-report-aws-nitro-system-api-security-claims-french/
The Public Report in Italian may be found here:
https://research.nccgroup.com/2024/03/04/public-report-aws-nitro-system-api-security-claims-italian/
The Public Report in Spanish may be found here:
https://research.nccgroup.com/2024/03/04/public-report-aws-nitro-system-api-security-claims-spanish/