[MS] Improve the security of Generation 2 VMs via Trusted Launch in Azure DevTest Labs - devamazonaws.blogspot.com

We're thrilled to announce the public preview of the Trusted Launch feature for Generation 2 (Gen2) Virtual machines (VMs) in Azure DevTest Labs! ðŸŒŸ This game-changing feature is designed to enhance security of virtual machines (VMs), protecting against advanced and persistent attack techniques. Here are the key benefits:
  • Securely deploy VMs with verified boot loaders, OS kernels, and drivers.
  • Protect keys, certificates, and secrets within VMs securely.
  • Gain insights and confidence in the integrity of the entire boot chain.
  • Ensure workloads are trusted and verifiable.
Trusted Launch integrates several infrastructure technologies that can be enabled independently, each adding a layer of defense against sophisticated threats. Secure Boot At the core of Trusted Launch is Secure Boot, which protects against malware-based rootkits and boot kits by ensuring only signed OS and drivers can boot, establishing a "root of trust" for your VM's software stack. vTPM The virtual Trusted Platform Module (vTPM) acts as a secure vault for keys and measurements and enables attestation by measuring the entire boot chain. If an unauthorized component is detected, Microsoft Defender for Cloud issues integrity alerts. Virtualization-based Security (VBS) VBS uses the hypervisor to create a secure memory region for Windows to run various security solutions with increased protection against vulnerabilities and malicious exploits. Trusted Launch allows you to enable Hypervisor Code Integrity (HVCI) and Windows Defender Credential Guard, which protect kernel-mode processes and isolate secrets, respectively. Microsoft Defender for Cloud Integration Trusted Launch integrates with Defender for Cloud to ensure proper VM configuration. Defender for Cloud provides recommendations to enable Secure Boot, vTPM, and the Guest Attestation extension. It also performs remote attestation to validate VM boot integrity and issues alerts for any health problems or untrusted components detected. By leveraging Trusted Launch, you can significantly enhance the security and integrity of your virtual machines.   To learn more about Trusted Launch feature and how to use it on Azure DevTest Labs, please visit Trusted Launch for Generation 2 VMs in Azure DevTest Labs  
Post Updated on March 31, 2025 at 04:00PM
Thanks for reading
from devamazonaws.blogspot.com

Comments

Post a Comment

Popular posts from this blog

Scenarios capability now generally available for Amazon Q in QuickSight - devamazonaws.blogspot.com

Today, AWS announces the general availability of the scenarios capability of Amazon Q in QuickSight. Amazon Q guides you through data analysis by uncovering hidden trends, making recommendations for your business, and intelligently suggesting next steps for deeper exploration—all in response to natural language interactions. Now anyone can explore past trends, forecast future scenarios, and model solutions without needing specialized skill, analyst support, or manual manipulation of data in spreadsheets. With its intuitive interface and step-by-step guidance, the scenarios capability of Amazon Q in QuickSight helps users perform complex data analysis up to 10x faster than spreadsheets. Whether you're optimizing marketing budgets, streamlining supply chains, or analyzing investments, Amazon Q makes advanced data analysis accessible so you can make data-driven decisions across your organization. This capability is accessible from any Amazon QuickSight dashboard, so you can move seam...
Read more

Research and Engineering Studio on AWS Version 2024.08 now available - devamazonaws.blogspot.com

Today we’re excited to announce Research and Engineering Studio (RES) on AWS Version 2024.08. This release adds new features such as Amazon S3 bucket mountpoints for Linux, allows creation of custom user roles and permission profiles, and offers the ability to adjust the list of Amazon EC2 instances available to launch as virtual desktops. Amazon S3 mountpoints allow Linux desktops to access S3 buckets as a file system. Amazon S3 buckets are created using the AWS Console or AWS CLI and onboarded to RES by administrators using the S3 Buckets page in the web portal. You can mount buckets in either Read Only or Read/Write mode. Read/Write buckets have an optional setting to restrict data access by project, or both project and user. RES can also mount S3 buckets from other AWS accounts with the proper permissions. Custom permission profiles allow administrators to create unique permissions and assign them to users or groups. Start by modifying the default Project Member and Project Ow...
Read more

Amazon EC2 C6id instances are now available in AWS Europe (Paris) region - devamazonaws.blogspot.com

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C6id instances are available in Europe (Paris) Region. These instances are powered by 3rd generation Intel Xeon Scalable Ice Lake processors with an all-core turbo frequency of 3.5 GHz and up to 7.6 TB of local NVMe-based SSD block-level storage. C6id instances are built on AWS Nitro System , a combination of dedicated hardware and lightweight hypervisor, which delivers practically all of the compute and memory resources of the host hardware to your instances for better overall performance and security. Customers can take advantage of access to high-speed, low-latency local storage to scale performance of applications such data logging, distributed web-scale in-memory caches, in-memory databases, and real-time big data analytics. These instances are generally available today in the US West (Oregon), US East (Ohio, N. Virginia), Canada (Central), Canada West (Calgary), AWS GovCloud (US-West), Mexico (Central), South America (...
Read more