The instance uses “Secure Boot” to make sure that only authenticated software is installed at the OS layer.