Scan inputs¶
Which untrust scan option each check reads. A check reports SKIP (not assessed) when the inputs it needs are missing, so this table shows which options to add to cover a check. It is read from the scanner's source.
Source
Generated from untrust 1.3.0 (commit 7ef462d9a0c3).
AWS Nitro Enclaves¶
untrust scan --platform nitro
| Option | Description | Checks that read it |
|---|---|---|
--db-instance |
RDS/Aurora DB instance identifier holding enclave state. | RDS-01 |
--dynamodb-table |
DynamoDB table holding enclave bootstrap state (alternative to S3). | DDB-01 |
--efs-id |
EFS filesystem ID mounted for enclave state. | EFS-01 |
--instance-id |
EC2 instance ID running the Nitro Enclave. | CORE-01, DNS-01, ENCLAVE-01, ENCLAVE-02, ENCLAVE-03, ENCLAVE-04, ENCLAVE-05, ENCLAVE-07, ENV-01, EXEC-01, HOST-01, HOST-02, IAM-01, IAM-02, IMDS-01, LOG-01, NAT-01, NITRO-BOOT-01, NITRO-EGRESS-01, PORT-01, PROXY-01, RESTART-01, SSH-01, SWAP-01, VPC-01, VSOCK-01 |
--kms-key-id |
KMS key used to decrypt enclave secrets. | KMS-01, KMS-02 |
--nitro-approved-signers |
Approved EIF signing-certificate measurements (PCR8 SHA-384 hex, comma/space separated) for ENCLAVE-07. | ENCLAVE-07 |
--nitro-attestation-doc |
Path to a captured COSE_Sign1 attestation document (ENCLAVE-06). | ENCLAVE-06, NITRO-ATT-02, NITRO-ATT-03 |
--nitro-nonce |
Hex verifier nonce the attestation document should echo (ENCLAVE-06). | ENCLAVE-06 |
--parameter-path |
SSM Parameter Store name/prefix the enclave loads at boot. | SSM-01 |
--pcr-baseline |
Path to a JSON of golden PCR values (PCR0/1/2) to pin (ENCLAVE-05). | ENCLAVE-05 |
--region |
AWS region. | AUDIT-01, BOOTSTRAP-01, BOOTSTRAP-02, CLOUDTRAIL-01, CORE-01, DDB-01, DNS-01, EFS-01, ENCLAVE-01, ENCLAVE-02, ENCLAVE-03, ENCLAVE-04, ENCLAVE-05, ENCLAVE-07, ENV-01, EXEC-01, HOST-01, HOST-02, IAM-01, IAM-02, IMDS-01, KMS-01, KMS-02, LOG-01, NAT-01, NITRO-BOOT-01, NITRO-EGRESS-01, PORT-01, PROXY-01, RDS-01, RESTART-01, ROLLBACK-01, S3-01, S3-02, SECRETS-01, SSH-01, SSM-01, SWAP-01, VPC-01, VSOCK-01 |
--secret-arn |
Secrets Manager secret ARN the enclave loads at boot. | SECRETS-01 |
--target-bucket |
S3 bucket holding the enclave's bootstrap state. | AUDIT-01, BOOTSTRAP-01, BOOTSTRAP-02, CLOUDTRAIL-01, ENV-01, ROLLBACK-01, S3-01, S3-02 |
GCP Confidential Space (AMD SEV-SNP)¶
untrust scan --platform sev-snp
| Option | Description | Checks that read it |
|---|---|---|
--access-policy |
Access Context Manager policy/perimeter for VPC-SC checks. | CSPACE-VPCSC-01 |
--attestation-token |
Path to a captured Confidential Space attestation token (JWT). | CSPACE-ATT-01, CSPACE-ATT-02, CSPACE-ATT-03, CSPACE-SIGNER-01, CSPACE-TOKEN-01, CSPACE-VM-02 |
--expected-audience |
Expected attestation-token audience (STS audience). | CSPACE-ATT-02 |
--expected-image-digest |
Expected pinned workload image digest (sha256:...) the token/WIF must bind. | No check reads it. |
--expected-nonce |
Verifier-issued eat_nonce the token must echo (CSPACE-ATT-03 replay check). | CSPACE-ATT-03 |
--gcp-approved-signers |
Approved workload-image signer key fingerprints (SHA-256 hex, comma/space separated) for CSPACE-SIGNER-01. | CSPACE-SIGNER-01 |
--gcp-instance |
Confidential VM instance name. | CSPACE-ATT-03, CSPACE-BINAUTHZ-01, CSPACE-DEBUG-01, CSPACE-EGRESS-01, CSPACE-IMG-01, CSPACE-IMG-02, CSPACE-INTEG-01, CSPACE-LAUNCH-01, CSPACE-LAUNCH-02, CSPACE-LAUNCH-03, CSPACE-LAUNCH-04, CSPACE-LAUNCH-05, CSPACE-META-01, CSPACE-SA-01, CSPACE-SAKEY-01, CSPACE-VM-01, CSPACE-VM-02 |
--gcp-kms-key |
Cloud KMS key resource to audit IAM on. | CSPACE-KEYBIND-01, CSPACE-KMS-01, CSPACE-KMS-02 |
