Can I connect to dynamodb ? about aws-nitro-enclaves-cli HOT 6 OPEN

Hi @PabasaraDilshan,

I need the same.

What I did was adding an entry in /etc/nitro_enclaves/vsock-proxy.yaml, like this:

- {address: dynamodb.eu-central-1.amazonaws.com, port: 443}

Then re-start the vproxy, but I had not much luck. Maybe I did it in a wrong way. Have you tried that?

Thanks

from aws-nitro-enclaves-cli.

Hi @Xavina
I just written a service on parent instance to connect with the enclave via vsock and get and save data to dynamodb.

from aws-nitro-enclaves-cli.

Hi @PabasaraDilshan,

Yes, we did the same, a process in the EC2 host that communicates with the enclave through the vSock to send the Encrypted data, then the Enclave Decrypts it and returns back the Decrypted data to be stored in DynamoDB by the host.

We tried to communicate with DynamoDB from the Enclave, but looks like to not be possible at all, I guess it makes sense per design.

Thanks!

from aws-nitro-enclaves-cli.