DET-07: Attested key release to an unreleased enclave measurement¶
A Decrypt carried an attestation document, but the enclave image digest (PCR0) is not a released build. An unapproved image obtained the key.
| Property | Value |
|---|---|
| Severity | critical |
| Platform | AWS Nitro Enclaves |
| Group | tee |
| Log source | CloudTrail · KMS |
| Policy | P-03 |
| Related check | KMS-01: KMS key policy enforces RecipientAttestation |
Fires when¶
eventName == "Decrypt" with attestation AND recipient PCR0 NOT IN expected_pcr0
How it runs¶
untrust detect --platform nitro reads CloudTrail in the region you pass with --region, over the last --since minutes (default 60).
This rule needs:
untrust detect --expected-pcr0: Released enclave image measurement (PCR0, hex); repeat for several builds. Enables DET-07 and DET-11.
A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.