In this instance amber is your remote signer. So amber holds your key. When a client wants to sign something, it reaches out to amber and asks amber to sign it (you approve)
Your key never leaves amb...
I like using Amber, but not all of the apps allow you to log in via bunker. But they almost always have a nsec log in, which I think they shouldn't because that's not safe.