[ RISC Box ]
a real machine breathing on the enclave's own CPU — you just hold the console

machine

idle
S3 credentials — needed unless the bucket allows public reads (held in enclave RAM only)