Notes on AWS Nitro Enclaves: Attack Surface