Cryptographic attestation is a process used to prove the identity of an enclave and verify that only authorized code is running your enclave. The attestation process is accomplished through the Nitro Hypervisor, which produces a signed attestation document for the enclave to prove its identity to another party or service. Attestation documents contain details of the enclave such as the enclave's public key, hashes of the enclave image and applications, and more. Nitro Enclaves includes AWS KMS integration, where KMS is able to read and verify these attestation documents sent from the enclave before re-encrypting data to an enclave-specific private key