Full post from eclypsium https://eclypsium.com/2019/01/26/the-missing-security-primer....

Also I assume aws baremetal servers are not vulnerable due to the nitro security card (https://m.youtube.com/watch?feature=youtu.be&v=e8DVmwj3OEs&t...).