[1996]

Yes it is, and using routing the IP can arrive everywhere in a tunnel, not just AWS.

You only need a good system administrator. I can get you in touch with friends who specializes in that. They will certainly recommend your /24 to be pointing to a more friendly provider of your choice, like one with a flat rate!

/24 with ASN -> friendly provider -> any ip goes where you want (digital ocean, aws, etc.)

But no, you can't prove you aren't MiM. Who has control of the /24 at any point could (ex: the 'friendly' provider)