# Nitro System Published articles for Nitro System. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Deploying regulated workloads on AWS Local Zones and AWS Outposts DevFeed: [Deploying regulated workloads on AWS Local Zones and AWS Outposts]() Original publisher: [Read original article]() Author: Brianna Rosentrater Published: 2026-09-17T17:29:40Z Content type: article Language: en Sources: [AWS Compute Blog]() Topics: [AWS Local Zones](), [AWS Outposts](), [Architecture & Design](), [Security](), [Nitro System](), [Shared Responsibility Model](), [VPC Flow Logs]() Tags: [advanced-300](), [aws-local-zones](), [aws-outposts](), [best-practices](), [cloud](), [data-security](), [hardware](), [infrastructure](), [monitoring](), [nitro-system](), [technical-how-to]() ### AI overview This post presents a flexible framework for deploying regulated workloads on AWS Local Zones and AWS Outposts while meeting data residency objectives. It covers hybrid edge architecture, the AWS Shared Responsibility Model, Nitro-based isolation, security controls, and monitoring approaches that provide auditable evidence of traffic boundaries. ### Source excerpt AWS Local Zones and AWS Outposts help you keep regulated workloads within specific geographic boundaries. This post presents a framework of technologies, including the AWS Nitro System, AWS Organizations SCPs with AWS Control Tower, and Amazon VPC Traffic Mirroring, to help you build auditable, secure architectures for data residency. ## AWS Launches Graviton5-Based EC2 R9g and R9gd Memory-Optimized Instances DevFeed: [AWS Launches Graviton5-Based EC2 R9g and R9gd Memory-Optimized Instances]() Original publisher: [Read original article]() Author: Harold Fritts Published: 2026-09-01T18:42:59Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [Amazon Web Services](), [Amazon EC2](), [Arm](), [cpu](), [Hardware](), [Nitro System](), [virtualization](), [Nitro Isolation Engine](), [Database](), [Caching](), [Kubernetes](), [Formal verification]() Tags: [amazon-ec2](), [amazon-eks](), [arm](), [aws](), [c-plus-plus](), [caching](), [cloud](), [database](), [docker](), [enterprise](), [formal-verification](), [go](), [hardware](), [java](), [microservices](), [nitro-isolation-engine](), [nitro-system](), [node-js](), [nvme](), [processors](), [python](), [time]() ### AI overview AWS has generally released the Amazon EC2 R9g and R9gd instances, powered by AWS Graviton5 processors. These Arm-based, memory-optimized instances offer higher per-vCPU performance, faster memory, larger cache capacity, and increased networking and Amazon EBS bandwidth for database, caching, analytics, container, and microservices workloads. R9gd adds local NVMe SSD storage for low-latency local capacity. Both families use the AWS Nitro System and Nitro Isolation Engine, with AWS citing formal verification for the isolation properties. ### Source excerpt AWS has made its Amazon EC2 R9g and R9gd instances generally available, introducing memory-optimized systems powered by AWS Graviton5 processors. The new Arm-based instances target database, caching, analytics, container, and microservices workloads that require high memory bandwidth and improved per-vCPU performance. Compared with Graviton4-based R8g instances, AWS states that R9g can deliver up to 25% The post AWS Launches Graviton5-Based EC2 R9g and R9gd Memory-Optimized Instances appeared first on StorageReview.com. ## Amazon EC2 R9g and R9gd instances powered by AWS Graviton5 processors are now generally available DevFeed: [Amazon EC2 R9g and R9gd instances powered by AWS Graviton5 processors are now generally available]() Original publisher: [Read original article]() Author: Daniel Abib Published: 2026-08-31T19:53:34Z Content type: release Language: en Sources: [AWS News Blog]() Topics: [Amazon EC2](), [cpu](), [networking]() Tags: [amazon-ec2](), [announcements](), [aws](), [big-data](), [cache](), [compute](), [databases](), [graviton](), [hardware](), [launch](), [memory](), [networking](), [news](), [nitro-isolation-engine](), [nitro-system](), [performance](), [storage]() ### AI overview Amazon EC2 R9g and R9gd memory-optimized instances powered by AWS Graviton5 processors are generally available. The release highlights higher compute performance, faster memory, larger cache, increased network and EBS bandwidth, and local NVMe SSD storage for R9gd. ### Source excerpt Amazon EC2 R9g and R9gd instances powered by AWS Graviton5 are now generally available, delivering up to 25% better compute performance than R8g, ideal for databases, in-memory caches, and real-time analytics. ## Happy 20th Birthday, Amazon EC2 DevFeed: [Happy 20th Birthday, Amazon EC2]() Original publisher: [Read original article]() Author: Channy Yun (윤석찬) Published: 2026-08-25T16:11:02Z Content type: article Language: en Sources: [AWS News