--gcp-org-id |
Organization ID to audit org-policy constraints on. | No check reads it. |
--gcp-project |
GCP project ID. | CSPACE-ATT-03, CSPACE-AUDIT-01, CSPACE-BINAUTHZ-01, CSPACE-DEBUG-01, CSPACE-EGRESS-01, CSPACE-IAM-INHERIT-01, CSPACE-IMG-01, CSPACE-IMG-02, CSPACE-INTEG-01, CSPACE-LAUNCH-01, CSPACE-LAUNCH-02, CSPACE-LAUNCH-03, CSPACE-LAUNCH-04, CSPACE-LAUNCH-05, CSPACE-META-01, CSPACE-ORG-01, CSPACE-SA-01, CSPACE-SAKEY-01, CSPACE-VM-01, CSPACE-VM-02, CSPACE-VPCSC-01, GCS-BOOT-02 |
--gcp-secret |
Secret Manager secret to audit attestation-gated access on. | CSPACE-SECRET-01 |
--gcp-zone |
Zone of the Confidential VM. | CSPACE-ATT-03, CSPACE-BINAUTHZ-01, CSPACE-DEBUG-01, CSPACE-EGRESS-01, CSPACE-IMG-01, CSPACE-IMG-02, CSPACE-INTEG-01, CSPACE-LAUNCH-01, CSPACE-LAUNCH-02, CSPACE-LAUNCH-03, CSPACE-LAUNCH-04, CSPACE-LAUNCH-05, CSPACE-META-01, CSPACE-SA-01, CSPACE-SAKEY-01, CSPACE-VM-01, CSPACE-VM-02 |
--gcs-bucket |
GCS bucket holding bootstrap state. | GCS-BOOT-01, GCS-BOOT-02 |
--wip-provider |
WIF provider resource gating key release. | CSPACE-KEYBIND-01, CSPACE-KEYBIND-03, CSPACE-WIF-02 |
Azure confidential VMs¶
untrust scan --platform azure-cvm
| Option | Description | Checks that read it |
|---|---|---|
--azure-approved-attestation-authority |
MAA hosts you approve as release-policy authorities besides Microsoft's shared providers and --azure-attestation-provider (comma separated). | AZ-DBG-01, AZ-SKR-01 |
--azure-attestation-provider |
MAA provider name (in the resource group) or resource ID. | AZ-DBG-01, AZ-MAA-01, AZ-SKR-01 |
--azure-attestation-token |
MAA token (JWT) captured inside the VM. | AZ-DBG-01 |
--azure-key |
Key whose release policy gates the workload. | AZ-MAA-01, AZ-SKR-01 |
--azure-key-vault |
Key Vault (name or host) holding the SKR key. | AZ-MAA-01, AZ-SKR-01 |
--azure-resource-group |
Resource group of the VM. | AZ-BOOT-01, AZ-DBG-01, AZ-DISK-01, AZ-MAA-01, AZ-SKR-01, AZ-SKU-01 |
--azure-subscription |
Subscription ID. | AZ-BOOT-01, AZ-DBG-01, AZ-DISK-01, AZ-MAA-01, AZ-SKR-01, AZ-SKU-01 |
--azure-vm |
Confidential VM name. | AZ-BOOT-01, AZ-DBG-01, AZ-DISK-01, AZ-SKU-01 |
NVIDIA GPU Confidential Computing¶
untrust scan --platform gpu-cc
| Option | Description | Checks that read it |
|---|---|---|
--gcp-project |
GCP project ID. | GPUCC-MODEL-01 |
--gpu-attestation-report |
Path to a captured NVIDIA GPU attestation report (JSON). | GPUCC-ATT-01, GPUCC-BIND-01, GPUCC-CUDA-01, GPUCC-CVM-01, GPUCC-DMA-01, GPUCC-MIG-01, GPUCC-MODE-01, GPUCC-NONCE-01, GPUCC-NVLINK-01, GPUCC-RIM-01, GPUCC-SIGVERIFY-01, GPUCC-VRAM-01 |
--gpu-cc-mode |
CC mode (nvidia-smi conf-compute -f): on|devtools|off. | GPUCC-MODE-01 |
--gpu-kbs-policy |
Key-release policy JSON: attest-before-ready, decrypt location. | GPUCC-DECRYPT-01, GPUCC-INPUT-01, GPUCC-KEY-01, GPUCC-MEMHYG-01, GPUCC-READY-01, GPUCC-TELEMETRY-01 |
--gpu-launch-config |
Path to the CVM/GPU launch config (JSON) for the launch-mutability check. | GPUCC-VMM-META-01 |
--gpu-model-bucket |
Object store holding model weights (injection probe). | GPUCC-MODEL-01 |
--gpu-reset-evidence |
Before/after-reset capture evidence (JSON) for GPUCC-PERSIST-01. | GPUCC-PERSIST-01 |
--gpu-verifier-policy |
Verifier policy JSON: pinned RIM measurements, cert chain, revocation. | GPUCC-CERT-01, GPUCC-FAILOPEN-01, GPUCC-NONCE-01, GPUCC-NVLINK-01, GPUCC-REATTEST-01, GPUCC-REVOKE-01, GPUCC-RIM-01, GPUCC-SIGVERIFY-01 |
--gpu-weight-file |
Path to a model weight file; its leading bytes are sniffed to classify the real on-disk format (GPUCC-INPUT-01 bounded inspection). | GPUCC-INPUT-01 |