[joombaga]

> Attackers can spin up machines right next to those that they are attacking and bypass much of the network related variables.

Can they? Do cloud providers typically short circuit routes within their public address space? At least in AWS, this is not the case unless e.g. vpc peering is used.

On second thought, even if the attacker egresses via their internet gateway, the next hop will be pretty close to their victim.