Memory and CPU isolation prevents the users, applications, and libraries on the parent EC2 instance from directly accessing the memory and CPU cores of the enclave. The enclave runs as a separate virtual machine to the EC2 instance that is used to create it.