Interesting, how is this orchestration set up?

One way is to use something like https://shellbox.dev - you start new boxes and manage it all through ssh, icl agent running inside