. Customers should generate their own key pairs in order to guarantee that they are unique, and not shared with other customers or with AWS.

The CPU provides four separate privilege modes: 0-3, called rings. Ring 0 is the most privileged and 3 the least. The host OS executes in Ring 0. However, rather than executing in Ring 0 as most operating systems do, the guest OS runs in a lesser-p...