Azure-Samples / microsoft-azure-attestation

Microsoft Azure Attestation is a solution for attesting Trusted Execution Environments (TEEs)
MIT License
30 stars 17 forks source link

More detailled documentation of the REST API of MAA #5

Open dhuynh95 opened 3 years ago

dhuynh95 commented 3 years ago

This issue is for a: (mark with an x)

- [ ] bug report -> please search issues before submitting
- [ ] feature request
- [ X] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Hello,

I really appreciate the work and have been able to run the sample on an ACC VM.

However, I would like to understand better how the REST API of Microsoft Azure Attestation works, but there is little documentation on it either on the docs (https://docs.microsoft.com/en-us/azure/attestation/overview) or on https://docs.microsoft.com/en-us/rest/api/attestation/

Could the process be described in more details? I more or less get how it works by reading the C# code, but a more explained documentation, with maybe a Python implementation could really help me.

Thank you

gkostal commented 3 years ago

@dhuynh95 - thank you for reaching out.

What problem you're trying to solve? Are you trying to get a handle on remote attestation in general? Are you trying to get a detailed understanding the MAA REST API's? Something else?

You mentioned that you've been able to run the sample code on an ACC VM. With this, you should be able to examine the specific requests and responses to/from the MAA service REST API.

If you're looking for a broader understanding of remote attestation, I suggest you take a look at the IETF Remote Attestation Procedures Architecture document which provides a solid grounding on the overall model for remote attestation.