Veil is a tool kit for building networked services on top of AWS Nitro Enclaves.
Veil consists of several CLI tools that are in the cmd directory. Run the following command to compile all CLI tools:
make
Conceptually, there are three components:
-
veil
(in cmd/veil/veil) implements a service that runs inside the AWS Nitro Enclave alongside your application. This service is responsible for establishing a network tunnel to the outside world, remote attestation, and it provides a REST API for your application to use. -
veil-proxy
(in cmd/veil-proxy/veil-proxy) runs on the EC2 host that contains the enclave. It helpsveil
use the Internet seamlessly by implementing a tun interface. -
veil-verify
(in cmd/veil-verify/veil-verify) verifies a given enclave by making sure that it runs a copy of the given source code.
The repository veil-examples contains examples of using Veil to build networked services.