How to "Verify the AWS Signature"

[UniWASMTech]

Thanks for asking.
I have one more question.
That is how to verify the AWS Signature.
Please help me...

[UniPlatformTech]

Okay.
This is an automated process done by the service (like KMS).

1. The attestation document from the enclave comes with a digital signature from the Nitro Hypervisor.

2. KMS has a copy of AWS's public certificate (like a public master key that everyone can trust).

3. KMS uses this public certificate to mathematically verify that the signature on the document is genuine. This proves two things:

• The document was created by a real AWS Nitro Hypervisor.

• The document was not tampered with after it was signed.