Azure Confidential Computing And Zero Trust Razi Rais Jeff Birnbaum by Razi Rais, Jeff Birnbaum, Graham Bury, Vikas Bhatia 9781098153816, 1098153812 instant download after payment.

Confidential computing protects data in use by isolating data within a trusted execution environment (TEE), which is like a sealed box for data processing. From the outside, the data appears encrypted, and it is only decrypted inside the TEE once it is verified by the key holder. This isolation is rooted in hardware, effectively rendering even the cloud-hosting infrastructure and its administrators incapable of accessing the data. This means that services can be designed with zero trust in mind. They can segment data based on least-privilege access principles. For example, data may be accessible only to the code that needs access to perform its function, while all other code in the system sees only encrypted data. Least privilege access isn’t the only way confidential computing enforces zero trust principles. Zero trust also includes the ability to attest the proper state of the hardware and software within the TEE, thereby supporting the zero trust principle of “always verify.” Finally, confidential computing supports the principle of “assume breach,” because any software not in the TEE cannot access the memory of the TEE, even if that software is breached...