6/ Amazon can't peek either. Nitro has no operator login, no SSH, and no way for any AWS employee to read enclave memory. AWS says this holds "including in fulfillment of a law enforcement request." NCC Group independently reviewed the design and found no gaps.