Blog]() Topics: [Amazon EC2](), [Inference Performance]() Tags: [ai-inference](), [amazon-cloudwatch](), [amazon-ec2](), [amazon-ec2-mac-instances](), [apple](), [aws](), [aws-inferentia](), [aws-local-zones](), [aws-outposts](), [aws-trainium](), [cloud](), [cloud-computing](), [general](), [generative-ai](), [graviton](), [infrastructure](), [intel](), [linux](), [news](), [nitro-system](), [performance]() ### AI overview AWS marks Amazon EC2's 20th anniversary by reviewing its evolution from a single Linux virtual-server instance to a global service with more than 1,200 instance types. The article highlights foundational services, expanded deployment options, and AWS-designed silicon for AI inference and training. ### Source excerpt On the 20th Anniversary, we recognize how AWS has continued to push the boundaries of what cloud computing can deliver, building custom silicon for general-purpose and AI workloads and expanding EC2 into new form factors and deployment models that our customers in 2006 could not have imagined. ## Encrypt Amazon ECS traffic: VPC encryption controls and Service Connect TLS DevFeed: [Encrypt Amazon ECS traffic: VPC encryption controls and Service Connect TLS]() Original publisher: [Read original article]() Author: Simone Tallevi-Diotallevi Published: 2026-08-19T20:37:56Z Content type: tutorial Language: en Sources: [Containers]() Topics: [Cryptography]() Tags: [advanced-300](), [amazon-elastic-container-service](), [amazon-vpc](), [aws](), [aws-fargate](), [containers](), [encryption](), [how-to](), [logs](), [nitro-system](), [security](), [technical-how-to](), [tls](), [vpc](), [vpc-flow-logs]() ### AI overview A hands-on guide to encrypting traffic between Amazon ECS workloads with VPC encryption controls or Service Connect TLS. It covers activation on AWS Fargate and verification through VPC Flow Logs. ### Source excerpt Learn how to encrypt traffic between Amazon ECS workloads using two native approaches: VPC encryption controls for network-layer encryption through the AWS Nitro System, and Service Connect TLS for application-layer encryption. A hands-on walkthrough shows how to activate encryption on AWS Fargate and verify it in VPC Flow Logs. ## The hyperscale blueprint: Why cloud giants prioritize VMs for Kubernetes over bare metal DevFeed: [The hyperscale blueprint: Why cloud giants prioritize VMs for Kubernetes over bare metal]() Original publisher: [Read original article]() Author: Jack Wallen Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [virtualization](), [Kubernetes](), [Containers](), [Scalability](), [Security](), [Amazon Web Services](), [Nitro System](), [Multi-tenancy]() Tags: [aws](), [containers](), [kubernetes](), [multi-tenancy](), [nitro-system](), [scalability](), [security](), [virtual-machines](), [virtualization]() ### AI overview Cloud providers generally run Kubernetes and other containerized workloads on virtual machines rather than bare metal because virtualization offers security, isolation, flexibility, scalability, and near-bare-metal performance. AWS Nitro and Firecracker help reduce virtualization overhead, while bare metal remains reserved for specialized performance or hardware-access requirements. ### Source excerpt Why do cloud giants use VMs for Kubernetes? Learn why AWS, Azure, and Google prioritize Virtual Machines for containerized workloads over bare metal, focusing on security and scalability. ## EC2's formally verified "isolation engine" provides mathematical assurance of virtual-machine isolation DevFeed: [EC2's formally verified "isolation engine" provides mathematical assurance of virtual-machine isolation]() Original publisher: [Read original article]() Author: Dominic Mulligan; Nathan Chong Published: 2026-06-10T15:00:00Z Content type: article Language: en Sources: [Amazon Science homepage]() Topics: [Amazon EC2](), [Rust formal verification]() Tags: [amazon-web-services-aws](), [autocorrode-library](), [automated-reasoning](), [aws-graviton5-security](), [cloud-and-systems](), [confidentiality-integrity-proofs](), [ec2-virtual-machine-security](), [formal-verification](), [formally-verified-hypervisor](), [isabelle-hol-proof-assistant](), [kernel](), [memory-safety-verification](), [nitro-isolation-engine](), [nitro-system](), [provable-security](), [rust](), [rust-formal-verification](), [security](), [security-privacy-and-abuse-prevention]() ### AI overview Amazon describes formally verifying the Nitro Isolation Engine, a separation-kernel component that enforces isolation between EC2 virtual machines. The verification uses Isabelle/HOL and is deployed as an always-on feature for Graviton5 users. ### Source excerpt Splitting the "separation kernel" off from the rest of the Nitro security system and using only a subset of the Rust programming language to code it enabled its formal verification.